Bug 620936 – net-misc/chrony - Add USE=seccomp

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Mira Ressel 2017-06-05 16:25:06 UTC]

Created attachment 475274 [details, diff]
net-misc/chrony-3.1.ebuild: Add "seccomp" USE flag

The attached patch adds a "seccomp" USE flag to the chrony ebuild; if it's enabled, "--enable-scfilter" is passed to configure.

The seccomp sandbox only becomes active if chronyd is started with the flag "-F 1", so this change is safe for existing systems.

[Comment 1 Jeroen Roovers (RETIRED) 2017-06-05 18:32:26 UTC]

Comment on attachment 475274 [details, diff]
net-misc/chrony-3.1.ebuild: Add "seccomp" USE flag

That's not enough. It needs sys-libs/libseccomp to pass the configure test and compile.

[Comment 2 Jeroen Roovers (RETIRED) 2017-06-05 18:43:25 UTC]

Added in 3.1-r1. Thanks.

[Comment 3 Mira Ressel 2017-06-05 18:46:57 UTC]

Created attachment 475292 [details, diff]
net-misc/chrony-3.1.ebuild: Add "seccomp" USE flag, v2

> That's not enough. It needs sys-libs/libseccomp to pass the configure test
> and compile.

Oh, of course. Thanks for the catch, and sorry for the sloppiness.