[gentoo-dev] [RFC] Make "seccomp" USE flag global

[Andrew Savchenko]

Hello,

at this moment 8 packages uses "seccomp" flag:

app-admin/clsync
app-emulation/qemu
app-emulation/lxc
net-dns/bind
net-misc/tlsdate
net-misc/tor
net-misc/lldpd
sys-apps/systemd

for the very same reason: enable seccomp filtering to improve
security. Some of them use seccomp directly via system calls, while
other rely on sys-libs/libseccomp, but this should have no
difference for users.

I propose to add global "seccomp" USE flag as follows:

seccomp - Enable seccomp for system call filtering

and remove local descriptions for affected packages.

Comments?

Best regards,
Andrew Savchenko