diff options
| author | Philipp Stephani <phst@google.com> | 2021-04-11 19:35:39 +0200 |
|---|---|---|
| committer | Philipp Stephani <phst@google.com> | 2021-04-11 20:46:59 +0200 |
| commit | 9a57897ea1a125782ff332814d3f978c38162cf8 (patch) | |
| tree | 1b87bc226702f6ac1b6640c0cadb8cf880ff9673 | |
| parent | ea5ea09244b762008bba509d8c58bad5835fb949 (diff) | |
| download | emacs-9a57897ea1a125782ff332814d3f978c38162cf8.tar.gz | |
Don't attempt to generate Seccomp filter file in Linux < 4.14.
Only Linux 4.14 and later contain the required support for
SECCOMP_RET_KILL_PROCESS.
* lib-src/Makefile.in (SECCOMP_FILTER): Define only if we run at least
Linux 4.14.
| -rw-r--r-- | lib-src/Makefile.in | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib-src/Makefile.in b/lib-src/Makefile.in index b4143b33554..35cfa56d8be 100644 --- a/lib-src/Makefile.in +++ b/lib-src/Makefile.in @@ -196,9 +196,15 @@ LIBSECCOMP_CFLAGS=@LIBSECCOMP_CFLAGS@ # Currently, we can only generate seccomp filter files for x86-64. ifeq ($(HAVE_LIBSECCOMP),yes) ifeq ($(shell uname -m),x86_64) +# We require SECCOMP_RET_KILL_PROCESS, which is only available in +# Linux 4.14 and later. +ifeq ($(shell { echo 4.14; uname -r | cut -d . -f 1-2; } | \ + sort -C -t . -n -k 1,1 -k 2,2 && \ + echo 1),1) SECCOMP_FILTER=1 endif endif +endif ifeq ($(SECCOMP_FILTER),1) DONT_INSTALL += seccomp-filter$(EXEEXT) |