procd: add selinux variant
[openwrt/staging/wigyori.git] / package / system / procd / Makefile
1 #
2 # Copyright (C) 2014-2016 OpenWrt.org
3 #
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
6 #
7
8 include $(TOPDIR)/rules.mk
9
10 PKG_NAME:=procd
11 PKG_RELEASE:=1
12
13 PKG_SOURCE_PROTO:=git
14 PKG_SOURCE_URL=$(PROJECT_GIT)/project/procd.git
15 PKG_SOURCE_DATE:=2020-08-10
16 PKG_SOURCE_VERSION:=fad899769e1411cc273785461f073a0f7931b9a0
17 PKG_MIRROR_HASH:=f56b621f78f821f7070d85f63448f684af7e2fe0c85233a8d054683cc34f6d06
18 CMAKE_INSTALL:=1
19
20 PKG_LICENSE:=GPL-2.0
21 PKG_LICENSE_FILES:=
22
23 PKG_MAINTAINER:=John Crispin <john@phrozen.org>
24
25 PKG_ASLR_PIE_REGULAR:=1
26 PKG_CONFIG_DEPENDS:= \
27 CONFIG_TARGET_INIT_PATH CONFIG_KERNEL_SECCOMP \
28 CONFIG_PROCD_SHOW_BOOT CONFIG_PROCD_ZRAM_TMPFS \
29 CONFIG_KERNEL_NAMESPACES CONFIG_PACKAGE_procd-ujail CONFIG_PACKAGE_procd-seccomp
30
31 include $(INCLUDE_DIR)/package.mk
32 include $(INCLUDE_DIR)/cmake.mk
33
34 ifeq ($(DUMP),)
35 STAMP_CONFIGURED:=$(strip $(STAMP_CONFIGURED))_$(shell echo $(CONFIG_TARGET_INIT_PATH) | mkhash md5)
36 endif
37
38 CMAKE_OPTIONS += -DEARLY_PATH="$(TARGET_INIT_PATH)"
39 TARGET_LDFLAGS += $(if $(CONFIG_USE_GLIBC),-lrt)
40
41 TARGET_CFLAGS += -flto
42 TARGET_LDFLAGS += -flto
43
44 define Package/procd/Default
45 SECTION:=base
46 CATEGORY:=Base system
47 DEPENDS:=+ubusd +ubus +libjson-script +ubox +USE_GLIBC:librt +libubox \
48 +libubus +libblobmsg-json +libjson-c
49 TITLE:=OpenWrt system process manager
50 USERID:=:dialout=20 :audio=29
51 endef
52
53 define Package/procd
54 $(call Package/procd/Default)
55 VARIANT:=default
56 CONFLICTS:=procd-selinux
57 endef
58
59 define Package/procd-selinux
60 $(call Package/procd/Default)
61 DEPENDS += +libselinux
62 TITLE += with SELinux support
63 PROVIDES:=procd
64 VARIANT:=selinux
65 endef
66
67 define Package/procd-ujail
68 SECTION:=base
69 CATEGORY:=Base system
70 DEPENDS:=@KERNEL_NAMESPACES +@KERNEL_UTS_NS +@KERNEL_IPC_NS +@KERNEL_PID_NS \
71 +libubox +libubus +libblobmsg-json
72 TITLE:=OpenWrt process jail helper
73 endef
74
75 define Package/procd-ujail-console
76 SECTION:=base
77 CATEGORY:=Base system
78 DEPENDS:=+procd-ujail +libubus +libubox
79 TITLE:=OpenWrt process jail console
80 endef
81
82 define Package/procd-seccomp
83 SECTION:=base
84 CATEGORY:=Base system
85 DEPENDS:=@(arm||armeb||mips||mipsel||i386||powerpc||x86_64) @!TARGET_uml \
86 @KERNEL_SECCOMP +libubox +libblobmsg-json
87 TITLE:=OpenWrt process seccomp helper + utrace
88 endef
89
90 define Package/uxc
91 SECTION:=base
92 CATEGORY:=Base system
93 DEPENDS:=+procd-ujail +libubus +libubox +libblobmsg-json
94 TITLE:=OpenWrt container management
95 MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
96 endef
97
98 define Package/procd/config
99 menu "Configuration"
100 depends on PACKAGE_procd || PACKAGE_procd-selinux
101
102 config PROCD_SHOW_BOOT
103 bool
104 default n
105 prompt "Print the shutdown to the console as well as logging it to syslog"
106
107 config PROCD_ZRAM_TMPFS
108 bool
109 default n
110 prompt "Mount /tmp using zram."
111 endmenu
112 endef
113
114 Package/procd-selinux/config = $(Package/procd/config)
115
116 ifeq ($(BUILD_VARIANT),selinux)
117 CMAKE_OPTIONS += -DSELINUX=1
118 endif
119
120 ifeq ($(CONFIG_PROCD_SHOW_BOOT),y)
121 CMAKE_OPTIONS += -DSHOW_BOOT_ON_CONSOLE=1
122 endif
123
124 ifeq ($(CONFIG_PROCD_ZRAM_TMPFS),y)
125 CMAKE_OPTIONS += -DZRAM_TMPFS=1
126 endif
127
128 ifdef CONFIG_PACKAGE_procd-ujail
129 CMAKE_OPTIONS += -DJAIL_SUPPORT=1
130 endif
131
132 SECCOMP=$(if $(CONFIG_PACKAGE_procd-seccomp),1,0)
133 CMAKE_OPTIONS += -DSECCOMP_SUPPORT=$(SECCOMP) -DUTRACE_SUPPORT=$(SECCOMP)
134
135 define Package/procd/install
136 $(INSTALL_DIR) $(1)/sbin $(1)/etc $(1)/lib/functions
137
138 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/{init,procd,askfirst,udevtrigger,upgraded} $(1)/sbin/
139 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libsetlbf.so $(1)/lib
140 $(INSTALL_BIN) ./files/reload_config $(1)/sbin/
141 $(INSTALL_CONF) ./files/hotplug*.json $(1)/etc/
142 $(INSTALL_DATA) ./files/procd.sh $(1)/lib/functions/
143 endef
144
145 Package/procd-selinux/install = $(Package/procd/install)
146
147 define Package/procd-ujail/install
148 $(INSTALL_DIR) $(1)/sbin
149 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ujail $(1)/sbin/
150 endef
151
152 define Package/procd-ujail-console/install
153 $(INSTALL_DIR) $(1)/sbin
154 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ujail-console $(1)/sbin/
155 endef
156
157 define Package/procd-seccomp/install
158 $(INSTALL_DIR) $(1)/sbin $(1)/lib
159 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libpreload-seccomp.so $(1)/lib
160 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/utrace $(1)/sbin/
161 $(LN) utrace $(1)/sbin/seccomp-trace
162 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libpreload-trace.so $(1)/lib
163 endef
164
165 define Package/uxc/conffiles
166 /etc/uxc
167 endef
168
169 define Package/uxc/install
170 $(INSTALL_DIR) $(1)/sbin
171 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/uxc $(1)/sbin/
172 $(INSTALL_DIR) $(1)/etc/init.d
173 $(INSTALL_BIN) ./files/uxc.init $(1)/etc/init.d/uxc
174 endef
175
176 $(eval $(call BuildPackage,procd))
177 $(eval $(call BuildPackage,procd-selinux))
178 $(eval $(call BuildPackage,procd-ujail))
179 $(eval $(call BuildPackage,procd-ujail-console))
180 $(eval $(call BuildPackage,procd-seccomp))
181 $(eval $(call BuildPackage,uxc))