@ -24,7 +24,8 @@ PKG_LICENSE_FILES:=
PKG_MAINTAINER := John Crispin <blogic@openwrt.org>
PKG_MAINTAINER := John Crispin <blogic@openwrt.org>
PKG_CONFIG_DEPENDS := CONFIG_KERNEL_SECCOMP CONFIG_NAND_SUPPORT CONFIG_PROCD_SHOW_BOOT CONFIG_PROCD_ZRAM_TMPFS CONFIG_PROCD_JAIL_SUPPORT
PKG_CONFIG_DEPENDS := CONFIG_KERNEL_SECCOMP CONFIG_NAND_SUPPORT CONFIG_PROCD_SHOW_BOOT CONFIG_PROCD_ZRAM_TMPFS \
CONFIG_KERNEL_NAMESPACES CONFIG_PACKAGE_procd-ujail CONFIG_PACKAGE_procd-seccomp
i n c l u d e $( INCLUDE_DIR ) / p a c k a g e . m k
i n c l u d e $( INCLUDE_DIR ) / p a c k a g e . m k
i n c l u d e $( INCLUDE_DIR ) / c m a k e . m k
i n c l u d e $( INCLUDE_DIR ) / c m a k e . m k
@ -38,12 +39,18 @@ define Package/procd
TITLE:= OpenWrt system process manager
TITLE:= OpenWrt system process manager
e n d e f
e n d e f
d e f i n e P a c k a g e / p r o c d - j a i l
d e f i n e P a c k a g e / p r o c d - u j a i l
SECTION:= base
SECTION:= base
CATEGORY:= Base system
CATEGORY:= Base system
DEPENDS:= procd +@KERNEL_NAMESPACES +@KERNEL_UTS_NS +@KERNEL_IPC_NS +@KERNEL_PID_NS @PROCD_JAIL_SUPPORT
DEPENDS:= @KERNEL_NAMESPACES +@KERNEL_UTS_NS +@KERNEL_IPC_NS +@KERNEL_PID_NS +libubox +libblobmsg-json
TITLE:= OpenWrt process jail
TITLE:= OpenWrt process jail helper
DEFAULT:= n
e n d e f
d e f i n e P a c k a g e / p r o c d - s e c c o m p
SECTION:= base
CATEGORY:= Base system
DEPENDS:= @arm|| @armeb|| @mips|| @mipsel|| @i386|| @x86_64 @!TARGET_uml @KERNEL_SECCOMP +libubox +libblobmsg-json
TITLE:= OpenWrt process seccomp helper + utrace
e n d e f
e n d e f
d e f i n e P a c k a g e / p r o c d - n a n d
d e f i n e P a c k a g e / p r o c d - n a n d
@ -73,16 +80,6 @@ config PROCD_ZRAM_TMPFS
bool
bool
default n
default n
prompt "Mount /tmp using zram."
prompt "Mount /tmp using zram."
c o n f i g P R O C D _ J A I L _ S U P P O R T
bool
default y
depends on ( arm || armeb || mips || mipsel || i386 || x86_64) && PROCD_SECCOMP_SUPPORT
c o n f i g P R O C D _ S E C C O M P _ S U P P O R T
bool
default y
depends on ( arm || armeb || mips || mipsel || i386 || x86_64) && !TARGET_uml && @KERNEL_SECCOMP
e n d m e n u
e n d m e n u
e n d e f
e n d e f
@ -99,12 +96,12 @@ ifeq ($(CONFIG_PROCD_ZRAM_TMPFS),y)
CMAKE_OPTIONS += -DZRAM_TMPFS= 1
CMAKE_OPTIONS += -DZRAM_TMPFS= 1
e n d i f
e n d i f
i f e q ( $( CONFIG_PROCD_JAIL_SUPPORT ) , y )
i f d e f C O N F I G _ P A C K A G E _ p r o c d - u j a i l
CMAKE_OPTIONS += -DJAIL_SUPPORT= 1
CMAKE_OPTIONS += -DJAIL_SUPPORT= 1
e n d i f
e n d i f
i f e q ( $( CONFIG_PROCD_SECCOMP_SUPPORT ) , y )
i f d e f C O N F I G _ P A C K A G E _ p r o c d - s e c c o m p
CMAKE_OPTIONS += -DSECCOMP_SUPPORT= 1
CMAKE_OPTIONS += -DSECCOMP_SUPPORT= 1 -DUTRACE_SUPPORT= 1
e n d i f
e n d i f
d e f i n e P a c k a g e / p r o c d / i n s t a l l
d e f i n e P a c k a g e / p r o c d / i n s t a l l
@ -115,15 +112,17 @@ define Package/procd/install
$( INSTALL_BIN) ./files/reload_config $( 1) /sbin/
$( INSTALL_BIN) ./files/reload_config $( 1) /sbin/
$( INSTALL_DATA) ./files/hotplug*.json $( 1) /etc/
$( INSTALL_DATA) ./files/hotplug*.json $( 1) /etc/
$( INSTALL_DATA) ./files/procd.sh $( 1) /lib/functions/
$( INSTALL_DATA) ./files/procd.sh $( 1) /lib/functions/
i f e q ( $( CONFIG_PROCD_SECCOMP_SUPPORT ) , y )
$( INSTALL_DATA) $( PKG_INSTALL_DIR) /usr/lib/libpreload-seccomp.so $( 1) /lib
e n d i f
e n d e f
e n d e f
d e f i n e P a c k a g e / p r o c d - j a i l / i n s t a l l
d e f i n e P a c k a g e / p r o c d - u j a i l / i n s t a l l
$( INSTALL_DIR) $( 1) /sbin $( 1) /lib
$( INSTALL_DIR) $( 1) /sbin
$( INSTALL_BIN) $( PKG_INSTALL_DIR) /usr/sbin/ujail $( 1) /sbin/
e n d e f
$( INSTALL_BIN) $( PKG_INSTALL_DIR) /usr/sbin/{ utrace,ujail} $( 1) /sbin/
d e f i n e P a c k a g e / p r o c d - s e c c o m p / i n s t a l l
$( INSTALL_DIR) $( 1) /sbin $( 1) /lib
$( INSTALL_DATA) $( PKG_INSTALL_DIR) /usr/lib/libpreload-seccomp.so $( 1) /lib
$( INSTALL_BIN) $( PKG_INSTALL_DIR) /usr/sbin/utrace $( 1) /sbin/
$( INSTALL_DATA) $( PKG_INSTALL_DIR) /usr/lib/libpreload-trace.so $( 1) /lib
$( INSTALL_DATA) $( PKG_INSTALL_DIR) /usr/lib/libpreload-trace.so $( 1) /lib
e n d e f
e n d e f
@ -141,6 +140,7 @@ define Package/procd-nand-firstboot/install
e n d e f
e n d e f
$( eval $ ( call BuildPackage ,procd ) )
$( eval $ ( call BuildPackage ,procd ) )
$( eval $ ( call BuildPackage ,procd -jail ) )
$( eval $ ( call BuildPackage ,procd -ujail ) )
$( eval $ ( call BuildPackage ,procd -seccomp ) )
$( eval $ ( call BuildPackage ,procd -nand ) )
$( eval $ ( call BuildPackage ,procd -nand ) )
$( eval $ ( call BuildPackage ,procd -nand -firstboot ) )
$( eval $ ( call BuildPackage ,procd -nand -firstboot ) )