diff options
Diffstat (limited to 'configure')
-rwxr-xr-x | configure | 568 |
1 files changed, 359 insertions, 209 deletions
@@ -1,6 +1,6 @@ | |||
1 | #! /bin/sh | 1 | #! /bin/sh |
2 | # Guess values for system-dependent variables and create Makefiles. | 2 | # Guess values for system-dependent variables and create Makefiles. |
3 | # Generated by GNU Autoconf 2.69 for firejail 0.9.40-rc2. | 3 | # Generated by GNU Autoconf 2.69 for firejail 0.9.45. |
4 | # | 4 | # |
5 | # Report bugs to <netblue30@yahoo.com>. | 5 | # Report bugs to <netblue30@yahoo.com>. |
6 | # | 6 | # |
@@ -580,8 +580,8 @@ MAKEFLAGS= | |||
580 | # Identity of this package. | 580 | # Identity of this package. |
581 | PACKAGE_NAME='firejail' | 581 | PACKAGE_NAME='firejail' |
582 | PACKAGE_TARNAME='firejail' | 582 | PACKAGE_TARNAME='firejail' |
583 | PACKAGE_VERSION='0.9.40-rc2' | 583 | PACKAGE_VERSION='0.9.45' |
584 | PACKAGE_STRING='firejail 0.9.40-rc2' | 584 | PACKAGE_STRING='firejail 0.9.45' |
585 | PACKAGE_BUGREPORT='netblue30@yahoo.com' | 585 | PACKAGE_BUGREPORT='netblue30@yahoo.com' |
586 | PACKAGE_URL='http://firejail.wordpress.com' | 586 | PACKAGE_URL='http://firejail.wordpress.com' |
587 | 587 | ||
@@ -625,17 +625,25 @@ ac_includes_default="\ | |||
625 | ac_subst_vars='LTLIBOBJS | 625 | ac_subst_vars='LTLIBOBJS |
626 | LIBOBJS | 626 | LIBOBJS |
627 | HAVE_SECCOMP_H | 627 | HAVE_SECCOMP_H |
628 | EGREP | 628 | HAVE_GCOV |
629 | GREP | 629 | BUSYBOX_WORKAROUND |
630 | CPP | ||
631 | HAVE_FATAL_WARNINGS | 630 | HAVE_FATAL_WARNINGS |
631 | HAVE_WHITELIST | ||
632 | HAVE_FILE_TRANSFER | 632 | HAVE_FILE_TRANSFER |
633 | HAVE_X11 | 633 | HAVE_X11 |
634 | HAVE_USERNS | 634 | HAVE_USERNS |
635 | HAVE_NETWORK | 635 | HAVE_NETWORK |
636 | HAVE_GLOBALCFG | ||
636 | HAVE_BIND | 637 | HAVE_BIND |
637 | HAVE_CHROOT | 638 | HAVE_CHROOT |
638 | HAVE_SECCOMP | 639 | HAVE_SECCOMP |
640 | HAVE_PRIVATE_HOME | ||
641 | HAVE_OVERLAYFS | ||
642 | EXTRA_LDFLAGS | ||
643 | EGREP | ||
644 | GREP | ||
645 | CPP | ||
646 | HAVE_APPARMOR | ||
639 | RANLIB | 647 | RANLIB |
640 | INSTALL_DATA | 648 | INSTALL_DATA |
641 | INSTALL_SCRIPT | 649 | INSTALL_SCRIPT |
@@ -688,14 +696,21 @@ SHELL' | |||
688 | ac_subst_files='' | 696 | ac_subst_files='' |
689 | ac_user_opts=' | 697 | ac_user_opts=' |
690 | enable_option_checking | 698 | enable_option_checking |
699 | enable_apparmor | ||
700 | enable_overlayfs | ||
701 | enable_private_home | ||
691 | enable_seccomp | 702 | enable_seccomp |
692 | enable_chroot | 703 | enable_chroot |
693 | enable_bind | 704 | enable_bind |
705 | enable_globalcfg | ||
694 | enable_network | 706 | enable_network |
695 | enable_userns | 707 | enable_userns |
696 | enable_x11 | 708 | enable_x11 |
697 | enable_file_transfer | 709 | enable_file_transfer |
710 | enable_whitelist | ||
698 | enable_fatal_warnings | 711 | enable_fatal_warnings |
712 | enable_busybox_workaround | ||
713 | enable_gcov | ||
699 | ' | 714 | ' |
700 | ac_precious_vars='build_alias | 715 | ac_precious_vars='build_alias |
701 | host_alias | 716 | host_alias |
@@ -1246,7 +1261,7 @@ if test "$ac_init_help" = "long"; then | |||
1246 | # Omit some internal or obsolete options to make the list less imposing. | 1261 | # Omit some internal or obsolete options to make the list less imposing. |
1247 | # This message is too long to be a string in the A/UX 3.1 sh. | 1262 | # This message is too long to be a string in the A/UX 3.1 sh. |
1248 | cat <<_ACEOF | 1263 | cat <<_ACEOF |
1249 | \`configure' configures firejail 0.9.40-rc2 to adapt to many kinds of systems. | 1264 | \`configure' configures firejail 0.9.45 to adapt to many kinds of systems. |
1250 | 1265 | ||
1251 | Usage: $0 [OPTION]... [VAR=VALUE]... | 1266 | Usage: $0 [OPTION]... [VAR=VALUE]... |
1252 | 1267 | ||
@@ -1307,7 +1322,7 @@ fi | |||
1307 | 1322 | ||
1308 | if test -n "$ac_init_help"; then | 1323 | if test -n "$ac_init_help"; then |
