From a7f794cd2aa104fdbd4c6e38f9b76373bf9b96e1 Mon Sep 17 00:00:00 2001 From: Daniel Golle Date: Fri, 6 Nov 2020 02:10:28 +0000 Subject: [PATCH] build: select procd-seccomp if kernel support is present Install ld-preload hooks allowing to add seccomp filters for arbitrary services if kernel support for seccomp is present. Signed-off-by: Daniel Golle --- include/target.mk | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/include/target.mk b/include/target.mk index eac2d164c3..03192d3ebe 100644 --- a/include/target.mk +++ b/include/target.mk @@ -38,6 +38,11 @@ ifeq ($(CONFIG_SMALL_FLASH),) DEFAULT_PACKAGES+=procd-ujail endif +# include seccomp ld-preload hooks if kernel supports it +ifneq ($(CONFIG_KERNEL_SECCOMP),) +DEFAULT_PACKAGES+=procd-seccomp +endif + # For the basic set DEFAULT_PACKAGES.basic:= # For nas targets