summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGluzskiy Alexandr <sss@sss.chaoslab.ru>2018-10-17 14:21:02 +0300
committerGluzskiy Alexandr <sss@sss.chaoslab.ru>2018-10-17 14:21:02 +0300
commit5787b38898d83b800c4ed85bbc2334fc74663456 (patch)
tree0c4e7942fbee2014ca648071128a8866c536d29c
parentf60a140d04cbd8cd6296cd06f7a49fdc59959686 (diff)
firejail added
-rw-r--r--packages/sys-apps/firejail/firejail-0.9.56.exheres-06
-rw-r--r--packages/sys-apps/firejail/firejail-scm.exheres-06
-rw-r--r--packages/sys-apps/firejail/firejail.exlib29
3 files changed, 41 insertions, 0 deletions
diff --git a/packages/sys-apps/firejail/firejail-0.9.56.exheres-0 b/packages/sys-apps/firejail/firejail-0.9.56.exheres-0
new file mode 100644
index 0000000..85b279b
--- /dev/null
+++ b/packages/sys-apps/firejail/firejail-0.9.56.exheres-0
@@ -0,0 +1,6 @@
+# Copyright 2018 Gluzskiy Alexandr <sss@sss.chaoslab.ru>
+# Distributed under the terms of the GNU General Public License v2
+
+require firejail
+
+PLATFORMS="~amd64 ~x86"
diff --git a/packages/sys-apps/firejail/firejail-scm.exheres-0 b/packages/sys-apps/firejail/firejail-scm.exheres-0
new file mode 100644
index 0000000..85b279b
--- /dev/null
+++ b/packages/sys-apps/firejail/firejail-scm.exheres-0
@@ -0,0 +1,6 @@
+# Copyright 2018 Gluzskiy Alexandr <sss@sss.chaoslab.ru>
+# Distributed under the terms of the GNU General Public License v2
+
+require firejail
+
+PLATFORMS="~amd64 ~x86"
diff --git a/packages/sys-apps/firejail/firejail.exlib b/packages/sys-apps/firejail/firejail.exlib
new file mode 100644
index 0000000..e5639bd
--- /dev/null
+++ b/packages/sys-apps/firejail/firejail.exlib
@@ -0,0 +1,29 @@
+# Copyright 2018 Gluzskiy Alexandr <sss@sss.chaoslab.ru>
+# Distributed under the terms of the GNU General Public License v2
+
+require github [ user=netblue30 force_git_clone=true tag=${PV} ]
+#require autotools [ supported_autoconf=[ 2.5 ] supported_automake=[ 1.15 ] ]
+
+SUMMARY="Firejail is a SUID sandbox program"
+DESCRIPTION="Firejail is a SUID sandbox program that reduces the risk of security
+breaches by restricting the running environment of untrusted applications using
+Linux namespaces, seccomp-bpf and Linux capabilities. It allows a process and
+all its descendants to have their own private view of the globally shared kernel
+resources, such as the network stack, process table, mount table.
+Firejail can work in a SELinux or AppArmor environment,
+and it is integrated with Linux Control Groups."
+LICENCES="GPL-2"
+
+SLOT="0"
+MYOPTIONS="apparmor"
+DEPENDENCIES="
+ build+run:
+ apparmor? ( security/apparmor )
+"
+
+DEFAULT_SRC_CONFIGURE_OPTION_ENABLES=( apparmor )
+DEFAULT_SRC_CONFIGURE_PARAMS=(
+ --hates=disable-dependency-tracking
+ --hates=disable-silent-rules
+ --hates=enable-fast-install
+)