# Copyright (c) 2012 The Chromium OS Authors. All rights reserved. # Use of this source code is governed by a BSD-style license that can be # found in the LICENSE file. BASE_VER=0 include common.mk LIBDIR ?= lib PRELOADNAME = libminijailpreload.so PRELOADPATH = \"/$(LIBDIR)/$(PRELOADNAME)\" CPPFLAGS += -DPRELOADPATH="$(PRELOADPATH)" ifneq ($(HAVE_SECUREBITS_H),no) CPPFLAGS += -DHAVE_SECUREBITS_H endif ifeq ($(USE_seccomp),no) CPPFLAGS += -DUSE_SECCOMP_SOFTFAIL endif ifeq ($(USE_ASAN),yes) CPPFLAGS += -fsanitize=address LDFLAGS += -fsanitize=address USE_EXIT_ON_DIE = yes endif # Setting this flag can be useful for both AddressSanitizer builds and running # fuzzing tools, which do not expect crashes on gracefully-handled malformed # inputs. ifeq ($(USE_EXIT_ON_DIE),yes) CPPFLAGS += -DUSE_EXIT_ON_DIE endif MJ_COMMON_FLAGS = -Wunused-parameter -Wextra -Wno-missing-field-initializers CFLAGS += $(MJ_COMMON_FLAGS) CXXFLAGS += $(MJ_COMMON_FLAGS) USE_SYSTEM_GTEST ?= no ifeq ($(USE_SYSTEM_GTEST),no) GTEST_CXXFLAGS := -std=gnu++14 GTEST_LIBS := gtest.a else GTEST_CXXFLAGS := $(shell gtest-config --cxxflags) GTEST_LIBS := $(shell gtest-config --libs) endif CORE_OBJECT_FILES := libminijail.o syscall_filter.o signal_handler.o \ bpf.o util.o system.o syscall_wrapper.o \ libconstants.gen.o libsyscalls.gen.o all: CC_BINARY(minijail0) CC_LIBRARY(libminijail.so) \ CC_LIBRARY(libminijailpreload.so) parse_seccomp_policy: CXX_BINARY(parse_seccomp_policy) tests: TEST(CXX_BINARY(libminijail_unittest)) \ TEST(CXX_BINARY(minijail0_cli_unittest)) \ TEST(CXX_BINARY(syscall_filter_unittest)) \ TEST(CXX_BINARY(system_unittest)) \ TEST(CXX_BINARY(util_unittest)) \ CC_BINARY(minijail0): LDLIBS += -lcap -ldl CC_BINARY(minijail0): $(CORE_OBJECT_FILES) \ elfparse.o minijail0.o minijail0_cli.o clean: CLEAN(minijail0) CC_LIBRARY(libminijail.so): LDLIBS += -lcap CC_LIBRARY(libminijail.so): $(CORE_OBJECT_FILES) clean: CLEAN(libminijail.so) CXX_BINARY(libminijail_unittest): CXXFLAGS += -Wno-write-strings \ $(GTEST_CXXFLAGS) CXX_BINARY(libminijail_unittest): LDLIBS += -lcap $(GTEST_LIBS) ifeq ($(USE_SYSTEM_GTEST),no) CXX_BINARY(libminijail_unittest): $(GTEST_LIBS) endif CXX_BINARY(libminijail_unittest): libminijail_unittest.o $(CORE_OBJECT_FILES) \ testrunner.o clean: CLEAN(libminijail_unittest) CC_LIBRARY(libminijailpreload.so): LDLIBS += -lcap -ldl CC_LIBRARY(libminijailpreload.so): libminijailpreload.o $(CORE_OBJECT_FILES) clean: CLEAN(libminijailpreload.so) CXX_BINARY(minijail0_cli_unittest): CXXFLAGS += $(GTEST_CXXFLAGS) CXX_BINARY(minijail0_cli_unittest): LDLIBS += -lcap $(GTEST_LIBS) ifeq ($(USE_SYSTEM_GTEST),no) CXX_BINARY(minijail0_cli_unittest): $(GTEST_LIBS) endif CXX_BINARY(minijail0_cli_unittest): minijail0_cli_unittest.o \ $(CORE_OBJECT_FILES) minijail0_cli.o elfparse.o testrunner.o clean: CLEAN(minijail0_cli_unittest) CXX_BINARY(syscall_filter_unittest): CXXFLAGS += -Wno-write-strings \ $(GTEST_CXXFLAGS) CXX_BINARY(syscall_filter_unittest): LDLIBS += -lcap $(GTEST_LIBS) ifeq ($(USE_SYSTEM_GTEST),no) CXX_BINARY(syscall_filter_unittest): $(GTEST_LIBS) endif CXX_BINARY(syscall_filter_unittest): syscall_filter_unittest.o \ $(CORE_OBJECT_FILES) testrunner.o clean: CLEAN(syscall_filter_unittest) CXX_BINARY(system_unittest): CXXFLAGS += $(GTEST_CXXFLAGS) CXX_BINARY(system_unittest): LDLIBS += -lcap $(GTEST_LIBS) ifeq ($(USE_SYSTEM_GTEST),no) CXX_BINARY(system_unittest): $(GTEST_LIBS) endif CXX_BINARY(system_unittest): system_unittest.o \ $(CORE_OBJECT_FILES) testrunner.o clean: CLEAN(system_unittest) CXX_BINARY(util_unittest): CXXFLAGS += $(GTEST_CXXFLAGS) CXX_BINARY(util_unittest): LDLIBS += -lcap $(GTEST_LIBS) ifeq ($(USE_SYSTEM_GTEST),no) CXX_BINARY(util_unittest): $(GTEST_LIBS) endif CXX_BINARY(util_unittest): util_unittest.o \ $(CORE_OBJECT_FILES) testrunner.o clean: CLEAN(util_unittest) CXX_BINARY(parse_seccomp_policy): parse_seccomp_policy.o syscall_filter.o \ bpf.o util.o libconstants.gen.o libsyscalls.gen.o clean: CLEAN(parse_seccomp_policy) libsyscalls.gen.o: CPPFLAGS += -I$(SRC) libsyscalls.gen.o.depends: libsyscalls.gen.c # Only regenerate libsyscalls.gen.c if the Makefile or header changes. # NOTE! This will not detect if the file is not appropriate for the target. libsyscalls.gen.c: $(SRC)/Makefile $(SRC)/libsyscalls.h @printf "Generating target-arch specific $@...\n" $(QUIET)CC="$(CC)" $(SRC)/gen_syscalls.sh "$@" @printf "$@ done.\n" clean: CLEAN(libsyscalls.gen.c) $(eval $(call add_object_rules,libsyscalls.gen.o,CC,c,CFLAGS)) libconstants.gen.o: CPPFLAGS += -I$(SRC) libconstants.gen.o.depends: libconstants.gen.c # Only regenerate libconstants.gen.c if the Makefile or header changes. # NOTE! This will not detect if the file is not appropriate for the target. libconstants.gen.c: $(SRC)/Makefile $(SRC)/libconstants.h @printf "Generating target-arch specific $@...\n" $(QUIET)CC="$(CC)" $(SRC)/gen_constants.sh "$@" @printf "$@ done.\n" clean: CLEAN(libconstants.gen.c) $(eval $(call add_object_rules,libconstants.gen.o,CC,c,CFLAGS)) ################################################################################ # Google Test ifeq ($(USE_SYSTEM_GTEST),no) # Points to the root of Google Test, relative to where this file is. # Remember to tweak this if you move this file. GTEST_DIR = googletest-release-1.8.0/googletest # Flags passed to the preprocessor. # Set Google Test's header directory as a system directory, such that # the compiler doesn't generate warnings in Google Test headers. CPPFLAGS += -isystem $(GTEST_DIR)/include # Flags passed to the C++ compiler. GTEST_CXXFLAGS += -pthread # All Google Test headers. Usually you shouldn't change this # definition. GTEST_HEADERS = $(GTEST_DIR)/include/gtest/*.h \ $(GTEST_DIR)/include/gtest/internal/*.h # House-keeping build targets. clean: clean_gtest clean_gtest: rm -f gtest.a gtest_main.a *.o # Builds gtest.a and gtest_main.a. # Usually you shouldn't tweak such internal variables, indicated by a # trailing _. GTEST_SRCS_ = $(GTEST_DIR)/src/*.cc $(GTEST_DIR)/src/*.h $(GTEST_HEADERS) # For simplicity and to avoid depending on Google Test's # implementation details, the dependencies specified below are # conservative and not optimized. This is fine as Google Test # compiles fast and for ordinary users its source rarely changes. gtest-all.o : $(GTEST_SRCS_) $(CXX) $(CPPFLAGS) -I$(GTEST_DIR) $(CXXFLAGS) $(GTEST_CXXFLAGS) -c \ $(GTEST_DIR)/src/gtest-all.cc -o $@ gtest_main.o : $(GTEST_SRCS_) $(CXX) $(CPPFLAGS) -I$(GTEST_DIR) $(CXXFLAGS) $(GTEST_CXXFLAGS) -c \ $(GTEST_DIR)/src/gtest_main.cc -o $@ gtest.a : gtest-all.o $(AR) $(ARFLAGS) $@ $^ gtest_main.a : gtest-all.o gtest_main.o $(AR) $(ARFLAGS) $@ $^ endif ################################################################################