diff options
| author |  netblue30 <netblue30@yahoo.com> | 2020-10-27 09:35:41 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2020-10-27 09:35:41 -0400 |
| commit | 64a8d6a7f771e6457f7998335a8b88d60fe2b6ab (patch) | |
| tree | 709362b9b7465f371dc82c3c014ef1a3140c6309 /src/common.mk.in | |
| parent | Remove redundant read-only item (#3703) (diff) | |
| download | firejail-64a8d6a7f771e6457f7998335a8b88d60fe2b6ab.tar.gz firejail-64a8d6a7f771e6457f7998335a8b88d60fe2b6ab.tar.zst firejail-64a8d6a7f771e6457f7998335a8b88d60fe2b6ab.zip | |
compile time option to disable --private-cache and --tmpfs for regular user
Diffstat (limited to 'src/common.mk.in')
| -rw-r--r-- | src/common.mk.in | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/common.mk.in b/src/common.mk.in index c9ef455ed..b8a13cd1b 100644 --- a/src/common.mk.in +++ b/src/common.mk.in | |||
| @@ -24,6 +24,7 @@ HAVE_PRIVATE_HOME=@HAVE_PRIVATE_HOME@ | |||
| 24 | HAVE_GCOV=@HAVE_GCOV@ | 24 | HAVE_GCOV=@HAVE_GCOV@ |
| 25 | HAVE_SELINUX=@HAVE_SELINUX@ | 25 | HAVE_SELINUX=@HAVE_SELINUX@ |
| 26 | HAVE_DBUSPROXY=@HAVE_DBUSPROXY@ | 26 | HAVE_DBUSPROXY=@HAVE_DBUSPROXY@ |
| 27 | HAVE_USERTMPFS=@HAVE_USERTMPFS@ | ||
| 27 | 28 | ||
| 28 | H_FILE_LIST = $(sort $(wildcard *.[h])) | 29 | H_FILE_LIST = $(sort $(wildcard *.[h])) |
| 29 | C_FILE_LIST = $(sort $(wildcard *.c)) | 30 | C_FILE_LIST = $(sort $(wildcard *.c)) |
| @@ -33,7 +34,7 @@ BINOBJS = $(foreach file, $(OBJS), $file) | |||
| 33 | CFLAGS = @CFLAGS@ | 34 | CFLAGS = @CFLAGS@ |
| 34 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' $(HAVE_GCOV) | 35 | CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"' $(HAVE_GCOV) |
| 35 | CFLAGS += -DPREFIX='"$(prefix)"' -DSYSCONFDIR='"$(sysconfdir)/firejail"' -DLIBDIR='"$(libdir)"' -DBINDIR='"$(bindir)"' | 36 | CFLAGS += -DPREFIX='"$(prefix)"' -DSYSCONFDIR='"$(sysconfdir)/firejail"' -DLIBDIR='"$(libdir)"' -DBINDIR='"$(bindir)"' |
| 36 | MANFLAGS = $(HAVE_X11) $(HAVE_PRIVATE_HOME) $(HAVE_APPARMOR) $(HAVE_OVERLAYFS) $(HAVE_DBUSPROXY) $(HAVE_FIRETUNNEL) $(HAVE_GLOBALCFG) $(HAVE_CHROOT) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_FILE_TRANSFER) $(HAVE_WHITELIST) $(HAVE_SELINUX) | 37 | MANFLAGS = $(HAVE_X11) $(HAVE_PRIVATE_HOME) $(HAVE_APPARMOR) $(HAVE_OVERLAYFS) $(HAVE_USERTMPFS) $(HAVE_DBUSPROXY) $(HAVE_FIRETUNNEL) $(HAVE_GLOBALCFG) $(HAVE_CHROOT) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_FILE_TRANSFER) $(HAVE_WHITELIST) $(HAVE_SELINUX) |
| 37 | CFLAGS += $(MANFLAGS) | 38 | CFLAGS += $(MANFLAGS) |
| 38 | CFLAGS += -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -Wformat -Wformat-security | 39 | CFLAGS += -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -Wformat -Wformat-security |
| 39 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now -lpthread | 40 | LDFLAGS += -pie -fPIE -Wl,-z,relro -Wl,-z,now -lpthread |