mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-01-31 19:43:32 +00:00
e81edf7b04
The pledge.com command now supports the new [WIP] unveil() support. For
example, to strongly sandbox our command for listing directories.
o//tool/build/assimilate.com o//examples/ls.com
pledge.com -v /etc -p 'stdio rpath' o//examples/ls.com /etc
This file system sandboxing is going to be perfect for us, because APE
binaries are self-contained static executables that really don't use the
filesystem that much. On the other hand, with non-static executables,
sandboxing is going to be more difficult. For example, here's how to
sandbox the `ls` command on the latest Alpine:
pledge.com -v rx:/lib -v /usr/lib -v /etc -p 'stdio rpath exec' ls /etc
This change fixes the `execpromises` API with pledge().
This change also adds unix.unveil() to redbean.
Fixes #494
129 lines
3.6 KiB
Makefile
129 lines
3.6 KiB
Makefile
#-*-mode:makefile-gmake;indent-tabs-mode:t;tab-width:8;coding:utf-8-*-┐
|
|
#───vi: set et ft=make ts=8 tw=8 fenc=utf-8 :vi───────────────────────┘
|
|
|
|
PKGS += TEST_LIBC_MEM
|
|
|
|
TEST_LIBC_MEM_FILES := $(wildcard test/libc/mem/*)
|
|
TEST_LIBC_MEM_SRCS = $(TEST_LIBC_MEM_SRCS_C) $(TEST_LIBC_MEM_SRCS_CC)
|
|
TEST_LIBC_MEM_SRCS_C = $(filter %_test.c,$(TEST_LIBC_MEM_FILES))
|
|
TEST_LIBC_MEM_SRCS_CC = $(filter %_test.cc,$(TEST_LIBC_MEM_FILES))
|
|
|
|
TEST_LIBC_MEM_OBJS = \
|
|
$(TEST_LIBC_MEM_SRCS_C:%.c=o/$(MODE)/%.o) \
|
|
$(TEST_LIBC_MEM_SRCS_CC:%.cc=o/$(MODE)/%.o)
|
|
|
|
TEST_LIBC_MEM_COMS = \
|
|
$(TEST_LIBC_MEM_SRCS_C:%.c=o/$(MODE)/%.com) \
|
|
$(TEST_LIBC_MEM_SRCS_CC:%.cc=o/$(MODE)/%.com)
|
|
|
|
TEST_LIBC_MEM_BINS = \
|
|
$(TEST_LIBC_MEM_COMS) \
|
|
$(TEST_LIBC_MEM_COMS:%=%.dbg)
|
|
|
|
TEST_LIBC_MEM_TESTS = \
|
|
$(TEST_LIBC_MEM_SRCS_C:%.c=o/$(MODE)/%.com.ok) \
|
|
$(TEST_LIBC_MEM_SRCS_CC:%.cc=o/$(MODE)/%.com.ok)
|
|
|
|
TEST_LIBC_MEM_CHECKS = \
|
|
$(TEST_LIBC_MEM_SRCS_C:%.c=o/$(MODE)/%.com.runs) \
|
|
$(TEST_LIBC_MEM_SRCS_CC:%.cc=o/$(MODE)/%.com.runs)
|
|
|
|
TEST_LIBC_MEM_DIRECTDEPS = \
|
|
LIBC_CALLS \
|
|
LIBC_FMT \
|
|
LIBC_INTRIN \
|
|
LIBC_LOG \
|
|
LIBC_MEM \
|
|
LIBC_NEXGEN32E \
|
|
LIBC_RAND \
|
|
LIBC_RUNTIME \
|
|
LIBC_SOCK \
|
|
LIBC_STDIO \
|
|
LIBC_STR \
|
|
LIBC_STUBS \
|
|
LIBC_SYSV \
|
|
LIBC_SYSV_CALLS \
|
|
LIBC_TESTLIB \
|
|
LIBC_THREAD \
|
|
LIBC_X \
|
|
LIBC_ZIPOS \
|
|
THIRD_PARTY_DLMALLOC \
