Google Git
Sign in
android / platform / external / minijail / 6a600a4648cc91da6c1a586c67e076a519889343
commit6a600a4648cc91da6c1a586c67e076a519889343[log] [tgz]
authorJorge Lucangeli Obes <jorgelo@google.com>Fri Apr 07 15:53:06 2017 -0400
committerJorge Lucangeli Obes <jorgelo@google.com>Fri Apr 07 16:56:05 2017 -0400
tree1398700072d44ace49748c5e3b0fe7caf5d5f8b5
parentaccc5e5fef691ea2139df7471e0225297d8da5b7 [diff]
Linux: Change the default for seccomp soft-fail.

Make seccomp hard-fail by default, and soft-fail when USE_seccomp is
"no".

This simplifies building on Linux because most folks no longer have to
pass USE_seccomp=yes when building.

Bug: 37162444
Test: Builds with USE_seccomp=yes, with USE_seccomp=no, without.
Test: With USE_seccomp=yes and without produces the same binary.
Change-Id: I3821f5b7d2db78e334107263fed0a591695540a3
1 file changed
tree: 1398700072d44ace49748c5e3b0fe7caf5d5f8b5
  1. examples/
  2. linux-x86/
  3. test/
  4. tools/
  5. .clang-format
  6. .gitignore
  7. Android.mk
  8. AndroidTest.xml
  9. arch.h
  10. bpf.c
  11. bpf.h
  12. common.mk
  13. CPPLINT.cfg
  14. elfparse.c
  15. elfparse.h
  16. gen_constants.sh
  17. gen_syscalls.sh
  18. get_googletest.sh
  19. libconstants.h
  20. libminijail-private.h
  21. libminijail.c
  22. libminijail.h
  23. libminijail.pc.in
  24. libminijail_unittest.cc
  25. libminijailpreload.c
  26. libsyscalls.h
  27. Makefile
  28. minijail0.1
  29. minijail0.5
  30. minijail0.c
  31. MODULE_LICENSE_BSD
  32. NOTICE
  33. OWNERS
  34. parse_seccomp_policy.cc
  35. platform2_preinstall.sh
  36. PRESUBMIT.cfg
  37. PREUPLOAD.cfg
  38. scoped_minijail.h
  39. signal_handler.c
  40. signal_handler.h
  41. syscall_filter.c
  42. syscall_filter.h
  43. syscall_filter_unittest.cc
  44. syscall_filter_unittest_macros.h
  45. syscall_wrapper.c
  46. syscall_wrapper.h
  47. test_harness.h
  48. util.c
  49. util.h