jeans/operating-system
jeans/operating-system
1
0
Fork 0
mirror of https://github.com/home-assistant/operating-system.git synced 2025-07-28 23:46:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add libseccomp (#2389)

Browse Source 
* Add security library libseccomp

Enable libseccomp to activate seccomp support in HAOS. This will compile
systemd and Docker with seccomp support.

Note: Traditionally Supervisor required to disable seccomp. This seems
no longer to be the case with current Supervisor, but it needs further
testing. All containers started by Supervisor get currently started with
seccomp disabled.

* Enable seccomp in the kernel
This commit is contained in:
Stefan Agner 2023-03-08 00:38:28 +01:00 committed by GitHub
parent 448c85788c
commit a93781c360
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
16 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
buildroot-external/configs/generic_aarch64_defconfig
View File

@ -72,6 +72,7 @@ BR2_PACKAGE_CA_CERTIFICATES=y
BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/generic_x86_64_defconfig
View File

@ -74,6 +74,7 @@ BR2_PACKAGE_CA_CERTIFICATES=y
BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/khadas_vim3_defconfig
View File

@ -57,6 +57,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/odroid_c2_defconfig
View File

@ -57,6 +57,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/odroid_c4_defconfig
View File

@ -55,6 +55,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/odroid_n2_defconfig
View File

@ -57,6 +57,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/odroid_xu4_defconfig
View File

@ -57,6 +57,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/ova_defconfig
View File

@ -76,6 +76,7 @@ BR2_PACKAGE_CA_CERTIFICATES=y
BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/rpi2_defconfig
View File

@ -61,6 +61,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/rpi3_64_defconfig
View File

@ -63,6 +63,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/rpi3_defconfig
View File

@ -64,6 +64,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/rpi4_64_defconfig
View File

@ -64,6 +64,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/rpi4_defconfig
View File

@ -63,6 +63,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/tinker_defconfig
View File

@ -59,6 +59,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

1
buildroot-external/configs/yellow_defconfig
View File

@ -64,6 +64,7 @@ BR2_PACKAGE_LIBCURL_CURL=y
BR2_PACKAGE_LIBDNET=y BR2_PACKAGE_LIBDNET=y
BR2_PACKAGE_LIBCGROUP=y BR2_PACKAGE_LIBCGROUP=y
BR2_PACKAGE_LIBCGROUP_TOOLS=y BR2_PACKAGE_LIBCGROUP_TOOLS=y
BR2_PACKAGE_LIBSECCOMP=y
BR2_PACKAGE_BLUEZ5_UTILS=y BR2_PACKAGE_BLUEZ5_UTILS=y
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y

4
buildroot-external/kernel/hassos.config
View File

@ -22,7 +22,9 @@ CONFIG_SQUASHFS_XATTR=y
CONFIG_SQUASHFS_LZ4=y CONFIG_SQUASHFS_LZ4=y
CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS=m
# CONFIG_SECCOMP is not set CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
CONFIG_AUDIT=y CONFIG_AUDIT=y
CONFIG_SECURITY=y CONFIG_SECURITY=y
CONFIG_SECURITY_APPARMOR=y CONFIG_SECURITY_APPARMOR=y