• Philipp Stephani's avatar
    Add a helper binary to create a basic Secure Computing filter. · 1060289f
    Philipp Stephani authored
    The binary uses the 'seccomp' helper library.  The library isn't
    needed to load the generated Secure Computing filter.
    
    * configure.ac: Check for 'seccomp' header and library.
    
    * lib-src/seccomp-filter.c: New helper binary to generate a generic
    Secure Computing filter for GNU/Linux.
    
    * lib-src/Makefile.in (DONT_INSTALL): Add 'seccomp-filter' helper
    binary if possible.
    (all): Add Secure Computing filter file if possible.
    (seccomp-filter$(EXEEXT)): Compile helper binary.
    (seccomp-filter.bpf seccomp-filter.pfc): Generate filter files.
    
    * test/src/emacs-tests.el (emacs-tests/seccomp/allows-stdout)
    (emacs-tests/seccomp/forbids-subprocess): New unit tests.
    
    * test/Makefile.in (src/emacs-tests.log): Add dependency on the helper
    binary.
    1060289f
configure.ac 198 KB