1309 | case $ac_init_help in | 1324 | case $ac_init_help in |
1310 | short | recursive ) echo "Configuration of firejail 0.9.40-rc2:";; | 1325 | short | recursive ) echo "Configuration of firejail 0.9.45:";; |
1311 | esac | 1326 | esac |
1312 | cat <<\_ACEOF | 1327 | cat <<\_ACEOF |
1313 | 1328 | ||
@@ -1315,16 +1330,25 @@ Optional Features: | |||
1315 | --disable-option-checking ignore unrecognized --enable/--with options | 1330 | --disable-option-checking ignore unrecognized --enable/--with options |
1316 | --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) | 1331 | --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) |
1317 | --enable-FEATURE[=ARG] include FEATURE [ARG=yes] | 1332 | --enable-FEATURE[=ARG] include FEATURE [ARG=yes] |
1333 | --enable-apparmor enable apparmor | ||
1334 | --disable-overlayfs disable overlayfs | ||
1335 | --disable-private-home disable private home feature | ||
1318 | --disable-seccomp disable seccomp | 1336 | --disable-seccomp disable seccomp |
1319 | --disable-chroot disable chroot | 1337 | --disable-chroot disable chroot |
1320 | --disable-bind disable bind | 1338 | --disable-bind disable bind |
1339 | --disable-globalcfg if the global config file firejail.cfg is not | ||
1340 | present, continue the program using defaults | ||
1321 | --disable-network disable network | 1341 | --disable-network disable network |
1322 | --enable-network=restricted | 1342 | --enable-network=restricted |
1323 | restrict --net= to root only | 1343 | restrict --net= to root only |
1324 | --disable-userns disable user namespace | 1344 | --disable-userns disable user namespace |
1325 | --disable-x11 disable X11 sandboxing support | 1345 | --disable-x11 disable X11 sandboxing support |
1326 | --disable-file-transfer disable file transfer | 1346 | --disable-file-transfer disable file transfer |
1347 | --disable-whitelist disable whitelist | ||
1327 | --enable-fatal-warnings -W -Wall -Werror | 1348 | --enable-fatal-warnings -W -Wall -Werror |
1349 | --enable-busybox-workaround | ||
1350 | enable busybox workaround | ||
1351 | --enable-gcov Gcov instrumentation | ||
1328 | 1352 | ||
1329 | Some influential environment variables: | 1353 | Some influential environment variables: |
1330 | CC C compiler command | 1354 | CC C compiler command |
@@ -1403,7 +1427,7 @@ fi | |||
1403 | test -n "$ac_init_help" && exit $ac_status | 1427 | test -n "$ac_init_help" && exit $ac_status |
1404 | if $ac_init_version; then | 1428 | if $ac_init_version; then |
1405 | cat <<\_ACEOF | 1429 | cat <<\_ACEOF |
1406 | firejail configure 0.9.40-rc2 | 1430 | firejail configure 0.9.45 |
1407 | generated by GNU Autoconf 2.69 | 1431 | generated by GNU Autoconf 2.69 |
1408 | 1432 | ||
1409 | Copyright (C) 2012 Free Software Foundation, Inc. | 1433 | Copyright (C) 2012 Free Software Foundation, Inc. |
@@ -1455,52 +1479,6 @@ fi | |||
1455 | 1479 | ||
1456 | } # ac_fn_c_try_compile | 1480 | } # ac_fn_c_try_compile |
1457 | 1481 | ||
1458 | # ac_fn_c_try_link LINENO | ||
1459 | # ----------------------- | ||
1460 | # Try to link conftest.$ac_ext, and return whether this succeeded. | ||
1461 | ac_fn_c_try_link () | ||
1462 | { | ||
1463 | as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack | ||
1464 | rm -f conftest.$ac_objext conftest$ac_exeext | ||
1465 | if { { ac_try="$ac_link" | ||
1466 | case "(($ac_try" in | ||
1467 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
1468 | *) ac_try_echo=$ac_try;; | ||
1469 | esac | ||
1470 | eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" | ||
1471 | $as_echo "$ac_try_echo"; } >&5 | ||
1472 | (eval "$ac_link") 2>conftest.err | ||
1473 | ac_status=$? | ||
1474 | if test -s conftest.err; then | ||
1475 | grep -v '^ *+' conftest.err >conftest.er1 | ||
1476 | cat conftest.er1 >&5 | ||
1477 | mv -f conftest.er1 conftest.err | ||
1478 | fi | ||
1479 | $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 | ||
1480 | test $ac_status = 0; } && { | ||
