diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-03-01 12:40:02 +0100 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2021-03-01 12:40:02 +0100 |
commit | b02d8f91c7fa2ba7c0e0b8a255952d4c8c86fc5e (patch) | |
tree | e50efc1e1dcb77e7b250fab9b0a50ca4b2082acf /configure.ac | |
parent | fixes (diff) | |
download | firejail-b02d8f91c7fa2ba7c0e0b8a255952d4c8c86fc5e.tar.gz firejail-b02d8f91c7fa2ba7c0e0b8a255952d4c8c86fc5e.tar.zst firejail-b02d8f91c7fa2ba7c0e0b8a255952d4c8c86fc5e.zip |
Add ./configure --enable-force-nonewprivs
This will always set 'nonewprivs', 'caps.drop all' and 'nogroups'.
Diffstat (limited to 'configure.ac')
-rw-r--r-- | configure.ac | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index 449b8b436..2654a2699 100644 --- a/configure.ac +++ b/configure.ac | |||
@@ -228,6 +228,14 @@ AS_IF([test "x$enable_contrib_install" = "xno"], | |||
228 | ) | 228 | ) |
229 | AC_SUBST(HAVE_CONTRIB_INSTALL) | 229 | AC_SUBST(HAVE_CONTRIB_INSTALL) |
230 | 230 | ||
231 | HAVE_FORCE_NONEWPRIVS="" | ||
232 | AC_ARG_ENABLE([force-nonewprivs], | ||
233 | AS_HELP_STRING([--enable-force-nonewprivs], [enable force nonewprivs])) | ||
234 | AS_IF([test "x$enable_force_nonewprivs" = "xyes"], [ | ||
235 | HAVE_FORCE_NONEWPRIVS="-DHAVE_FORCE_NONEWPRIVS" | ||
236 | AC_SUBST(HAVE_FORCE_NONEWPRIVS) | ||
237 | ]) | ||
238 | |||
231 | HAVE_LTS="" | 239 | HAVE_LTS="" |
232 | AC_ARG_ENABLE([lts], | 240 | AC_ARG_ENABLE([lts], |
233 | AS_HELP_STRING([--enable-lts], [enable long-term support software version (LTS)])) | 241 | AS_HELP_STRING([--enable-lts], [enable long-term support software version (LTS)])) |
@@ -330,6 +338,7 @@ echo " Gcov instrumentation: $HAVE_GCOV" | |||
330 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" | 338 | echo " Install contrib scripts: $HAVE_CONTRIB_INSTALL" |
331 | echo " Install as a SUID executable: $HAVE_SUID" | 339 | echo " Install as a SUID executable: $HAVE_SUID" |
332 | echo " LTS: $HAVE_LTS" | 340 | echo " LTS: $HAVE_LTS" |
341 | echo " Always enforce filters: $HAVE_FORCE_NONEWPRIVS" | ||
333 | echo | 342 | echo |
334 | 343 | ||
335 | 344 | ||