@dave_andersen @danderson
so how does it work? I guess CMake passes that chunk of C to the compiler, but then the build script assumes that if that compilation fails for any reason, including a syntax error, then the system doesn't actually support landlock?
and are you in fact two different people?
@anymaw @dave_andersen Yeah, these feature checks usually work by compiling (and maybe running) a test program, to check that everything required is present. The original malicious commit that added this check explained that on some systems the header files for Landlock are present but Landlock doesn't actually work, so the configuration builds a test program to check if it actually works.
And yes, any failure is interpreted as the feature being unavailable :/