1481 | test -z "$ac_c_werror_flag" || | ||
1482 | test ! -s conftest.err | ||
1483 | } && test -s conftest$ac_exeext && { | ||
1484 | test "$cross_compiling" = yes || | ||
1485 | test -x conftest$ac_exeext | ||
1486 | }; then : | ||
1487 | ac_retval=0 | ||
1488 | else | ||
1489 | $as_echo "$as_me: failed program was:" >&5 | ||
1490 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
1491 | |||
1492 | ac_retval=1 | ||
1493 | fi | ||
1494 | # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information | ||
1495 | # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would | ||
1496 | # interfere with the next link command; also delete a directory that is | ||
1497 | # left behind by Apple's compiler. We do this before executing the actions. | ||
1498 | rm -rf conftest.dSYM conftest_ipa8_conftest.oo | ||
1499 | eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno | ||
1500 | as_fn_set_status $ac_retval | ||
1501 | |||
1502 | } # ac_fn_c_try_link | ||
1503 | |||
1504 | # ac_fn_c_try_cpp LINENO | 1482 | # ac_fn_c_try_cpp LINENO |
1505 | # ---------------------- | 1483 | # ---------------------- |
1506 | # Try to preprocess conftest.$ac_ext, and return whether this succeeded. | 1484 | # Try to preprocess conftest.$ac_ext, and return whether this succeeded. |
@@ -1701,11 +1679,57 @@ $as_echo "$ac_res" >&6; } | |||
1701 | eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno | 1679 | eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno |
1702 | 1680 | ||
1703 | } # ac_fn_c_check_header_compile | 1681 | } # ac_fn_c_check_header_compile |
1682 | |||
1683 | # ac_fn_c_try_link LINENO | ||
1684 | # ----------------------- | ||
1685 | # Try to link conftest.$ac_ext, and return whether this succeeded. | ||
1686 | ac_fn_c_try_link () | ||
1687 | { | ||
1688 | as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack | ||
1689 | rm -f conftest.$ac_objext conftest$ac_exeext | ||
1690 | if { { ac_try="$ac_link" | ||
1691 | case "(($ac_try" in | ||
1692 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
1693 | *) ac_try_echo=$ac_try;; | ||
1694 | esac | ||
1695 | eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" | ||
1696 | $as_echo "$ac_try_echo"; } >&5 | ||
1697 | (eval "$ac_link") 2>conftest.err | ||
1698 | ac_status=$? | ||
1699 | if test -s conftest.err; then | ||
1700 | grep -v '^ *+' conftest.err >conftest.er1 | ||
1701 | cat conftest.er1 >&5 | ||
1702 | mv -f conftest.er1 conftest.err | ||
1703 | fi | ||
1704 | $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 | ||
1705 | test $ac_status = 0; } && { | ||
1706 | test -z "$ac_c_werror_flag" || | ||
1707 | test ! -s conftest.err | ||
1708 | } && test -s conftest$ac_exeext && { | ||
1709 | test "$cross_compiling" = yes || | ||
1710 | test -x conftest$ac_exeext | ||
1711 | }; then : | ||
1712 | ac_retval=0 | ||
1713 | else | ||
1714 | $as_echo "$as_me: failed program was:" >&5 | ||
1715 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
1716 | |||
1717 | ac_retval=1 | ||
1718 | fi | ||
1719 | # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information | ||
1720 | # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would | ||
1721 | # interfere with the next link command; also delete a directory that is | ||
1722 | # left behind by Apple's compiler. We do this before executing the actions. | ||
1723 | rm -rf conftest.dSYM conftest_ipa8_conftest.oo | ||
1724 | eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno | ||
1725 | as_fn_set_status $ac_retval | ||
1726 | |||
1727 | } # ac_fn_c_try_link | ||
1704 | cat >config.log <<_ACEOF | 1728 | cat >config.log <<_ACEOF |
1705 | This file contains any messages produced by compilers while | 1729 | This file contains any messages produced by compilers while |
1706 | running configure, to aid debugging if configure makes a mistake. | 1730 | running configure, to aid debugging if configure makes a mistake. |
