/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to Makefile

First version of a somewhat complete D-Bus server interface.  Also
change user/group name to "_mandos".

* debian/mandos.postinst: Rename old "mandos" user and group to
                          "_mandos"; create "_mandos" user and group
                          if none exist.
* debian/mandos-client.postinst: - '' -

* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
                        group name.

* mandos (_datetime_to_dbus_struct): New; was previously local.
  (Client.started): Renamed to "last_started".  All users changed.
  (Client.started): New; boolean.
  (Client.dbus_object_path): New.
  (Client.check_command): Renamed to "checker_command".  All users
                          changed.
  (Client.__init__): Set and use "self.dbus_object_path".  Set
                     "self.started".
  (Client.start): Update "self.started".  Emit "self.PropertyChanged"
                  signals for both "started" and "last_started".
  (Client.stop): Update "self.started".  Emit "self.PropertyChanged"
                 signal for "started".
  (Client.checker_callback): Take additional "command" argument.  All
                             callers changed. Emit
                             "self.PropertyChanged" signal.
  (Client.bump_timeout): Emit "self.PropertyChanged" signal for
                         "last_checked_ok".
  (Client.start_checker): Emit "self.PropertyChanged" signal for
                          "checker_running".
  (Client.stop_checker): Emit "self.PropertyChanged" signal for
                         "checker_running".
  (Client.still_valid): Bug fix: use "getattr(self, started, False)"
                        instead of "self.started" in case this client
                        object is so new that the "started" attribute
                        has not been created yet.
  (Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
  Client.GetCreated, Client.GetFingerprint, Client.GetHost,
  Client.GetInterval, Client.GetName, Client.GetStarted,
  Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
  Removed; all callers changed.
  (Client.CheckerCompleted): Add "condition" and "command" arguments.
                             All callers changed.
  (Client.GetAllProperties, Client.PropertyChanged): New.
  (Client.StillValid): Renamed to "IsStillValid".
  (Client.StartChecker): Changed to its own function to avoid the
                         return value from "Client.start_checker()".
  (Client.Stop): Changed to its own function to avoid the return value
                 from "Client.stop()".
  (main): Try "_mandos" before "mandos" as user and group name.
          Removed inner function "remove_from_clients".  New inner
          class "MandosServer".

Show diffs side-by-side

added added

removed removed

Lines of Context:
Makefile
1
 
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
 
        -Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
 
        -Wunused -Wuninitialized -Wstrict-overflow=5 \
4
 
        -Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
 
        -Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
 
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
 
2
        -Wswitch-default -Wswitch-enum -Wunused-parameter \
 
3
        -Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
6
4
        -Wunsafe-loop-optimizations -Wpointer-arith \
7
5
        -Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
 
        -Wconversion -Wlogical-op -Waggregate-return \
9
 
        -Wstrict-prototypes -Wold-style-definition \
10
 
        -Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
 
        -Wredundant-decls -Wnested-externs -Winline -Wvla \
12
 
        -Wvolatile-register-var -Woverlength-strings
13
 
 
14
 
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
 
## Check which sanitizing options can be used
16
 
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
 
#       echo 'int main(){}' | $(CC) --language=c $(option) \
18
 
#       /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
 
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
 
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
 
        -fsanitize=shift -fsanitize=integer-divide-by-zero \
22
 
        -fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
 
        -fsanitize=return -fsanitize=signed-integer-overflow \
24
 
        -fsanitize=bounds -fsanitize=alignment \
25
 
        -fsanitize=object-size -fsanitize=float-divide-by-zero \
26
 
        -fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
 
        -fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
 
        -fsanitize=enum -fsanitize-address-use-after-scope
29
 
 
30
 
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
 
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
 
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
 
LINK_FORTIFY_LD:=-z relro -z now
34
 
LINK_FORTIFY:=
35
 
 
36
 
# If BROKEN_PIE is set, do not build with -pie
37
 
ifndef BROKEN_PIE
38
 
FORTIFY += -fPIE
39
 
LINK_FORTIFY += -pie
40
 
endif
 
6
        -Wconversion -Wstrict-prototypes -Wold-style-definition \
 
7
        -Wpacked -Wnested-externs -Winline -Wvolatile-register-var
 
8
#       -Wunreachable-code 
 
9
#DEBUG=-ggdb3
 
10
# For info about _FORTIFY_SOURCE, see
 
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
 
12
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIE -pie
 
13
LINK_FORTIFY=-z relro -pie
41
14
#COVERAGE=--coverage
42
 
OPTIMIZE:=-Os -fno-strict-aliasing
43
 
LANGUAGE:=-std=gnu11
44
 
htmldir:=man
45
 
version:=1.8.6
46
 
SED:=sed
47
 
PKG_CONFIG?=pkg-config
48
 
 
49
 
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
50
 
        || getent passwd nobody || echo 65534)))
51
 
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
52
 
        || getent group nogroup || echo 65534)))
53
 
 
54
 
LINUXVERSION:=$(shell uname --kernel-release)
 
15
OPTIMIZE=-Os
 
16
LANGUAGE=-std=gnu99
 
17
htmldir=man
 
18
version=1.0.2
 
19
SED=sed
55
20
 
56
21
## Use these settings for a traditional /usr/local install
57
 
# PREFIX:=$(DESTDIR)/usr/local
58
 
# CONFDIR:=$(DESTDIR)/etc/mandos
59
 
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
60
 
# MANDIR:=$(PREFIX)/man
61
 
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
62
 
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
63
 
# STATEDIR:=$(DESTDIR)/var/lib/mandos
64
 
# LIBDIR:=$(PREFIX)/lib
 
22
# PREFIX=$(DESTDIR)/usr/local
 
23
# CONFDIR=$(DESTDIR)/etc/mandos
 
24
# KEYDIR=$(DESTDIR)/etc/mandos/keys
 
25
# MANDIR=$(PREFIX)/man
 
26
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
65
27
##
66
28
 
67
29
## These settings are for a package-type install
68
 
PREFIX:=$(DESTDIR)/usr
69
 
CONFDIR:=$(DESTDIR)/etc/mandos
70
 
KEYDIR:=$(DESTDIR)/etc/keys/mandos
71
 
MANDIR:=$(PREFIX)/share/man
72
 
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
73
 
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
74
 
STATEDIR:=$(DESTDIR)/var/lib/mandos
75
 
LIBDIR:=$(shell \
76
 
        for d in \
77
 
        "/usr/lib/`dpkg-architecture \
78
 
                        -qDEB_HOST_MULTIARCH 2>/dev/null`" \
79
 
        "`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
80
 
                if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
81
 
                        echo "$(DESTDIR)$$d"; \
82
 
                        break; \
83
 
                fi; \
84
 
        done)
 
30
PREFIX=$(DESTDIR)/usr
 
31
CONFDIR=$(DESTDIR)/etc/mandos
 
32
KEYDIR=$(DESTDIR)/etc/keys/mandos
 
33
MANDIR=$(PREFIX)/share/man
 
34
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
85
35
##
86
36
 
87
 
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
88
 
                        --variable=systemdsystemunitdir)
89
 
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
90
 
                        --variable=tmpfilesdir)
91
 
 
92
 
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
93
 
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
94
 
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
95
 
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
96
 
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
97
 
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
98
 
        getconf LFS_LDFLAGS)
99
 
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
100
 
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
101
 
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
102
 
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
 
37
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
 
38
GNUTLS_LIBS=$(shell libgnutls-config --libs)
 
39
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
 
40
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
 
41
GPGME_CFLAGS=$(shell gpgme-config --cflags)
 
42
GPGME_LIBS=$(shell gpgme-config --libs)
103
43
 
104
44
# Do not change these two
105
 
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) \
106
 
        $(OPTIMIZE) $(LANGUAGE) -DVERSION='"$(version)"'
107
 
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
108
 
        ) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
 
45
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
 
46
        $(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
 
47
        -DVERSION='"$(version)"'
 
