diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-09-15 20:13:38 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-09-15 20:13:38 +0000 |
| commit | ad6d2c4304320a300009682901199278fabd3148 (patch) | |
| tree | a85ecca65867c1a5696c7075a3def08525a496e2 /build/linux | |
| parent | 2f4e8134c2a1d868eb4264dfb110cab5a94f43d7 (diff) | |
| download | chromium_src-ad6d2c4304320a300009682901199278fabd3148.zip chromium_src-ad6d2c4304320a300009682901199278fabd3148.tar.gz chromium_src-ad6d2c4304320a300009682901199278fabd3148.tar.bz2 | |
Linux: add support for SELinux.
This patch adds support for a selinux GYP variable which, when set to
one, does the following:
* Removes the seccomp sandbox from the compile
* Removes support for SUID sandboxing from the zygote
* Performs a dynamic transition, in the zygote, to
chromium_renderer_t.
This code requires that the system policy have a sensible set of
access vectors for the chromium_renderer_t type. Such a policy will be
found in sandbox/selinux in the future.
http://codereview.chromium.org/203071
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@26257 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'build/linux')
| -rw-r--r-- | build/linux/system.gyp | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/build/linux/system.gyp b/build/linux/system.gyp index 7b6d82c..5275373 100644 --- a/build/linux/system.gyp +++ b/build/linux/system.gyp @@ -135,6 +135,15 @@ ], }, }, + { + 'target_name': 'selinux', + 'type': 'settings', + 'link_settings': { + 'libraries': [ + '-lselinux', + ], + }, + }, # TODO(evanm): temporarily disabled while we figure out whether to depend # on gnome-keyring etc. # http://code.google.com/p/chromium/issues/detail?id=12351 |