1707 | 1731 | ||
1708 | It was created by firejail $as_me 0.9.40-rc2, which was | 1732 | It was created by firejail $as_me 0.9.45, which was |
1709 | generated by GNU Autoconf 2.69. Invocation command line was | 1733 | generated by GNU Autoconf 2.69. Invocation command line was |
1710 | 1734 | ||
1711 | $ $0 $@ | 1735 | $ $0 $@ |
@@ -3062,164 +3086,20 @@ else | |||
3062 | fi | 3086 | fi |
3063 | 3087 | ||
3064 | 3088 | ||
3065 | HAVE_SECCOMP="" | 3089 | HAVE_APPARMOR="" |
3066 | # Check whether --enable-seccomp was given. | 3090 | # Check whether --enable-apparmor was given. |
3067 | if test "${enable_seccomp+set}" = set; then : | 3091 | if test "${enable_apparmor+set}" = set; then : |
3068 | enableval=$enable_seccomp; | 3092 | enableval=$enable_apparmor; |
3069 | fi | ||
3070 | |||
3071 | if test "x$enable_seccomp" != "xno"; then : | ||
3072 | |||
3073 | HAVE_SECCOMP="-DHAVE_SECCOMP" | ||
3074 | |||
3075 | |||
3076 | fi | ||
3077 | |||
3078 | HAVE_CHROOT="" | ||
3079 | # Check whether --enable-chroot was given. | ||
3080 | if test "${enable_chroot+set}" = set; then : | ||
3081 | enableval=$enable_chroot; | ||
3082 | fi | ||
3083 | |||
3084 | if test "x$enable_chroot" != "xno"; then : | ||
3085 | |||
3086 | HAVE_CHROOT="-DHAVE_CHROOT" | ||
3087 | |||
3088 | |||
3089 | fi | ||
3090 | |||
3091 | HAVE_BIND="" | ||
3092 | # Check whether --enable-bind was given. | ||
3093 | if test "${enable_bind+set}" = set; then : | ||
3094 | enableval=$enable_bind; | ||
3095 | fi | ||
3096 | |||
3097 | if test "x$enable_bind" != "xno"; then : | ||
3098 | |||
3099 | HAVE_BIND="-DHAVE_BIND" | ||
3100 | |||
3101 | |||
3102 | fi | ||
3103 | |||
3104 | HAVE_NETWORK="" | ||
3105 | # Check whether --enable-network was given. | ||
3106 | if test "${enable_network+set}" = set; then : | ||
3107 | enableval=$enable_network; | ||
3108 | fi | ||
3109 | |||
3110 | # Check whether --enable-network was given. | ||
3111 | if test "${enable_network+set}" = set; then : | ||
3112 | enableval=$enable_network; | ||
3113 | fi | ||
3114 | |||
3115 | if test "x$enable_network" != "xno"; then : | ||
3116 | |||
3117 | HAVE_NETWORK="-DHAVE_NETWORK" | ||
3118 | if test "x$enable_network" = "xrestricted"; then : | ||
3119 | |||
3120 | HAVE_NETWORK="$HAVE_NETWORK -DHAVE_NETWORK_RESTRICTED" | ||
3121 | |||
3122 | fi | ||
3123 | |||
3124 | |||
3125 | fi | ||
3126 | |||
3127 | HAVE_USERNS="" | ||
3128 | # Check whether --enable-userns was given. | ||
3129 | if test "${enable_userns+set}" = set; then : | ||
3130 | enableval=$enable_userns; | ||
3131 | fi | ||
3132 | |||
3133 | if test "x$enable_userns" != "xno"; then : | ||
3134 | |||
3135 | HAVE_USERNS="-DHAVE_USERNS" | ||
3136 | |||
3137 | |||
3138 | fi | ||
3139 | |||
3140 | HAVE_X11="" | ||
3141 | # Check whether --enable-x11 was given. | ||
3142 | if test "${enable_x11+set}" = set; then : | ||
3143 | enableval=$enable_x11; | ||
3144 | fi | ||
3145 | |||
3146 | if test "x$enable_x11" != "xno"; then : | ||
3147 | |||
3148 | HAVE_X11="-DHAVE_X11" | ||
3149 | |||
3150 | |||
3151 | fi | ||
3152 | |||
3153 | HAVE_FILE_TRANSFER="" | ||
3154 | # Check whether --enable-file-transfer was given. | ||
3155 | if test "${enable_file_transfer+set}" = set; then : | ||
3156 | enableval=$enable_file_transfer; | ||
3157 | fi | ||
3158 | |||
3159 | if test "x$enable_file_transfer" != "xno"; then : | ||
3160 | |||
3161 | HAVE_FILE_TRANSFER="-DHAVE_FILE_TRANSFER" | ||
3162 | |||
3163 | |||
3164 | fi | ||
3165 | |||
3166 | HAVE_FATAL_WARNINGS="" | ||
3167 | # Check whether --enable-fatal_warnings was given. | ||
3168 | if test "${enable_fatal_warnings+set}" = set; then : | ||
3169 | enableval=$enable_fatal_warnings; | ||
3170 | fi | 3093 | fi |
3171 | 3094 | ||
3172 | if test "x$enable_fatal_warnings" = "xyes"; then : | 3095 | if test "x$enable_apparmor" = "xyes"; then : |
3173 | 3096 | ||
3174 | HAVE_FATAL_WARNINGS="-W -Wall -Werror" | 3097 | HAVE_APPARMOR="-DHAVE_APPARMOR" |