48
LDFLAGS=$(COVERAGE) $(LINK_FORTIFY)
109
49
 
110
50
# Commands to format a DocBook <refentry> document into a manual page
111
 
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
 
51
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
112
52
        --param man.charmap.use.subset          0 \
113
53
        --param make.year.ranges                1 \
114
54
        --param make.single.year.ranges         1 \
115
55
        --param man.output.quietly              1 \
116
56
        --param man.authors.section.enabled     0 \
117
 
        /usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
 
57
         /usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
118
58
        $(notdir $<); \
119
 
        if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
120
 
        && command -v man >/dev/null; then LANG=en_US.UTF-8 \
121
 
        MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
122
 
        $(notdir $@); fi >/dev/null)
 
59
        $(MANPOST) $(notdir $@)
 
60
# DocBook-to-man post-processing to fix a '\n' escape bug
 
61
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
123
62
 
124
 
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
 
63
DOCBOOKTOHTML=xsltproc --nonet --xinclude \
125
64
        --param make.year.ranges                1 \
126
65
        --param make.single.year.ranges         1 \
127
66
        --param man.output.quietly              1 \
129
68
        --param citerefentry.link               1 \
130
69
        --output $@ \
131
70
        /usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
132
 
        $<; $(HTMLPOST) $@)
 
71
        $<; $(HTMLPOST) $@
133
72
# Fix citerefentry links
134
 
HTMLPOST:=$(SED) --in-place \
 
73
HTMLPOST=$(SED) --in-place \
135
74
        --expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
136
75
 
137
 
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
138
 
        plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
139
 
        plugins.d/plymouth
140
 
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
141
 
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
142
 
        $(PLUGIN_HELPERS)
143
 
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
144
 
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
145
 
        mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
146
 
        dracut-module/password-agent.8mandos \
 
76
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
 
77
        plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo
 
78
CPROGS=plugin-runner $(PLUGINS)
 
79
PROGS=mandos mandos-keygen $(CPROGS)
 
80
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
147
81
        plugins.d/mandos-client.8mandos \
148
 
        plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
149
 
        plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
150
 
        plugins.d/plymouth.8mandos intro.8mandos
151
 
 
152
 
htmldocs:=$(addsuffix .xhtml,$(DOCS))
153
 
 
154
 
objects:=$(addsuffix .o,$(CPROGS))
 
82
        plugins.d/password-prompt.8mandos mandos.conf.5 \
 
83
        plugins.d/usplash.8mandos plugins.d/splashy.8mandos \
 
84
        plugins.d/askpass-fifo.8mandos mandos-clients.conf.5
 
85
 
 
86
htmldocs=$(addsuffix .xhtml,$(DOCS))
 
87
 
 
88
objects=$(addsuffix .o,$(CPROGS))
155
89
 
156
90
all: $(PROGS) mandos.lsm
157
91
 
174
108
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
175
109
        $(DOCBOOKTOHTML)
176
110
 
177
 
intro.8mandos: intro.xml common.ent legalnotice.xml
178
 
        $(DOCBOOKTOMAN)
179
 
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
180
 
        $(DOCBOOKTOHTML)
181
 
 
182
111
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
183
112
                legalnotice.xml
184
113
        $(DOCBOOKTOMAN)
193
122
                 legalnotice.xml
194
123
        $(DOCBOOKTOHTML)
195
124
 
196
 
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
197
 
                legalnotice.xml
198
 
        $(DOCBOOKTOMAN)
199
 
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
200
 
                 legalnotice.xml
201
 
        $(DOCBOOKTOHTML)
202
 
 
203
 
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
204
 
                legalnotice.xml
205
 
        $(DOCBOOKTOMAN)
206
 
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
207
 
                 legalnotice.xml
208
 
        $(DOCBOOKTOHTML)
209
 
 
210
125
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
211
126
                legalnotice.xml
212
127
        $(DOCBOOKTOMAN)
221
136
                overview.xml legalnotice.xml
222
137
        $(DOCBOOKTOHTML)
223
138
 
