From: Pawel Hajdan, Jr <phajdan.jr@gentoo.org>
Date: Wed, 24 May 2017 16:27:53 +0000 (+0200)
Subject: chromium-2.eclass: warn on CONFIG_GRKERNSEC
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=92a2a586a51d4bf8986af4502d9a29be21204a5c;p=gentoo.git

chromium-2.eclass: warn on CONFIG_GRKERNSEC

Bug: https://bugs.gentoo.org/613668
---

diff --git a/eclass/chromium-2.eclass b/eclass/chromium-2.eclass
index db345f8f0fc0..699308304a48 100644
--- a/eclass/chromium-2.eclass
+++ b/eclass/chromium-2.eclass
@@ -32,7 +32,8 @@ chromium_suid_sandbox_check_kernel_config() {
 		# (bug #552576, bug #556286).
 		ERROR_ADVISE_SYSCALLS="CONFIG_ADVISE_SYSCALLS is required for the renderer (bug #552576)"
 		ERROR_COMPAT_VDSO="CONFIG_COMPAT_VDSO causes segfaults (bug #556286)"
-		CONFIG_CHECK="~PID_NS ~NET_NS ~SECCOMP_FILTER ~USER_NS ~ADVISE_SYSCALLS ~!COMPAT_VDSO"
+		ERROR_GRKERNSEC="CONFIG_GRKERNSEC breaks sandbox (bug #613668)"
+		CONFIG_CHECK="~PID_NS ~NET_NS ~SECCOMP_FILTER ~USER_NS ~ADVISE_SYSCALLS ~!COMPAT_VDSO ~!GRKERNSEC"
 		check_extra_config
 	fi
 }