3175 | 3098 | ||
3176 | 3099 | ||
3177 | fi | 3100 | fi |
3178 | 3101 | ||
3179 | 3102 | ||
3180 | # checking pthread library | ||
3181 | |||
3182 | { $as_echo "$as_me:${as_lineno-$LINENO}: checking for main in -lpthread" >&5 | ||
3183 | $as_echo_n "checking for main in -lpthread... " >&6; } | ||
3184 | if ${ac_cv_lib_pthread_main+:} false; then : | ||
3185 | $as_echo_n "(cached) " >&6 | ||
3186 | else | ||
3187 | ac_check_lib_save_LIBS=$LIBS | ||
3188 | LIBS="-lpthread $LIBS" | ||
3189 | cat confdefs.h - <<_ACEOF >conftest.$ac_ext | ||
3190 | /* end confdefs.h. */ | ||
3191 | |||
3192 | |||
3193 | int | ||
3194 | main () | ||
3195 | { | ||
3196 | return main (); | ||
3197 | ; | ||
3198 | return 0; | ||
3199 | } | ||
3200 | _ACEOF | ||
3201 | if ac_fn_c_try_link "$LINENO"; then : | ||
3202 | ac_cv_lib_pthread_main=yes | ||
3203 | else | ||
3204 | ac_cv_lib_pthread_main=no | ||
3205 | fi | ||
3206 | rm -f core conftest.err conftest.$ac_objext \ | ||
3207 | conftest$ac_exeext conftest.$ac_ext | ||
3208 | LIBS=$ac_check_lib_save_LIBS | ||
3209 | fi | ||
3210 | { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_pthread_main" >&5 | ||
3211 | $as_echo "$ac_cv_lib_pthread_main" >&6; } | ||
3212 | if test "x$ac_cv_lib_pthread_main" = xyes; then : | ||
3213 | cat >>confdefs.h <<_ACEOF | ||
3214 | #define HAVE_LIBPTHREAD 1 | ||
3215 | _ACEOF | ||
3216 | |||
3217 | LIBS="-lpthread $LIBS" | ||
3218 | |||
3219 | else | ||
3220 | as_fn_error $? "*** POSIX thread support not installed ***" "$LINENO" 5 | ||
3221 | fi | ||
3222 | |||
3223 | ac_ext=c | 3103 | ac_ext=c |
3224 | ac_cpp='$CPP $CPPFLAGS' | 3104 | ac_cpp='$CPP $CPPFLAGS' |
3225 | ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' | 3105 | ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' |
@@ -3617,6 +3497,263 @@ fi | |||
3617 | done | 3497 | done |
3618 | 3498 | ||
3619 | 3499 | ||
3500 | if test "x$enable_apparmor" = "xyes"; then : | ||
3501 | |||
3502 | ac_fn_c_check_header_mongrel "$LINENO" "sys/apparmor.h" "ac_cv_header_sys_apparmor_h" "$ac_includes_default" | ||
3503 | if test "x$ac_cv_header_sys_apparmor_h" = xyes; then : | ||
3504 | |||
3505 | else | ||
3506 | as_fn_error $? "Couldn't find sys/apparmor.h... please install apparmor user space library and development files " "$LINENO" 5 | ||
3507 | fi | ||
3508 | |||
3509 | |||
3510 | |||
3511 | fi | ||
3512 | if test "x$enable_apparmor" = "xyes"; then : | ||
3513 | |||
3514 | EXTRA_LDFLAGS+="-lapparmor " | ||
3515 | |||
3516 | fi | ||
3517 | |||
3518 | |||
3519 | HAVE_OVERLAYFS="" | ||
3520 | # Check whether --enable-overlayfs was given. | ||
3521 | if test "${enable_overlayfs+set}" = set; then : | ||
3522 | enableval=$enable_overlayfs; | ||
3523 | fi | ||
3524 | |||
3525 | if test "x$enable_overlayfs" != "xno"; then : | ||
3526 | |||
3527 | HAVE_OVERLAYFS="-DHAVE_OVERLAYFS" | ||
3528 | |||
3529 | |||
3530 | fi | ||
3531 | |||
3532 | HAVE_PRIVATEHOME="" | ||
3533 | # Check whether --enable-private-home was given. | ||
3534 | if test "${enable_private_home+set}" = set; then : | ||
3535 | enableval=$enable_private_home; | ||
3536 | fi | ||
3537 | |||
3538 | if test "x$enable_private_home" != "xno"; then : | ||
3539 | |||
3540 | HAVE_PRIVATE_HOME="-DHAVE_PRIVATE_HOME" | ||
3541 | |||
3542 | |||
3543 | fi | ||
3544 | |||
3545 | HAVE_SECCOMP="" | ||
3546 | # Check whether --enable-seccomp was given. | ||
3547 | if test "${enable_seccomp+set}" = set; then : | ||
3548 | enableval=$enable_seccomp; | ||
3549 | fi | ||
3550 | |||
3551 | if test "x$enable_seccomp" != "xno"; then : | ||
3552 | |||
3553 | HAVE_SECCOMP="-DHAVE_SECCOMP" | ||
3554 | |||
3555 | |||
3556 | fi | ||
3557 | |||
3558 | HAVE_CHROOT="" | ||
3559 | # Check whether --enable-chroot was given. | ||
3560 | if test "${enable_chroot+set}" = set; then : | ||
3561 | enableval=$enable_chroot; | ||
3562 | fi | ||
3563 | |||
3564 | if test "x$enable_chroot" != "xno"; then : | ||
