blob: 764217b217376f8ce84c7d85d1fc934656593e30 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
config BR2_PACKAGE_FIREJAIL
bool "firejail"
depends on BROKEN # does not cross-compile at all
depends on BR2_USE_MMU # fork()
depends on BR2_TOOLCHAIN_HAS_THREADS
# uClibc: error: ‘EM_ARM’ undeclared
depends on !BR2_TOOLCHAIN_USES_UCLIBC
help
Firejail is a SUID program that reduces the risk of security
breaches by restricting the running environment of untrusted
applications using Linux namespaces and seccomp-bpf. It
allows a process and all its descendants to have their own
private view of the globally shared kernel resources, such
as the network stack, process table, mount table.
https://firejail.wordpress.com/
comment "firejail needs a glibc or musl toolchain w/ threads"
depends on BR2_USE_MMU
depends on BROKEN
depends on BR2_TOOLCHAIN_USES_UCLIBC || !BR2_TOOLCHAIN_HAS_THREADS
|
