profiles: remove *.h from prod INSTALL_MASK

But add /usr/lib*/*/include to prevent these headers from sneaking in.

This is being done to retain the kernel headers from
/lib/modules/$(uname -r)/build in production images.
This commit is contained in:
Vito Caputo 2016-03-09 10:12:13 -08:00
parent f2f4f1a12f
commit 72fb8155ae

View File

@ -3,9 +3,10 @@
# Restrictive mask for production images. # Restrictive mask for production images.
INSTALL_MASK="${INSTALL_MASK} INSTALL_MASK="${INSTALL_MASK}
*.a *.la *.h *.hpp *.o *.a *.la *.hpp *.o
/etc/sandbox.d /etc/sandbox.d
/usr/include /usr/include
/usr/lib*/*/include
/usr/lib/debug /usr/lib/debug
/usr/lib*/pkgconfig /usr/lib*/pkgconfig
/usr/share/aclocal* /usr/share/aclocal*
@ -25,8 +26,3 @@ INSTALL_MASK="${INSTALL_MASK}
/usr/share/ncat /usr/share/ncat
/usr/share/nmap /usr/share/nmap
" "
# These kernel paths are just noise without sources
INSTALL_MASK="${INSTALL_MASK}
/usr/lib/modules/*/{build,source}
"