Skip to content
Snippets Groups Projects
Commit a583a65e authored by Ariadne Conill's avatar Ariadne Conill
Browse files

community/firejail: remove

firejail has a conceptually flawed design, and therefore is inappropriate
for inclusion in Alpine as a security tool.

closes #12635
parent 269568d1
No related branches found
No related tags found
No related merge requests found
# Contributor: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>
pkgname=firejail
pkgver=0.9.64.4
pkgrel=0
pkgdesc="Linux namespaces and seccomp-bpf sandbox"
url="https://firejail.wordpress.com/"
arch="all"
license="GPL-2.0-only"
depends="bash xdg-dbus-proxy"
makedepends="linux-headers gawk"
checkdepends="expect"
options="suid"
subpackages="$pkgname-doc $pkgname-bash-completion:bashcomp:noarch"
source="firejail-$pkgver.tar.gz::https://github.com/netblue30/firejail/archive/$pkgver.tar.gz
missing-limits_h.patch
"
# secfixes:
# 0.9.64.4-r0:
# - CVE-2021-26910
prepare() {
default_prepare
find "$builddir" -name Makefile.in -exec sed -i -r \
-e '/CFLAGS/s: (-O2|-ggdb) : :g' \
-e '1iCC=@CC@' {} +
}
build() {
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--localstatedir=/var \
--enable-busybox-workaround
make
}
bashcomp() {
pkgdesc="Bash completions for $pkgname"
depends="bash"
install_if="$pkgname=$pkgver-r$pkgrel bash-completion"
mkdir -p "$subpkgdir"/usr
mv "$pkgdir"/usr/share "$subpkgdir"/usr/
}
check() {
make test
}
package() {
make DESTDIR="$pkgdir" install
}
sha512sums="d071bca6a84212cab54689d20b40e6b814a8d69ae86940fed27682b7633c0abd4788f247f74c83f353b4189eb4f6b92a3773833f141befecdcc30aba57da28f4 firejail-0.9.64.4.tar.gz
0b9080c0413bc83df6f820b19b99718b50b4773438df1cc93cee61418abd50b8c0ce840b857425c9aa985c7a5ea55dc5db855d2137a587cfb6e426e5ae05804c missing-limits_h.patch"
Upstream: Should be
Reason: Fixes compilation with musl
diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h
index 6c0ebcd..50fd37e 100644
--- a/src/firejail/firejail.h
+++ b/src/firejail/firejail.h
@@ -24,6 +24,7 @@
#include "../include/rundefs.h"
#include <stdarg.h>
#include <sys/stat.h>
+#include <limits.h>
// debug restricted shell
//#define DEBUG_RESTRICTED_SHELL
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment