From: Daniel Golle <daniel@makrotopia.org>
Date: Fri, 6 Nov 2020 02:10:28 +0000 (+0000)
Subject: build: select procd-seccomp if kernel support is present
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=a7f794cd2aa104fdbd4c6e38f9b76373bf9b96e1;p=openwrt%2Fstaging%2Fldir.git

build: select procd-seccomp if kernel support is present

Install ld-preload hooks allowing to add seccomp filters for arbitrary
services if kernel support for seccomp is present.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
---

diff --git a/include/target.mk b/include/target.mk
index eac2d164c3..03192d3ebe 100644
--- a/include/target.mk
+++ b/include/target.mk
@@ -38,6 +38,11 @@ ifeq ($(CONFIG_SMALL_FLASH),)
 DEFAULT_PACKAGES+=procd-ujail
 endif
 
+# include seccomp ld-preload hooks if kernel supports it
+ifneq ($(CONFIG_KERNEL_SECCOMP),)
+DEFAULT_PACKAGES+=procd-seccomp
+endif
+
 # For the basic set
 DEFAULT_PACKAGES.basic:=
 # For nas targets