[PATCH 2/2] target: select procd-seccomp if kernel support is present
Daniel Golle
daniel at makrotopia.org
Sat Nov 7 09:18:12 EST 2020
Install ld-preload hooks allowing to add seccomp filters for arbitrary
services if kernel support for seccomp is present.
Signed-off-by: Daniel Golle <daniel at makrotopia.org>
---
include/target.mk | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/include/target.mk b/include/target.mk
index 7a74aceb59..d8cb0e6e58 100644
--- a/include/target.mk
+++ b/include/target.mk
@@ -41,6 +41,11 @@ ifeq ($(CONFIG_SMALL_FLASH),)
DEFAULT_PACKAGES+=procd-ujail
endif
+# include seccomp ld-preload hooks if kernel supports it
+ifneq ($(CONFIG_KERNEL_SECCOMP),)
+DEFAULT_PACKAGES+=procd-seccomp
+endif
+
# For the basic set
DEFAULT_PACKAGES.basic:=
# For nas targets
--
2.29.2
More information about the openwrt-devel
mailing list