1 |
commit: b49c70025769eb840e0df421d4b1a17870ae9d38 |
2 |
Author: Mike Frysinger <vapier <AT> gentoo <DOT> org> |
3 |
AuthorDate: Fri Sep 24 14:21:14 2021 +0000 |
4 |
Commit: Mike Frysinger <vapier <AT> gentoo <DOT> org> |
5 |
CommitDate: Fri Sep 24 14:36:24 2021 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b49c7002 |
7 |
|
8 |
sys-apps/minijail: version bump to 17 |
9 |
|
10 |
Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org> |
11 |
|
12 |
sys-apps/minijail/Manifest | 1 + |
13 |
sys-apps/minijail/minijail-17.ebuild | 77 ++++++++++++++++++++++++++++++++++++ |
14 |
2 files changed, 78 insertions(+) |
15 |
|
16 |
diff --git a/sys-apps/minijail/Manifest b/sys-apps/minijail/Manifest |
17 |
index 4de10bcb332..1c7ceaf74b0 100644 |
18 |
--- a/sys-apps/minijail/Manifest |
19 |
+++ b/sys-apps/minijail/Manifest |
20 |
@@ -1 +1,2 @@ |
21 |
DIST minijail-12.tar.gz 157030 BLAKE2B 55a1bb2aeb31290c211da8b8322672abadab7a2729b0afd6eafce9854a51320a2515bedc54864debc7ede6e437607dad8532ae76c14828d6c4f4265fec404dbe SHA512 feb829fc113f0041b9ab25e845560af47408f3d5f0704cdf756d0b8162ae7aae331c350908c3b17a4a5593ffa7326044f222a35e6794471cd5ed60173b2befa2 |
22 |
+DIST minijail-17.tar.gz 212425 BLAKE2B 411a0e2f1af21dd689fa669f9658e78c3c3c6439fdbea01b41b1d0cb3cbc1dc017634177350a3d5392783201f80874ec2a1604ed2577dbf5d7dbdf584a087267 SHA512 4b9aa29a78f7525ffeedfb927f6b567044ff7c9d32ef0e6771ed2b5c2d47c7a14ccbe000efc988ce6bb4173c5a9ae734b222aac1a00fb0e60777d7dccc149acf |
23 |
|
24 |
diff --git a/sys-apps/minijail/minijail-17.ebuild b/sys-apps/minijail/minijail-17.ebuild |
25 |
new file mode 100644 |
26 |
index 00000000000..9f0c093fd99 |
27 |
--- /dev/null |
28 |
+++ b/sys-apps/minijail/minijail-17.ebuild |
29 |
@@ -0,0 +1,77 @@ |
30 |
+# Copyright 1999-2021 Gentoo Authors |
31 |
+# Distributed under the terms of the GNU General Public License v2 |
32 |
+ |
33 |
+EAPI="7" |
34 |
+ |
35 |
+inherit linux-info toolchain-funcs |
36 |
+ |
37 |
+DESCRIPTION="helper binary and library for sandboxing & restricting privs of service" |
38 |
+HOMEPAGE="https://android.googlesource.com/platform/external/minijail" |
39 |
+ |
40 |
+# Use GitHub mirror as Gitiles doesn't generate stable tarballs. |
41 |
+SRC_URI="https://github.com/google/${PN}/archive/linux-v${PV}.tar.gz -> ${P}.tar.gz" |
42 |
+ |
43 |
+LICENSE="BSD" |
44 |
+SLOT="0" |
45 |
+KEYWORDS="~amd64 ~riscv ~x86" |
46 |
+IUSE="+seccomp test" |
47 |
+RESTRICT="!test? ( test )" |
48 |
+ |
49 |
+RDEPEND="sys-libs/libcap-ng:=" |
50 |
+DEPEND="${RDEPEND} |
51 |
+ test? ( |
52 |
+ virtual/pkgconfig |
53 |
+ >=dev-cpp/gtest-1.8.0:= |
54 |
+ )" |
55 |
+ |
56 |
+S="${WORKDIR}/${PN}-linux-v${PV}" |
57 |
+ |
58 |
+PATCHES=( |
59 |
+ "${FILESDIR}/minijail-12-makefile.patch" |
60 |
+) |
61 |
+ |
62 |
+pkg_pretend() { |
63 |
+ local CONFIG_CHECK="~NAMESPACES ~UTS_NS ~IPC_NS ~USER_NS ~PID_NS ~NET_NS |
64 |
+ ~SECCOMP ~SECCOMP_FILTER ~CGROUPS" |
65 |
+ check_extra_config |
66 |
+} |
67 |
+ |
68 |
+src_configure() { |
69 |
+ export LIBDIR="/usr/$(get_libdir)" |
70 |
+ export USE_seccomp="$(usex seccomp)" |
71 |
+ export USE_SYSTEM_GTEST=yes |
72 |
+ if use test; then |
73 |
+ export GTEST_CXXFLAGS="$($(tc-getPKG_CONFIG) --cflags gtest_main)" |
74 |
+ export GTEST_LIBS="$($(tc-getPKG_CONFIG) --libs gtest_main)" |
75 |
+ else |
76 |
+ export GTEST_CXXFLAGS='' GTEST_LIBS='' |
77 |
+ fi |
78 |
+ export VERBOSE=1 |
79 |
+} |
80 |
+ |
81 |
+src_compile() { |
82 |
+ tc-env_build emake all parse_seccomp_policy |
83 |
+} |
84 |
+ |
85 |
+src_test() { |
86 |
+ GTEST_FILTER="-NamespaceTest.test_tmpfs_userns:NamespaceTest.test_namespaces" \ |
87 |
+ tc-env_build emake tests |
88 |
+} |
89 |
+ |
90 |
+src_install() { |
91 |
+ dosbin minijail0 |
92 |
+ dolib.so libminijail{,preload}.so |
93 |
+ dobin parse_seccomp_policy |
94 |
+ |
95 |
+ doman minijail0.[15] |
96 |
+ dodoc README.md |
97 |
+ |
98 |
+ local include_dir="/usr/include" |
99 |
+ |
100 |
+ "${S}"/platform2_preinstall.sh "${PV}" "${include_dir}" |
101 |
+ insinto "/usr/$(get_libdir)/pkgconfig" |
102 |
+ doins libminijail.pc |
103 |
+ |
104 |
+ insinto "${include_dir}" |
105 |
+ doins libminijail.h scoped_minijail.h |
106 |
+} |