Buildish time support? about kafel HOT 1 CLOSED

ALLOW { read }
DEFAULT DENY

#include <linux/filter.h>
#include <linux/seccomp.h>
#include <stddef.h>

int main(int argc, char* argv[]) {
  struct sock_filter policy[] = {
#include "mypolicy.kafel.h"
  };
  struct sock_fprog prog;
  prog.len = sizeof(policy)/sizeof(policy[0]);
  prog.filter = policy;
  ...
  return 0;
}

.SUFFIXES: .kafel
%.kafel.h: %.kafel
        $KAFEL_DIR/tools/dump_policy_bpf/dump_policy_bpf -c $< > $@