futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gnu: Add firejail.

Browse Source 
* gnu/packages/linux.scm (firejail): New variable.

Co-authored-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
kiasoc5 2023-06-20 21:00:54 -04:00 committed by Ludovic Courtès
parent 377dc49f24
commit d2c6d1d818
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
gnu/packages/linux.scm
View File

@ -95,6 +95,7 @@
#:use-module (gnu packages acl) #:use-module (gnu packages acl)
#:use-module (gnu packages admin) #:use-module (gnu packages admin)
#:use-module (gnu packages algebra) #:use-module (gnu packages algebra)
#:use-module (gnu packages apparmor)
#:use-module (gnu packages audio) #:use-module (gnu packages audio)
#:use-module (gnu packages autotools) #:use-module (gnu packages autotools)
#:use-module (gnu packages avahi) #:use-module (gnu packages avahi)
@ -10165,6 +10166,42 @@ suggestions from various sources, including:
This tool supports checking Kconfig options and kernel cmdline parameters.") This tool supports checking Kconfig options and kernel cmdline parameters.")
(license license:gpl3))) (license license:gpl3)))
(define-public firejail
(package
(name "firejail")
(version "0.9.72")
(source (origin
(method url-fetch)
(uri (string-append
"https://github.com/netblue30/firejail/releases/download/" version
"/firejail-" version ".tar.xz" ))
(sha256
(base32
"1x77xy1mwfgjrcsymdda82bjnqgl7z2yymcb10mzd1zwik27gqc2"))))
(arguments
(list #:phases
#~(modify-phases %standard-phases
(replace 'check
(lambda* (#:key tests? #:allow-other-keys)
(when tests?
(with-directory-excursion "test"
(invoke "make"))))))))
(build-system gnu-build-system)
(inputs
(list apparmor xdg-dbus-proxy))
(synopsis "Linux namespaces sandbox program")
(description
"Firejail is a SUID sandbox program that reduces the risk of security
breaches by restricting the running environment of untrusted applications
using Linux namespaces, seccomp-bpf and Linux capabilities. The software
includes sandbox profiles for a number of common Linux programs. Firejail
should be added to the list of setuid programs in the system configuration to
work properly.")
(home-page "https://github.com/netblue30/firejail")
(supported-systems
(filter (cut string-suffix? "-linux" <>) %supported-systems))
(license license:gpl2+)))
(define-public edac-utils (define-public edac-utils
(package (package
(name "edac-utils") (name "edac-utils")