| # Copyright 2022 The ChromiumOS Authors |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| EAPI=7 |
| CROS_WORKON_COMMIT="63150342c81b7d2c6e55b02852c0837a782f27f6" |
| CROS_WORKON_TREE=("41d899585b7a07ea908a0cca2944a7b8a4d13655" "2951cc414747c37d82fc61f67e24aec6cd522c1c" "5c1598293a3b2d474abb7aafc492654f9cb521de" "f91b6afd5f2ae04ee9a2c19109a3a4a36f7659e6") |
| CROS_WORKON_INCREMENTAL_BUILD="1" |
| CROS_WORKON_PROJECT="chromiumos/platform2" |
| CROS_WORKON_LOCALNAME="platform2" |
| CROS_WORKON_DESTDIR="${S}/platform2" |
| #TODO(b/272132524): Remove featured. |
| CROS_WORKON_SUBTREE="common-mk secagentd featured .gn" |
| |
| PLATFORM_SUBDIR="secagentd" |
| |
| # Do not run test parallelly until unit tests are fixed. |
| # shellcheck disable=SC2034 |
| PLATFORM_PARALLEL_GTEST_TEST="no" |
| |
| inherit cros-workon platform user |
| |
| DESCRIPTION="Enterprise security event reporting." |
| HOMEPAGE="https://chromium.googlesource.com/chromiumos/platform2/+/HEAD/secagentd/" |
| LICENSE="BSD-Google" |
| KEYWORDS="*" |
| IUSE="+secagentd_min_core_btf proto_force_optimize_speed kernel-5_10 kernel-5_15" |
| |
| COMMON_DEPEND=" |
| chromeos-base/attestation-client:= |
| chromeos-base/cryptohome-client:= |
| chromeos-base/featured:= |
| chromeos-base/metrics:= |
| chromeos-base/missive:= |
| chromeos-base/session_manager-client:= |
| chromeos-base/shill-dbus-client:= |
| chromeos-base/shill-client:= |
| chromeos-base/system_api:= |
| chromeos-base/tpm_manager-client:= |
| chromeos-base/vboot_reference:= |
| dev-cpp/abseil-cpp:= |
| dev-libs/openssl:0= |
| dev-libs/re2:= |
| dev-libs/protobuf:= |
| >=dev-libs/libbpf-0.8.1 |
| " |
| |
| # RDepending on linux-sources makes it so that the min BTFs are rebuilt (if |
| # applicable) once when any kernel source is updated. |
| RDEPEND="${COMMON_DEPEND} |
| >=sys-process/audit-3.0 |
| secagentd_min_core_btf? ( |
| virtual/linux-sources:= |
| ) |
| " |
| |
| # Depending on linux-sources makes it so vmlinux is available on the board |
| # build root. This is needed so bpftool can generate vmlinux.h at build time. |
| DEPEND="${COMMON_DEPEND} |
| chromeos-base/protofiles:= |
| virtual/linux-sources:= |
| virtual/pkgconfig:= |
| " |
| |
| # bpftool is needed in the SDK to generate C code skeletons from compiled BPF applications. |
| # pahole is needed in the SDK to generate vmlinux.h and detached BTFs. |
| BDEPEND=" |
| dev-libs/protobuf |
| dev-util/bpftool:= |
| dev-util/pahole:= |
| " |
| |
| pkg_setup() { |
| enewuser "secagentd" |
| enewgroup "secagentd" |
| cros-workon_pkg_setup |
| } |
| |
| src_install() { |
| platform_src_install |
| |
| dosbin "${OUT}"/secagentd |
| if use secagentd_min_core_btf; then |
| insinto /usr/share/btf/secagentd |
| doins "${OUT}"/gen/btf/*.min.btf |
| fi |
| |
| # Daemon store is used to store the device user's ID. |
| local daemon_store="/etc/daemon-store/secagentd" |
| dodir "${daemon_store}" |
| fperms 0700 "${daemon_store}" |
| fowners secagentd:secagentd "${daemon_store}" |
| } |
| |
| platform_pkg_test() { |
| platform_test "run" "${OUT}/secagentd_testrunner" |
| } |
