From 72fb8155aee2373b59e9a137a09e9ab6500ecea3 Mon Sep 17 00:00:00 2001 From: Vito Caputo Date: Wed, 9 Mar 2016 10:12:13 -0800 Subject: [PATCH] profiles: remove *.h from prod INSTALL_MASK But add /usr/lib*/*/include to prevent these headers from sneaking in. This is being done to retain the kernel headers from /lib/modules/$(uname -r)/build in production images. --- .../profiles/coreos/targets/generic/prod/make.defaults | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults index 4eb34f192b..fa646a530f 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/make.defaults @@ -3,9 +3,10 @@ # Restrictive mask for production images. INSTALL_MASK="${INSTALL_MASK} - *.a *.la *.h *.hpp *.o + *.a *.la *.hpp *.o /etc/sandbox.d /usr/include + /usr/lib*/*/include /usr/lib/debug /usr/lib*/pkgconfig /usr/share/aclocal* @@ -25,8 +26,3 @@ INSTALL_MASK="${INSTALL_MASK} /usr/share/ncat /usr/share/nmap " - -# These kernel paths are just noise without sources -INSTALL_MASK="${INSTALL_MASK} - /usr/lib/modules/*/{build,source} -"