mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-21 06:45:29 -06:00
108327c5a0
This flag disables the code which checks whether the current instance of firejail is running within a sandbox like LXC, chroot or firejail itself. If we want to develop firejail inside of a sandbox, to keep the "host system" clean of unnecessary installed dependencies and changes to the system, we might want to force firejail to run normally, so that we can test different profiles inside of the sandbox. This is only meant for people who are working on the firejail code, not someone attempting to run firejail inside of a sandbox as a user, because it needs to run as root and it can escape the sandbox easily.
121 lines
3 KiB
Makefile
121 lines
3 KiB
Makefile
# @configure_input@
|
|
#
|
|
# Configure-time variable definitions and any other common definition that can
|
|
# be safely included by all makefiles.
|
|
#
|
|
# Note: Do not define any targets on this file, as that could potentially end
|
|
# up overriding the includer's intended default target (which by default is the
|
|
# first target encountered).
|
|
MAKEFLAGS += -r
|
|
|
|
NAME=@PACKAGE_NAME@
|
|
TARNAME=@PACKAGE_TARNAME@
|
|
PACKAGE_TARNAME=@PACKAGE_TARNAME@ # needed by docdir
|
|
VERSION=@PACKAGE_VERSION@
|
|
|
|
prefix=@prefix@
|
|
exec_prefix=@exec_prefix@
|
|
bindir=@bindir@
|
|
libdir=@libdir@
|
|
datarootdir=@datarootdir@
|
|
docdir=@docdir@
|
|
mandir=@mandir@
|
|
sysconfdir=@sysconfdir@
|
|
|
|
# Misc flags
|
|
BUSYBOX_WORKAROUND=@BUSYBOX_WORKAROUND@
|
|
HAVE_CONTRIB_INSTALL=@HAVE_CONTRIB_INSTALL@
|
|
HAVE_FATAL_WARNINGS=@HAVE_FATAL_WARNINGS@
|
|
HAVE_GCOV=@HAVE_GCOV@
|
|
HAVE_MAN=@HAVE_MAN@
|
|
|
|
# MANFLAGS
|
|
HAVE_APPARMOR=@HAVE_APPARMOR@
|
|
HAVE_CHROOT=@HAVE_CHROOT@
|
|
HAVE_DBUSPROXY=@HAVE_DBUSPROXY@
|
|
HAVE_FILE_TRANSFER=@HAVE_FILE_TRANSFER@
|
|
HAVE_FORCE_NONEWPRIVS=@HAVE_FORCE_NONEWPRIVS@
|
|
HAVE_GLOBALCFG=@HAVE_GLOBALCFG@
|
|
HAVE_IDS=@HAVE_IDS@
|
|
HAVE_LANDLOCK=@HAVE_LANDLOCK@
|
|
HAVE_NETWORK=@HAVE_NETWORK@
|
|
HAVE_ONLY_SYSCFG_PROFILES=@HAVE_ONLY_SYSCFG_PROFILES@
|
|
HAVE_OUTPUT=@HAVE_OUTPUT@
|
|
HAVE_OVERLAYFS=@HAVE_OVERLAYFS@
|
|
HAVE_PRIVATE_HOME=@HAVE_PRIVATE_HOME@
|
|
HAVE_PRIVATE_LIB=@HAVE_PRIVATE_LIB@
|
|
HAVE_SANDBOX_CHECK=@HAVE_SANDBOX_CHECK@
|
|
HAVE_SELINUX=@HAVE_SELINUX@
|
|
HAVE_SUID=@HAVE_SUID@
|
|
HAVE_USERNS=@HAVE_USERNS@
|
|
HAVE_USERTMPFS=@HAVE_USERTMPFS@
|
|
HAVE_X11=@HAVE_X11@
|
|
|
|
MANFLAGS = \
|
|
$(HAVE_APPARMOR) \
|
|
$(HAVE_CHROOT) \
|
|
$(HAVE_DBUSPROXY) \
|
|
$(HAVE_FILE_TRANSFER) \
|
|
$(HAVE_FORCE_NONEWPRIVS) \
|
|
$(HAVE_GLOBALCFG) \
|
|
$(HAVE_IDS) \
|
|
$(HAVE_LANDLOCK) \
|
|
$(HAVE_NETWORK) \
|
|
$(HAVE_ONLY_SYSCFG_PROFILES) \
|
|
$(HAVE_OUTPUT) \
|
|
$(HAVE_OVERLAYFS) \
|
|
$(HAVE_PRIVATE_HOME) \
|
|
$(HAVE_PRIVATE_LIB) \
|
|
$(HAVE_SANDBOX_CHECK) \
|
|
$(HAVE_SELINUX) \
|
|
$(HAVE_SUID) \
|
|
$(HAVE_USERNS) \
|
|
$(HAVE_USERTMPFS) \
|
|
$(HAVE_X11)
|
|
|
|
# User variables - should not be modified in the code (as they are reserved for
|
|
# the user building the package); see the following for details:
|
|
# https://www.gnu.org/software/automake/manual/1.16.5/html_node/User-Variables.html
|
|
CC=@CC@
|
|
CODESPELL=@CODESPELL@
|
|
CPPCHECK=@CPPCHECK@
|
|
GAWK=@GAWK@
|
|
GZIP=@GZIP@
|
|
SCAN_BUILD=@SCAN_BUILD@
|
|
STRIP=@STRIP@
|
|
TAR=@TAR@
|
|
|
|
CFLAGS=@CFLAGS@
|
|
CPPFLAGS=@CPPFLAGS@
|
|
LDFLAGS=@LDFLAGS@
|
|
|
|
# Project variables
|
|
EXTRA_CFLAGS =@EXTRA_CFLAGS@
|
|
DEPS_CFLAGS =@DEPS_CFLAGS@
|
|
COMMON_CFLAGS = \
|
|
-ggdb -O2 -DVERSION='"$(VERSION)"' \
|
|
-Wall -Wextra $(HAVE_FATAL_WARNINGS) \
|
|
-Wformat -Wformat-security \
|
|
-fstack-protector-all \
|
|
-DPREFIX='"$(prefix)"' -DSYSCONFDIR='"$(sysconfdir)/firejail"' \
|
|
-DLIBDIR='"$(libdir)"' -DBINDIR='"$(bindir)"' \
|
|
-DVARDIR='"/var/lib/firejail"'
|
|
|
|
PROG_CFLAGS = \
|
|
$(COMMON_CFLAGS) \
|
|
$(HAVE_GCOV) $(MANFLAGS) \
|
|
$(EXTRA_CFLAGS) \
|
|
$(DEPS_CFLAGS) \
|
|
-fPIE
|
|
|
|
SO_CFLAGS = \
|
|
$(COMMON_CFLAGS) \
|
|
$(DEPS_CFLAGS) \
|
|
-fPIC
|
|
|
|
EXTRA_LDFLAGS =@EXTRA_LDFLAGS@
|
|
PROG_LDFLAGS = -Wl,-z,relro -Wl,-z,now -fPIE -pie $(EXTRA_LDFLAGS)
|
|
SO_LDFLAGS = -Wl,-z,relro -Wl,-z,now -fPIC
|
|
LIBS =@LIBS@
|
|
|
|
CLEANFILES = *.d *.o *.gcov *.gcda *.gcno *.plist
|