From 3913626e795ebf147631895a8d6f34dcc287d6a2 Mon Sep 17 00:00:00 2001 From: Vincent Blut Date: Sun, 10 Feb 2019 19:40:08 +0100 Subject: =?UTF-8?q?d/rules:=20Don=E2=80=99t=20enable=20the=20system=20call?= =?UTF-8?q?=20filter=20on=20some=20architectures?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- debian/rules | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/debian/rules b/debian/rules index c9312c3..9ccf0bf 100755 --- a/debian/rules +++ b/debian/rules @@ -3,6 +3,8 @@ -include /usr/share/dpkg/buildtools.mk export CC +DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH) + export DEB_BUILD_MAINT_OPTIONS=hardening=+all BASE=debian/chrony @@ -33,3 +35,11 @@ override_dh_install: override_dh_fixperms: dh_fixperms -X usr/share/chrony/chrony.keys + +override_dh_installinit: + dh_installinit +# Disable the system call filter on architectures mentioned below +# due to missing support in libseccomp and/or in the Linux kernel. +ifneq (,$(filter $(DEB_HOST_ARCH), alpha ia64 m68k riscv64 sh4 sparc64)) + sed -i '/DAEMON_OPTS=/s/"-F -1"/""/' $(BASE)/etc/default/chrony +endif -- cgit v1.2.3