buildsystem: add CONFIG_SECCOMP

[openwrt/staging/wigyori.git] / config / Config-build.in

diff --git a/config/Config-build.in b/config/Config-build.in
index f0e1aaa695d771be37589b666a38fc4ffeb8705f..ca6f513450a2f6c329bfcff17769c047cd9bf043 100644 (file)
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -386,4 +386,16 @@ menu "Global build settings"
 
        endchoice
 
+       config SECCOMP
+               bool "Enable SECCOMP"
+               select KERNEL_SECCOMP
+               select PACKAGE_procd-seccomp
+               depends on (aarch64 || arm || armeb || mips || mipsel || i386 || powerpc || x86_64)
+               depends on !TARGET_uml
+               default y
+               help
+                 This option enables seccomp kernel features to safely
+                 execute untrusted bytecode and selects the seccomp-variants
+                 of procd
+
 endmenu