mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-23 23:41:10 +02:00
profiles: remove *.h from prod INSTALL_MASK
But add /usr/lib*/*/include to prevent these headers from sneaking in. This is being done to retain the kernel headers from /lib/modules/$(uname -r)/build in production images.
This commit is contained in:
parent
f2f4f1a12f
commit
72fb8155ae
@ -3,9 +3,10 @@
|
|||||||
|
|
||||||
# Restrictive mask for production images.
|
# Restrictive mask for production images.
|
||||||
INSTALL_MASK="${INSTALL_MASK}
|
INSTALL_MASK="${INSTALL_MASK}
|
||||||
*.a *.la *.h *.hpp *.o
|
*.a *.la *.hpp *.o
|
||||||
/etc/sandbox.d
|
/etc/sandbox.d
|
||||||
/usr/include
|
/usr/include
|
||||||
|
/usr/lib*/*/include
|
||||||
/usr/lib/debug
|
/usr/lib/debug
|
||||||
/usr/lib*/pkgconfig
|
/usr/lib*/pkgconfig
|
||||||
/usr/share/aclocal*
|
/usr/share/aclocal*
|
||||||
@ -25,8 +26,3 @@ INSTALL_MASK="${INSTALL_MASK}
|
|||||||
/usr/share/ncat
|
/usr/share/ncat
|
||||||
/usr/share/nmap
|
/usr/share/nmap
|
||||||
"
|
"
|
||||||
|
|
||||||
# These kernel paths are just noise without sources
|
|
||||||
INSTALL_MASK="${INSTALL_MASK}
|
|
||||||
/usr/lib/modules/*/{build,source}
|
|
||||||
"
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user