diff options
| author | Mickaël Salaün <mic@linux.microsoft.com> | 2021-04-22 17:41:21 +0200 |
|---|---|---|
| committer | James Morris <jamorris@linux.microsoft.com> | 2021-04-22 12:22:11 -0700 |
| commit | ba84b0bf5a164f0f523656c1e37568c30f3f3303 (patch) | |
| tree | 50f0cd2eab45a9bc48371833464209d670ca8035 /samples/landlock/Makefile | |
| parent | e1199815b47be83346c03e20a3de76f934e4bb34 (diff) | |
samples/landlock: Add a sandbox manager example
Add a basic sandbox tool to launch a command which can only access a
list of file hierarchies in a read-only or read-write way.
Cc: James Morris <jmorris@namei.org>
Cc: Serge E. Hallyn <serge@hallyn.com>
Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com>
Reviewed-by: Jann Horn <jannh@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20210422154123.13086-12-mic@digikod.net
Signed-off-by: James Morris <jamorris@linux.microsoft.com>
Diffstat (limited to 'samples/landlock/Makefile')
| -rw-r--r-- | samples/landlock/Makefile | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/samples/landlock/Makefile b/samples/landlock/Makefile new file mode 100644 index 000000000000..5d601e51c2eb --- /dev/null +++ b/samples/landlock/Makefile @@ -0,0 +1,13 @@ +# SPDX-License-Identifier: BSD-3-Clause + +userprogs-always-y := sandboxer + +userccflags += -I usr/include + +.PHONY: all clean + +all: + $(MAKE) -C ../.. samples/landlock/ + +clean: + $(MAKE) -C ../.. M=samples/landlock/ clean |