~ubuntu-elisp/emacs/+git/master:scratch/seccomp

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

202a61d... by Philipp Stephani <email address hidden> on 2020-12-17

Add a helper binary to create a basic Secure Computing filter.

The binary uses the 'seccomp' helper library. The library isn't
needed to load the generated Secure Computing filter.

* configure.ac: Check for 'seccomp' header and library.

* lib-src/seccomp-filter.c: New helper binary to generate a generic
Secure Computing filter for GNU/Linux.

* lib-src/Makefile.in (DONT_INSTALL): Add 'seccomp-filter' helper
binary if possible.
(all): Add Secure Computing filter file if possible.
(seccomp-filter$(EXEEXT)): Compile helper binary.
(seccomp-filter.bpf seccomp-filter.pfc): Generate filter files.

* test/src/emacs-tests.el (emacs-tests/seccomp/allows-stdout)
(emacs-tests/seccomp/forbids-subprocess): New unit tests.

* test/Makefile.in (src/emacs-tests.log): Add dependency on the helper
binary.

2334f9b... by Philipp Stephani <email address hidden> on 2020-12-14

Add support for --seccomp command-line option.

When passing this option on GNU/Linux, Emacs installs a Secure
Computing kernel system call filter. See Bug#45198.

* configure.ac: Check for seccomp header.

* src/emacs.c (usage_message): Document --seccomp option.
(emacs_seccomp): New wrapper for 'seccomp' syscall.
(load_seccomp, maybe_load_seccomp): New helper functions.
(main): Potentially load seccomp filters during startup.
(standard_args): Add --seccomp option.

* lisp/startup.el (command-line): Detect and ignore --seccomp option.

* test/src/emacs-tests.el (emacs-tests/seccomp/absent-file)
(emacs-tests/seccomp/empty-file)
(emacs-tests/seccomp/file-too-large)
(emacs-tests/seccomp/invalid-file-size): New unit tests.
(emacs-tests--with-temp-file): New helper macro.

* etc/NEWS: Document new --seccomp option.

a4eb3bd... by Philipp Stephani <email address hidden> on 2020-12-26

Add Gnulib module 'read-file'.

All changes are autogenerated by running admin/merge-gnulib, except
for the change to merge-gnulib itself.

* admin/merge-gnulib (GNULIB_MODULES): Add 'read-file' module.

3fcd13c... by Philipp Stephani <email address hidden> on 2020-12-26

Update Gnulib.

All changes generated by running admin/merge-gnulib.

ee0e259... by Lars Ingebrigtsen <email address hidden> on 2020-12-29

Add some tests for align.el

1fc011c... by Glenn Morris on 2020-12-29

* src/xdisp.c (display_mode_line): I guess FALSE should be false.

6481da6... by Lars Ingebrigtsen <email address hidden> on 2020-12-29

Revert the previous display_string change

* src/xdisp.c (display_string): Revert adding the additional
ignore_text_properties parameter -- it was already covered by the
other mix of parameters.

88c9696... by Lars Ingebrigtsen <email address hidden> on 2020-12-29

Fix compact mode line text properties

* src/xdisp.c (display_mode_line): Display the compact mode
correctly (with text properties) (bug#45520).

03bab76... by Lars Ingebrigtsen <email address hidden> on 2020-12-29

Add a parameter to display_string to allow not ignoring text props

* src/xdisp.c (display_string): Add a parameter to allow not
ignoring text properties (bug#45520). Adjust callers throughout
xdisp.c.

a66f0d3... by Lars Ingebrigtsen <email address hidden> on 2020-12-29

Introduce new variable mode-line-compact

* doc/lispref/modes.texi (Mode Line Basics): Document it (bug#34476).

* src/xdisp.c (display_mode_line): Use it.
(syms_of_xdisp): New variable mode-line-compact.