diff --git a/experimental/webtry/main.cpp b/experimental/webtry/main.cpp index 44f8aab70f..b2c06c0d7b 100644 --- a/experimental/webtry/main.cpp +++ b/experimental/webtry/main.cpp @@ -23,6 +23,8 @@ DEFINE_string(source, "", "Filename of the source image."); extern SkBitmap source; static bool install_syscall_filter() { + +#ifndef SK_UNSAFE_BUILD_DESKTOP_ONLY struct sock_filter filter[] = { /* Grab the system call number. */ EXAMINE_SYSCALL, @@ -64,6 +66,9 @@ failed: fprintf(stderr, "SECCOMP_FILTER is not available. :(\n"); } return false; +#else + return true; +#endif /* SK_UNSAFE_BUILD_DESKTOP_ONLY */ } static void setLimits() { diff --git a/experimental/webtry/seccomp_bpf.h b/experimental/webtry/seccomp_bpf.h index 02bf3cff3a..bf72f9aa99 100644 --- a/experimental/webtry/seccomp_bpf.h +++ b/experimental/webtry/seccomp_bpf.h @@ -14,6 +14,8 @@ #ifndef _SECCOMP_BPF_H_ #define _SECCOMP_BPF_H_ +#ifndef SK_UNSAFE_BUILD_DESKTOP_ONLY + #define _GNU_SOURCE 1 #include #include @@ -62,4 +64,6 @@ struct seccomp_data { #define KILL_PROCESS \ BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_KILL) +#endif /* SK_UNSAFE_BUILD_DESKTOP_ONLY */ + #endif /* _SECCOMP_BPF_H_ */