woj-sandbox/CMakeLists.txt

cmake_minimum_required(VERSION 3.22)
project(woj_sandbox C)

set(CMAKE_C_STANDARD 23)

# Handle __FILE__ in logging
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fmacro-prefix-map=${CMAKE_SOURCE_DIR}=.")

# Source files
file(GLOB SRC_FILES
        ${PROJECT_SOURCE_DIR}/resource.c
        ${PROJECT_SOURCE_DIR}/sandbox.c
        ${PROJECT_SOURCE_DIR}/rules/*.c
        ${PROJECT_SOURCE_DIR}/utils/*.c)
set(VERSION_SCRIPT ${PROJECT_SOURCE_DIR}/version_script.txt)

# Include
include_directories(${CMAKE_CURRENT_SOURCE_DIR}/libseccomp/include)

# Targets
add_library(woj_sandbox SHARED ${PROJECT_SOURCE_DIR}/library.c ${SRC_FILES})
add_executable(woj_launcher ${PROJECT_SOURCE_DIR}/launcher.c)
add_executable(woj_test ${PROJECT_SOURCE_DIR}/test.c)

# Link seccomp
target_link_libraries(woj_sandbox ${CMAKE_SOURCE_DIR}/libseccomp/src/.libs/libseccomp.a)
target_link_libraries(woj_launcher ${CMAKE_SOURCE_DIR}/libseccomp/src/.libs/libseccomp.a)

# Disable symbol export
set_target_properties(woj_sandbox PROPERTIES C_VISIBILITY_PRESET hidden)
set_property(TARGET woj_sandbox APPEND_STRING PROPERTY LINK_FLAGS " -Wl,--version-script=${VERSION_SCRIPT}")
set_target_properties(woj_sandbox PROPERTIES LINK_DEPENDS ${VERSION_SCRIPT})

# Optimization
include(CheckIPOSupported)
check_ipo_supported(RESULT ipo_result OUTPUT ipo_output)
if (ipo_result)
    set_property(TARGET woj_sandbox PROPERTY INTERPROCEDURAL_OPTIMIZATION TRUE)
    set_property(TARGET woj_launcher PROPERTY INTERPROCEDURAL_OPTIMIZATION TRUE)
else ()
    message(WARNING "IPO is not supported: ${ipo_output}")
endif ()