3565 | |||
3566 | HAVE_CHROOT="-DHAVE_CHROOT" | ||
3567 | |||
3568 | |||
3569 | fi | ||
3570 | |||
3571 | HAVE_BIND="" | ||
3572 | # Check whether --enable-bind was given. | ||
3573 | if test "${enable_bind+set}" = set; then : | ||
3574 | enableval=$enable_bind; | ||
3575 | fi | ||
3576 | |||
3577 | if test "x$enable_bind" != "xno"; then : | ||
3578 | |||
3579 | HAVE_BIND="-DHAVE_BIND" | ||
3580 | |||
3581 | |||
3582 | fi | ||
3583 | |||
3584 | HAVE_GLOBALCFG="" | ||
3585 | # Check whether --enable-globalcfg was given. | ||
3586 | if test "${enable_globalcfg+set}" = set; then : | ||
3587 | enableval=$enable_globalcfg; | ||
3588 | fi | ||
3589 | |||
3590 | if test "x$enable_globalcfg" != "xno"; then : | ||
3591 | |||
3592 | HAVE_GLOBALCFG="-DHAVE_GLOBALCFG" | ||
3593 | |||
3594 | |||
3595 | fi | ||
3596 | |||
3597 | HAVE_NETWORK="" | ||
3598 | # Check whether --enable-network was given. | ||
3599 | if test "${enable_network+set}" = set; then : | ||
3600 | enableval=$enable_network; | ||
3601 | fi | ||
3602 | |||
3603 | # Check whether --enable-network was given. | ||
3604 | if test "${enable_network+set}" = set; then : | ||
3605 | enableval=$enable_network; | ||
3606 | fi | ||
3607 | |||
3608 | if test "x$enable_network" != "xno"; then : | ||
3609 | |||
3610 | HAVE_NETWORK="-DHAVE_NETWORK" | ||
3611 | if test "x$enable_network" = "xrestricted"; then : | ||
3612 | |||
3613 | HAVE_NETWORK="$HAVE_NETWORK -DHAVE_NETWORK_RESTRICTED" | ||
3614 | |||
3615 | fi | ||
3616 | |||
3617 | |||
3618 | fi | ||
3619 | |||
3620 | HAVE_USERNS="" | ||
3621 | # Check whether --enable-userns was given. | ||
3622 | if test "${enable_userns+set}" = set; then : | ||
3623 | enableval=$enable_userns; | ||
3624 | fi | ||
3625 | |||
3626 | if test "x$enable_userns" != "xno"; then : | ||
3627 | |||
3628 | HAVE_USERNS="-DHAVE_USERNS" | ||
3629 | |||
3630 | |||
3631 | fi | ||
3632 | |||
3633 | HAVE_X11="" | ||
3634 | # Check whether --enable-x11 was given. | ||
3635 | if test "${enable_x11+set}" = set; then : | ||
3636 | enableval=$enable_x11; | ||
3637 | fi | ||
3638 | |||
3639 | if test "x$enable_x11" != "xno"; then : | ||
3640 | |||
3641 | HAVE_X11="-DHAVE_X11" | ||
3642 | |||
3643 | |||
3644 | fi | ||
3645 | |||
3646 | HAVE_FILE_TRANSFER="" | ||
3647 | # Check whether --enable-file-transfer was given. | ||
3648 | if test "${enable_file_transfer+set}" = set; then : | ||
3649 | enableval=$enable_file_transfer; | ||
3650 | fi | ||
3651 | |||
3652 | if test "x$enable_file_transfer" != "xno"; then : | ||
3653 | |||
3654 | HAVE_FILE_TRANSFER="-DHAVE_FILE_TRANSFER" | ||
3655 | |||
3656 | |||
3657 | fi | ||
3658 | |||
3659 | HAVE_WHITELIST="" | ||
3660 | # Check whether --enable-whitelist was given. | ||
3661 | if test "${enable_whitelist+set}" = set; then : | ||
3662 | enableval=$enable_whitelist; | ||
3663 | fi | ||
3664 | |||
3665 | if test "x$enable_whitelist" != "xno"; then : | ||
3666 | |||
3667 | HAVE_WHITELIST="-DHAVE_WHITELIST" | ||
3668 | |||
3669 | |||
3670 | fi | ||
3671 | |||
3672 | HAVE_FATAL_WARNINGS="" | ||
3673 | # Check whether --enable-fatal_warnings was given. | ||
3674 | if test "${enable_fatal_warnings+set}" = set; then : | ||
3675 | enableval=$enable_fatal_warnings; | ||
3676 | fi | ||
3677 | |||
3678 | if test "x$enable_fatal_warnings" = "xyes"; then : | ||
3679 | |||
3680 | HAVE_FATAL_WARNINGS="-W -Wall -Werror" | ||
3681 | |||
3682 | |||
3683 | fi | ||
3684 | |||
3685 | BUSYBOX_WORKAROUND="no" | ||
3686 | # Check whether --enable-busybox-workaround was given. | ||
3687 | if test "${enable_busybox_workaround+set}" = set; then : | ||
3688 | enableval=$enable_busybox_workaround; | ||
3689 | fi | ||
3690 | |||
3691 | if test "x$enable_busybox_workaround" = "xyes"; then : | ||
3692 | |||
3693 | BUSYBOX_WORKAROUND="yes" | ||
3694 | |||
3695 | |||
3696 | fi | ||
3697 | |||
3698 | |||
3699 | HAVE_GCOV="" | ||
3700 | # Check whether --enable-gcov was given. | ||
