f0b1b5a795
Only 0600 rights are allowed for the rules.conf. This file is read when the usbguard daemon starts and will prevent it to run otherwise. As Git only tracks the executable bit, setting the right permissions in the package makefile is the cleanest solution, in particular when providing this file from a rootfs overlay. Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
67 lines
1.7 KiB
Makefile
67 lines
1.7 KiB
Makefile
################################################################################
|
|
#
|
|
## usbguard
|
|
#
|
|
################################################################################
|
|
|
|
USBGUARD_VERSION = 1.0.0
|
|
USBGUARD_SITE = https://github.com/USBGuard/usbguard/releases/download/usbguard-$(USBGUARD_VERSION)
|
|
USBGUARD_LICENSE = GPL-2.0+
|
|
USBGUARD_LICENSE_FILES = LICENSE
|
|
USBGUARD_CONF_OPTS = \
|
|
--with-bundled-catch \
|
|
--with-bundled-pegtl \
|
|
--disable-debug-build \
|
|
--without-dbus \
|
|
--without-polkit \
|
|
--disable-umockdev
|
|
|
|
USBGUARD_DEPENDENCIES += libqb protobuf
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBOPENSSL),y)
|
|
USBGUARD_CONF_OPTS += --with-crypto-library=openssl
|
|
USBGUARD_DEPENDENCIES += libopenssl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBGCRYPT),y)
|
|
USBGUARD_CONF_ENV += \
|
|
ac_cv_path_LIBGCRYPT_CONFIG=$(STAGING_DIR)/usr/bin/libgcrypt-config
|
|
USBGUARD_CONF_OPTS += --with-crypto-library=gcrypt
|
|
USBGUARD_DEPENDENCIES += libgcrypt
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSODIUM),y)
|
|
USBGUARD_CONF_OPTS += --with-crypto-library=sodium
|
|
USBGUARD_DEPENDENCIES += libsodium
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
|
|
USBGUARD_CONF_OPTS += --enable-systemd
|
|
USBGUARD_DEPENDENCIES += systemd
|
|
else
|
|
USBGUARD_CONF_OPTS += --disable-systemd
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSECCOMP),y)
|
|
USBGUARD_CONF_OPTS += --enable-seccomp
|
|
USBGUARD_DEPENDENCIES += libseccomp
|
|
else
|
|
USBGUARD_CONF_OPTS += --disable-seccomp
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCAP_NG),y)
|
|
USBGUARD_CONF_OPTS += --enable-libcapng
|
|
USBGUARD_DEPENDENCIES += libcap-ng
|
|
endif
|
|
|
|
define USBGUARD_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 0755 -D package/usbguard/S20usbguard \
|
|
$(TARGET_DIR)/etc/init.d/S20usbguard
|
|
endef
|
|
|
|
define USBGUARD_PERMISSIONS
|
|
/etc/usbguard/rules.conf f 0600 0 0 - - - - -
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|