diff options
| author | Dr. David Alan Gilbert | 2019-12-03 13:23:44 +0100 |
|---|---|---|
| committer | Dr. David Alan Gilbert | 2020-01-23 17:41:37 +0100 |
| commit | 2405f3c0d19eb4d516a88aa4e5c54e5f9c6bbea3 (patch) | |
| tree | c9effc0c7a1f5186ff07df3ea0e25c10eb9f6e26 /Makefile | |
| parent | virtiofsd: Parse flag FUSE_WRITE_KILL_PRIV (diff) | |
| download | qemu-2405f3c0d19eb4d516a88aa4e5c54e5f9c6bbea3.tar.gz qemu-2405f3c0d19eb4d516a88aa4e5c54e5f9c6bbea3.tar.xz qemu-2405f3c0d19eb4d516a88aa4e5c54e5f9c6bbea3.zip | |
virtiofsd: cap-ng helpers
libcap-ng reads /proc during capng_get_caps_process, and virtiofsd's
sandboxing doesn't have /proc mounted; thus we have to do the
caps read before we sandbox it and save/restore the state.
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -327,7 +327,7 @@ HELPERS-y += vhost-user-gpu$(EXESUF) vhost-user-json-y += contrib/vhost-user-gpu/50-qemu-gpu.json endif -ifeq ($(CONFIG_LINUX)$(CONFIG_SECCOMP),yy) +ifeq ($(CONFIG_LINUX)$(CONFIG_SECCOMP)$(CONFIG_LIBCAP_NG),yyy) HELPERS-y += virtiofsd$(EXESUF) vhost-user-json-y += tools/virtiofsd/50-qemu-virtiofsd.json endif @@ -675,7 +675,7 @@ rdmacm-mux$(EXESUF): $(rdmacm-mux-obj-y) $(COMMON_LDADDS) $(call LINK, $^) # relies on Linux-specific syscalls -ifeq ($(CONFIG_LINUX)$(CONFIG_SECCOMP),yy) +ifeq ($(CONFIG_LINUX)$(CONFIG_SECCOMP)$(CONFIG_LIBCAP_NG),yyy) virtiofsd$(EXESUF): $(virtiofsd-obj-y) libvhost-user.a $(COMMON_LDADDS) $(call LINK, $^) endif |