Commit f6041c1d authored Jul 05, 2016 by Olof Johansson Committed by Kees Cook Jul 07, 2016

samples/seccomp: Add standalone config option

Add a separate Kconfig option for SAMPLES_SECCOMP.

Main reason for this is that, just like other samples, it's forced to
be a module.

Without this, since the sample is a target only controlled by
CONFIG_SECCOMP_FILTER, the samples will be built before include files are
put in place properly. For example, from an arm64 allmodconfig built with
"make -sk -j 32" (without specific target), the following happens:

samples/seccomp/bpf-fancy.c:13:27: fatal error: linux/seccomp.h: No such file or directory
samples/seccomp/bpf-helper.h:20:50: fatal error: linux/seccomp.h: No such file or directory
samples/seccomp/dropper.c:20:27: fatal error: linux/seccomp.h: No such file or directory
samples/seccomp/bpf-direct.c:21:27: fatal error: linux/seccomp.h: No such file or directory

So, just stick to the same format as other samples.

Signed-off-by: Olof Johansson <olof@lixom.net>
Signed-off-by: Kees Cook <keescook@chromium.org>

parent d011a4d8

samples/Kconfig

+7 −0

Original line number	Diff line number	Diff line
		@@ -85,4 +85,11 @@ config SAMPLE_CONNECTOR
		with it.
		See also Documentation/connector/connector.txt

		config SAMPLE_SECCOMP
		tristate "Build seccomp sample code -- loadable modules only"
		depends on SECCOMP_FILTER && m
		help
		Build samples of seccomp filters using various methods of
		BPF filter construction.

		endif # SAMPLES

samples/seccomp/Makefile

+1 −1

Original line number	Diff line number	Diff line
		# kbuild trick to avoid linker error. Can be omitted if a module is built.
		obj- := dummy.o

		hostprogs-$(CONFIG_SECCOMP_FILTER) := bpf-fancy dropper bpf-direct
		hostprogs-$(CONFIG_SAMPLE_SECCOMP) := bpf-fancy dropper bpf-direct

		HOSTCFLAGS_bpf-fancy.o += -I$(objtree)/usr/include
		HOSTCFLAGS_bpf-fancy.o += -idirafter $(objtree)/include