]> git.eshelyaron.com Git - emacs.git/commit
Add a helper binary to create a basic Secure Computing filter. scratch/seccomp
authorPhilipp Stephani <phst@google.com>
Thu, 17 Dec 2020 10:20:55 +0000 (11:20 +0100)
committerPhilipp Stephani <phst@google.com>
Tue, 29 Dec 2020 13:37:51 +0000 (14:37 +0100)
commit202a61d09cddf420ce2f18f86aea741f086022fd
tree567adc566589c3cda9cb3b4e615e575c34f3ec1c
parent2334f9bfa3f54a606d1748ab86ee9fd481369d7a
Add a helper binary to create a basic Secure Computing filter.

The binary uses the 'seccomp' helper library.  The library isn't
needed to load the generated Secure Computing filter.

* configure.ac: Check for 'seccomp' header and library.

* lib-src/seccomp-filter.c: New helper binary to generate a generic
Secure Computing filter for GNU/Linux.

* lib-src/Makefile.in (DONT_INSTALL): Add 'seccomp-filter' helper
binary if possible.
(all): Add Secure Computing filter file if possible.
(seccomp-filter$(EXEEXT)): Compile helper binary.
(seccomp-filter.bpf seccomp-filter.pfc): Generate filter files.

* test/src/emacs-tests.el (emacs-tests/seccomp/allows-stdout)
(emacs-tests/seccomp/forbids-subprocess): New unit tests.

* test/Makefile.in (src/emacs-tests.log): Add dependency on the helper
binary.
.gitignore
configure.ac
lib-src/Makefile.in
lib-src/seccomp-filter.c [new file with mode: 0644]
test/Makefile.in
test/src/emacs-resources/seccomp-filter.bpf [new symlink]
test/src/emacs-tests.el