3701 | if test "${enable_gcov+set}" = set; then : | ||
3702 | enableval=$enable_gcov; | ||
3703 | fi | ||
3704 | |||
3705 | if test "x$enable_gcov" = "xyes"; then : | ||
3706 | |||
3707 | HAVE_GCOV="--coverage -DHAVE_GCOV " | ||
3708 | EXTRA_LDFLAGS+="-lgcov --coverage " | ||
3709 | |||
3710 | |||
3711 | fi | ||
3712 | |||
3713 | |||
3714 | |||
3715 | # checking pthread library | ||
3716 | { $as_echo "$as_me:${as_lineno-$LINENO}: checking for main in -lpthread" >&5 | ||
3717 | $as_echo_n "checking for main in -lpthread... " >&6; } | ||
3718 | if ${ac_cv_lib_pthread_main+:} false; then : | ||
3719 | $as_echo_n "(cached) " >&6 | ||
3720 | else | ||
3721 | ac_check_lib_save_LIBS=$LIBS | ||
3722 | LIBS="-lpthread $LIBS" | ||
3723 | cat confdefs.h - <<_ACEOF >conftest.$ac_ext | ||
3724 | /* end confdefs.h. */ | ||
3725 | |||
3726 | |||
3727 | int | ||
3728 | main () | ||
3729 | { | ||
3730 | return main (); | ||
3731 | ; | ||
3732 | return 0; | ||
3733 | } | ||
3734 | _ACEOF | ||
3735 | if ac_fn_c_try_link "$LINENO"; then : | ||
3736 | ac_cv_lib_pthread_main=yes | ||
3737 | else | ||
3738 | ac_cv_lib_pthread_main=no | ||
3739 | fi | ||
3740 | rm -f core conftest.err conftest.$ac_objext \ | ||
3741 | conftest$ac_exeext conftest.$ac_ext | ||
3742 | LIBS=$ac_check_lib_save_LIBS | ||
3743 | fi | ||
3744 | { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_pthread_main" >&5 | ||
3745 | $as_echo "$ac_cv_lib_pthread_main" >&6; } | ||
3746 | if test "x$ac_cv_lib_pthread_main" = xyes; then : | ||
3747 | cat >>confdefs.h <<_ACEOF | ||
3748 | #define HAVE_LIBPTHREAD 1 | ||
3749 | _ACEOF | ||
3750 | |||
3751 | LIBS="-lpthread $LIBS" | ||
3752 | |||
3753 | else | ||
3754 | as_fn_error $? "*** POSIX thread support not installed ***" "$LINENO" 5 | ||
3755 | fi | ||
3756 | |||
3620 | ac_fn_c_check_header_mongrel "$LINENO" "pthread.h" "ac_cv_header_pthread_h" "$ac_includes_default" | 3757 | ac_fn_c_check_header_mongrel "$LINENO" "pthread.h" "ac_cv_header_pthread_h" "$ac_includes_default" |
3621 | if test "x$ac_cv_header_pthread_h" = xyes; then : | 3758 | if test "x$ac_cv_header_pthread_h" = xyes; then : |
3622 | 3759 | ||
@@ -3640,7 +3777,7 @@ if test "$prefix" = /usr; then | |||
3640 | sysconfdir="/etc" | 3777 | sysconfdir="/etc" |
3641 | fi | 3778 | fi |
3642 | 3779 | ||
3643 | ac_config_files="$ac_config_files Makefile src/lib/Makefile src/firejail/Makefile src/firemon/Makefile src/libtrace/Makefile src/libtracelog/Makefile src/firecfg/Makefile src/ftee/Makefile" | 3780 | ac_config_files="$ac_config_files Makefile src/lib/Makefile src/fnet/Makefile src/firejail/Makefile src/firemon/Makefile src/libtrace/Makefile src/libtracelog/Makefile src/firecfg/Makefile src/ftee/Makefile src/faudit/Makefile src/libconnect/Makefile src/fseccomp/Makefile" |
3644 | 3781 | ||
3645 | cat >confcache <<\_ACEOF | 3782 | cat >confcache <<\_ACEOF |
3646 | # This file is a shell script that caches the results of configure | 3783 | # This file is a shell script that caches the results of configure |
@@ -4184,7 +4321,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 | |||
4184 | # report actual input values of CONFIG_FILES etc. instead of their | 4321 | # report actual input values of CONFIG_FILES etc. instead of their |
4185 | # values after options handling. | 4322 | # values after options handling. |
4186 | ac_log=" | 4323 | ac_log=" |
4187 | This file was extended by firejail $as_me 0.9.40-rc2, which was | 4324 | This file was extended by firejail $as_me 0.9.45, which was |
4188 | generated by GNU Autoconf 2.69. Invocation command line was | 4325 | generated by GNU Autoconf 2.69. Invocation command line was |
4189 | 4326 | ||
4190 | CONFIG_FILES = $CONFIG_FILES | 4327 | CONFIG_FILES = $CONFIG_FILES |
@@ -4238,7 +4375,7 @@ _ACEOF | |||
4238 | cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 | 4375 | cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 |
