mirror of
https://github.com/torvalds/linux.git
synced 2026-09-25 21:21:09 -04:00
Mickaël Salaün
ba84b0bf5a
Add a basic sandbox tool to launch a command which can only access a list of file hierarchies in a read-only or read-write way. Cc: James Morris <[email protected]> Cc: Serge E. Hallyn <[email protected]> Signed-off-by: Mickaël Salaün <[email protected]> Reviewed-by: Jann Horn <[email protected]> Reviewed-by: Kees Cook <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: James Morris <[email protected]>
14 lines
217 B
Makefile
14 lines
217 B
Makefile
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
userprogs-always-y := sandboxer
|
|
|
|
userccflags += -I usr/include
|
|
|
|
.PHONY: all clean
|
|
|
|
all:
|
|
$(MAKE) -C ../.. samples/landlock/
|
|
|
|
clean:
|
|
$(MAKE) -C ../.. M=samples/landlock/ clean
|