diff options
| author | Tycho Andersen <tycho.andersen@canonical.com> | 2015-05-07 01:18:42 +0300 |
|---|---|---|
| committer | Pavel Emelyanov <xemul@parallels.com> | 2015-05-08 15:31:05 +0300 |
| commit | 5fe3a138df9d157e3e29c910ca9ff9186cd5ad7f (patch) | |
| tree | d86a611e933af5826f52c128422f6f5b86c686a4 /Makefile.config | |
| parent | a8b7e53b46cac77f55e3039d07b8404b43e22909 (diff) | |
lsm: add support for c/ring LSM profiles
This patch adds support for checkpoint and restore of two linux security
modules (apparmor and selinux). The actual checkpoint or restore code isn't
that interesting, other than that we have to do the LSM restore in the restorer
blob since it may block any number of things that we want to do as part of the
restore process.
I tried originally to get this to work using libraries in the restorer blob,
but I could _not_ get things to work correctly (I assume I was doing something
wrong with all the static linking, you can see my draft attempts here:
https://github.com/tych0/criu/commits/apparmor-using-libraries ). I can try to
resurrect this if it makes more sense, to do it that way, though.
v2: lsm_profile lives in creds.proto instead of the task core, look in a more
canonical place for selinuxfs and don't try to special case any selinux
profile names.
v3: only allow unconfined selinux profiles
Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com>
Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
Diffstat (limited to 'Makefile.config')
| -rw-r--r-- | Makefile.config | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/Makefile.config b/Makefile.config index ac54775fc..e1d2a3b8d 100644 --- a/Makefile.config +++ b/Makefile.config @@ -8,6 +8,11 @@ ifeq ($(call try-cc,$(LIBBSD_DEV_TEST),-lbsd),y) DEFINES += -DCONFIG_HAS_LIBBSD endif +ifeq ($(call pkg-config-check,libselinux),y) + LIBS := -lselinux $(LIBS) + DEFINES += -DCONFIG_HAS_SELINUX +endif + $(CONFIG): scripts/utilities.mak scripts/feature-tests.mak include/config-base.h $(E) " GEN " $@ $(Q) @echo '#ifndef __CR_CONFIG_H__' > $@ |