[yocto] [meta-security][PATCH][wip] libseccomp: git version recipe

[Armin Kuster]

The latest git repo has Aarch64 and Mips(64) support.
Aarch64 CONFIG_SECCOMP_FILTER support is not complete and is targeted for v3.18.

An update to libseccomp is scheduled after the v3.18 kernel is released.

I don't plan to included this into the layer. The intent is to provide new arch support while we wait for the official release.

Signed-off-by: Armin Kuster <akuster808 at gmail.com>
---
 recipes-security/libseccomp/libseccomp_git.bb | 49 +++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 recipes-security/libseccomp/libseccomp_git.bb

diff --git a/recipes-security/libseccomp/libseccomp_git.bb b/recipes-security/libseccomp/libseccomp_git.bb
new file mode 100644
index 0000000..3197208
--- /dev/null
+++ b/recipes-security/libseccomp/libseccomp_git.bb
@@ -0,0 +1,49 @@
+SUMMARY = "interface to seccomp filtering mechanism"
+DESCRIPTION = "The libseccomp library provides and easy to use, platform independent,interface to the Linux Kernel's syscall filtering mechanism: seccomp."
+SECTION = "security"
+LICENSE = "GPL-2.0"
+LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/GPL-2.0;md5=801f80980d171dd6425610833a22dbe6"
+
+SRCREV="f6c219703e3e654e60bb341ab4de362a133fdba6"
+SRC_URI = "git://git.code.sf.net/p/libseccomp/libseccomp;protocol=git \
+"
+
+inherit autotools-brokensep
+
+S="${WORKDIR}/git"
+
+do_configure_prepend () {
+
+(
+cat << 'EOF'
+tests-build:
+	${MAKE} ${AM_MAKEFLAGS} ${check_PROGRAMS}
+
+tests-install:
+	install ${check_PROGRAMS} ${DESTDIR}
+	@list='$(check_PROGRAMS)'; \
+		for p in $$list; do install $$p.tests ${DESTDIR}; done
+
+	install regression testdiff testgen ${DESTDIR}
+
+EOF
+) >> tests/Makefile.am
+}
+do_compile_append() {
+    oe_runmake -C tests tests-build
+}
+
+do_install() {
+    install -d ${D}/${libdir}/${BPN}/tests
+    oe_runmake -C tests DESTDIR=${D}/${libdir}/${BPN}/tests tests-install
+
+    install -d ${D}/${libdir}/${BPN}/tools
+    install tools/scmp_bpf_sim tools/scmp_arch_detect \
+        tools/scmp_bpf_disasm tools/scmp_app_inspector \
+        tools/check-syntax tools/scmp_sys_resolver ${D}/${libdir}/${BPN}/tools
+
+}
+
+PACKAGES += "${PN}-tests "
+FILES_${PN}-tests = "tests/* tools/* "
+FILES_${PN}-dbg += "${libdir}/${BPN}/tests/.debug/* ${libdir}/${BPN}/tools/.debug/*"
-- 
1.9.1