|
|
|
@ -4,6 +4,7 @@ UNAME_SYS := $(shell uname -s)
|
|
|
|
|
ifeq ($(UNAME_SYS), Linux)
|
|
|
|
|
LDFLAGS += -luuid -lresolv -Wl,-Bsymbolic-functions -Wl,-z,relro
|
|
|
|
|
CFLAGS ?= -D_FORTIFY_SOURCE=2 -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -fno-strict-aliasing
|
|
|
|
|
XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_SECCOMP
|
|
|
|
|
XMPPIPE_SANDBOX_RLIMIT_NOFILE ?= 0
|
|
|
|
|
else ifeq ($(UNAME_SYS), FreeBSD)
|
|
|
|
|
XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_CAPSICUM
|
|
|
|
@ -15,7 +16,7 @@ else ifeq ($(UNAME_SYS), Darwin)
|
|
|
|
|
LDFLAGS += -lresolv
|
|
|
|
|
endif
|
|
|
|
|
|
|
|
|
|
XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_NULL
|
|
|
|
|
XMPPIPE_SANDBOX ?= XMPPIPE_SANDBOX_RLIMIT
|
|
|
|
|
XMPPIPE_SANDBOX_RLIMIT_NOFILE ?= -1
|
|
|
|
|
CFLAGS += -DXMPPIPE_SANDBOX=\"$(XMPPIPE_SANDBOX)\" -D$(XMPPIPE_SANDBOX) \
|
|
|
|
|
-DXMPPIPE_SANDBOX_RLIMIT_NOFILE=$(XMPPIPE_SANDBOX_RLIMIT_NOFILE)
|
|
|
|
|