|
|
THIRD_PARTY_LIBCXX
|
|
|
|
TEST_LIBC_MEM_DEPS := \
|
|
$(call uniq,$(foreach x,$(TEST_LIBC_MEM_DIRECTDEPS),$($(x))))
|
|
|
|
o/$(MODE)/test/libc/mem/mem.pkg: \
|
|
$(TEST_LIBC_MEM_OBJS) \
|
|
$(foreach x,$(TEST_LIBC_MEM_DIRECTDEPS),$($(x)_A).pkg)
|
|
|
|
o/$(MODE)/test/libc/mem/%.com.dbg: \
|
|
$(TEST_LIBC_MEM_DEPS) \
|
|
o/$(MODE)/test/libc/mem/%.o \
|
|
o/$(MODE)/test/libc/mem/mem.pkg \
|
|
o/$(MODE)/test/libc/mem/prog/life.elf.zip.o \
|
|
o/$(MODE)/test/libc/mem/prog/sock.elf.zip.o \
|
|
$(LIBC_TESTMAIN) \
|
|
$(CRT) \
|
|
$(APE_NO_MODIFY_SELF)
|
|
@$(APELINK)
|
|
|
|
################################################################################
|
|
|
|
o/$(MODE)/test/libc/mem/prog/life.com.dbg: \
|
|
$(LIBC_RUNTIME) \
|
|
o/$(MODE)/test/libc/mem/prog/life.o \
|
|
$(CRT) \
|
|
$(APE)
|
|
@$(APELINK)
|
|
|
|
o/$(MODE)/test/libc/mem/prog/life.elf: \
|
|
o/$(MODE)/tool/build/assimilate.com \
|
|
o/$(MODE)/test/libc/mem/prog/life.com
|
|
@$(COMPILE) -ACP -T$@ \
|
|
build/bootstrap/cp.com \
|
|
o/$(MODE)/test/libc/mem/prog/life.com \
|
|
o/$(MODE)/test/libc/mem/prog/life.elf
|
|
@$(COMPILE) -AASSIMILATE -T$@ \
|
|
o/$(MODE)/tool/build/assimilate.com \
|
|
o/$(MODE)/test/libc/mem/prog/life.elf
|
|
|
|
o/$(MODE)/test/libc/mem/prog/life.elf.zip.o: \
|
|
ZIPOBJ_FLAGS += \
|
|
-B
|
|
|
|
################################################################################
|
|
|
|
o/$(MODE)/test/libc/mem/prog/sock.com.dbg: \
|
|
$(LIBC_RUNTIME) \
|
|
$(LIBC_SOCK) \
|
|
o/$(MODE)/test/libc/mem/prog/sock.o \
|
|
$(CRT) \
|
|
$(APE)
|
|
@$(APELINK)
|
|
|
|
o/$(MODE)/test/libc/mem/prog/sock.elf: \
|
|
o/$(MODE)/tool/build/assimilate.com \
|
|
o/$(MODE)/test/libc/mem/prog/sock.com
|
|
@$(COMPILE) -ACP -T$@ \
|
|
build/bootstrap/cp.com \
|
|
o/$(MODE)/test/libc/mem/prog/sock.com \
|
|
o/$(MODE)/test/libc/mem/prog/sock.elf
|
|
@$(COMPILE) -AASSIMILATE -T$@ \
|
|
o/$(MODE)/tool/build/assimilate.com \
|
|
o/$(MODE)/test/libc/mem/prog/sock.elf
|
|
|
|
o/$(MODE)/test/libc/mem/prog/sock.elf.zip.o: \
|
|
ZIPOBJ_FLAGS += \
|
|
-B
|
|
|
|
################################################################################
|
|
|
|
$(TEST_LIBC_MEM_OBJS): \
|
|
DEFAULT_CCFLAGS += \
|
|
-fno-builtin
|
|
|
|
.PHONY: o/$(MODE)/test/libc/mem
|
|
o/$(MODE)/test/libc/mem: \
|
|
$(TEST_LIBC_MEM_BINS) \
|
|
$(TEST_LIBC_MEM_CHECKS)
|