4239 | ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" | 4376 | ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" |
4240 | ac_cs_version="\\ | 4377 | ac_cs_version="\\ |
4241 | firejail config.status 0.9.40-rc2 | 4378 | firejail config.status 0.9.45 |
4242 | configured by $0, generated by GNU Autoconf 2.69, | 4379 | configured by $0, generated by GNU Autoconf 2.69, |
4243 | with options \\"\$ac_cs_config\\" | 4380 | with options \\"\$ac_cs_config\\" |
4244 | 4381 | ||
@@ -4351,12 +4488,16 @@ do | |||
4351 | case $ac_config_target in | 4488 | case $ac_config_target in |
4352 | "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;; | 4489 | "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;; |
4353 | "src/lib/Makefile") CONFIG_FILES="$CONFIG_FILES src/lib/Makefile" ;; | 4490 | "src/lib/Makefile") CONFIG_FILES="$CONFIG_FILES src/lib/Makefile" ;; |
4491 | "src/fnet/Makefile") CONFIG_FILES="$CONFIG_FILES src/fnet/Makefile" ;; | ||
4354 | "src/firejail/Makefile") CONFIG_FILES="$CONFIG_FILES src/firejail/Makefile" ;; | 4492 | "src/firejail/Makefile") CONFIG_FILES="$CONFIG_FILES src/firejail/Makefile" ;; |
4355 | "src/firemon/Makefile") CONFIG_FILES="$CONFIG_FILES src/firemon/Makefile" ;; | 4493 | "src/firemon/Makefile") CONFIG_FILES="$CONFIG_FILES src/firemon/Makefile" ;; |
4356 | "src/libtrace/Makefile") CONFIG_FILES="$CONFIG_FILES src/libtrace/Makefile" ;; | 4494 | "src/libtrace/Makefile") CONFIG_FILES="$CONFIG_FILES src/libtrace/Makefile" ;; |
4357 | "src/libtracelog/Makefile") CONFIG_FILES="$CONFIG_FILES src/libtracelog/Makefile" ;; | 4495 | "src/libtracelog/Makefile") CONFIG_FILES="$CONFIG_FILES src/libtracelog/Makefile" ;; |
4358 | "src/firecfg/Makefile") CONFIG_FILES="$CONFIG_FILES src/firecfg/Makefile" ;; | 4496 | "src/firecfg/Makefile") CONFIG_FILES="$CONFIG_FILES src/firecfg/Makefile" ;; |
4359 | "src/ftee/Makefile") CONFIG_FILES="$CONFIG_FILES src/ftee/Makefile" ;; | 4497 | "src/ftee/Makefile") CONFIG_FILES="$CONFIG_FILES src/ftee/Makefile" ;; |
4498 | "src/faudit/Makefile") CONFIG_FILES="$CONFIG_FILES src/faudit/Makefile" ;; | ||
4499 | "src/libconnect/Makefile") CONFIG_FILES="$CONFIG_FILES src/libconnect/Makefile" ;; | ||
4500 | "src/fseccomp/Makefile") CONFIG_FILES="$CONFIG_FILES src/fseccomp/Makefile" ;; | ||
4360 | 4501 | ||
4361 | *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; | 4502 | *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; |
4362 | esac | 4503 | esac |
@@ -4818,13 +4959,22 @@ echo " prefix: $prefix" | |||
4818 | echo " sysconfdir: $sysconfdir" | 4959 | echo " sysconfdir: $sysconfdir" |
4819 | echo " seccomp: $HAVE_SECCOMP" | 4960 | echo " seccomp: $HAVE_SECCOMP" |
4820 | echo " <linux/seccomp.h>: $HAVE_SECCOMP_H" | 4961 | echo " <linux/seccomp.h>: $HAVE_SECCOMP_H" |
4962 | echo " apparmor: $HAVE_APPARMOR" | ||
4963 | echo " global config: $HAVE_GLOBALCFG" | ||
4821 | echo " chroot: $HAVE_CHROOT" | 4964 | echo " chroot: $HAVE_CHROOT" |
4822 | echo " bind: $HAVE_BIND" | 4965 | echo " bind: $HAVE_BIND" |
4823 | echo " network: $HAVE_NETWORK" | 4966 | echo " network: $HAVE_NETWORK" |
4824 | echo " user namespace: $HAVE_USERNS" | 4967 | echo " user namespace: $HAVE_USERNS" |
4825 | echo " X11 sandboxing support: $HAVE_X11" | 4968 | echo " X11 sandboxing support: $HAVE_X11" |
4969 | echo " whitelisting: $HAVE_WHITELIST" | ||
4970 | echo " private home support: $HAVE_PRIVATE_HOME" | ||
4826 | echo " file transfer support: $HAVE_FILE_TRANSFER" | 4971 | echo " file transfer support: $HAVE_FILE_TRANSFER" |
4972 | echo " overlayfs support: $HAVE_OVERLAYFS" | ||
4973 | echo " busybox workaround: $BUSYBOX_WORKAROUND" | ||
4974 | echo " EXTRA_LDFLAGS: $EXTRA_LDFLAGS" | ||
4827 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" | 4975 | echo " fatal warnings: $HAVE_FATAL_WARNINGS" |
4976 | echo " Gcov instrumentation: $HAVE_GCOV" | ||
4828 | echo | 4977 | echo |
4829 | 4978 | ||
4830 | 4979 | ||
4980 | |||