Makefile

CC      ?= clang
CFLAGS  := -Wall -Wextra -pedantic -g -O2 -fstack-protector-strong
LDFLAGS := -lcap
TARGET  := sandbox
SRC     := sandbox.c
TEST_SH := tests/smoke.sh

.PHONY: all clean preflight test lint validate

all: $(TARGET)

test: $(TARGET)
	./$(TEST_SH)

lint:
	cppcheck --quiet --enable=warning,performance,portability --check-level=reduced --suppress=normalCheckLevelMaxBranches --inline-suppr --error-exitcode=1 sandbox.c
	shellcheck tests/smoke.sh

validate: test lint

preflight:
	@command -v $(CC) >/dev/null 2>&1 || { echo "Error: compiler '$(CC)' not found. Install it or set CC to an available compiler."; exit 1; }
	@echo '#include <sys/capability.h>' | $(CC) -fsyntax-only -x c - 2>/dev/null || { echo "Error: <sys/capability.h> not found. Install libcap development headers (e.g. libcap-dev)."; exit 1; }
	@echo 'int main(void){return 0;}' | $(CC) -x c - -lcap -o /dev/null 2>/dev/null || { echo "Error: cannot link with -lcap. Install libcap (e.g. libcap-dev)."; exit 1; }

$(TARGET): $(SRC) | preflight
	$(CC) $(CFLAGS) -o $@ $^ $(LDFLAGS)

clean:
	rm -f $(TARGET)