224
 
dracut-module/password-agent.8mandos: \
225
 
                dracut-module/password-agent.xml common.ent \
226
 
                overview.xml legalnotice.xml
227
 
        $(DOCBOOKTOMAN)
228
 
dracut-module/password-agent.8mandos.xhtml: \
229
 
                dracut-module/password-agent.xml common.ent \
230
 
                overview.xml legalnotice.xml
231
 
        $(DOCBOOKTOHTML)
232
 
 
233
139
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
234
140
                                        common.ent \
235
141
                                        mandos-options.xml \
243
149
 
244
150
# Update all these files with version number $(version)
245
151
common.ent: Makefile
246
 
        $(strip $(SED) --in-place \
247
 
                --expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
248
 
                $@)
 
152
        $(SED) --in-place \
 
153
                --expression='s/^\(<ENTITY VERSION "\)[^"]*">$$/\1$(version)"/' \
 
154
                $@
249
155
 
250
156
mandos: Makefile
251
 
        $(strip $(SED) --in-place \
 
157
        $(SED) --in-place \
252
158
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
253
 
                $@)
 
159
                $@
254
160
 
255
161
mandos-keygen: Makefile
256
 
        $(strip $(SED) --in-place \
 
162
        $(SED) --in-place \
257
163
                --expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
258
 
                $@)
259
 
 
260
 
mandos-ctl: Makefile
261
 
        $(strip $(SED) --in-place \
262
 
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
263
 
                $@)
264
 
 
265
 
mandos-monitor: Makefile
266
 
        $(strip $(SED) --in-place \
267
 
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
268
 
                $@)
 
164
                $@
269
165
 
270
166
mandos.lsm: Makefile
271
 
        $(strip $(SED) --in-place \
 
167
        $(SED) --in-place \
272
168
                --expression='s/^\(Version:\).*/\1\t$(version)/' \
273
 
                $@)
274
 
        $(strip $(SED) --in-place \
 
169
                $@
 
170
        $(SED) --in-place \
275
171
                --expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
276
 
                $@)
277
 
        $(strip $(SED) --in-place \
278
 
                --expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
279
 
                $@)
280
 
 
281
 
# Need to add the GnuTLS, Avahi and GPGME libraries
282
 
plugins.d/mandos-client: plugins.d/mandos-client.c
283
 
        $(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
284
 
                ) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
285
 
                ) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
286
 
                ) $(LDLIBS) -o $@
287
 
 
288
 
# Need to add the libnl-route library
289
 
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
290
 
        $(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
291
 
                ) $(LOADLIBES) $(LDLIBS) -o $@
292
 
 
293
 
# Need to add the GLib and pthread libraries
294
 
dracut-module/password-agent: dracut-module/password-agent.c
295
 
        $(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
296
 
                ) $(LOADLIBES) $(LDLIBS) -o $@
297
 
 
298
 
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
299
 
        check run-client run-server install install-html \
300
 
        install-server install-client-nokey install-client uninstall \
301
 
        uninstall-server uninstall-client purge purge-server \
302
 
        purge-client
 
172
                $@
 
173
 
 
174
plugins.d/mandos-client: plugins.d/mandos-client.o
 
175
        $(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
 
176
                $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
 
177
 
 
178
.PHONY : all doc html clean distclean run-client run-server install \
 
179
        install-server install-client uninstall uninstall-server \
 
180
        uninstall-client purge purge-server purge-client
303
181
 
304
182
clean:
305
183
        -rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
307
185
distclean: clean
308
186
mostlyclean: clean
309
187
maintainer-clean: clean
310
 
        -rm --force --recursive keydir confdir statedir
 
188
        -rm --force --recursive keydir confdir
311
189
 
312
 
check: all
 
190
check:  all
313
191
        ./mandos --check
314
 
        ./mandos-ctl --check
315
 
        ./mandos-keygen --version
316
 
        ./plugin-runner --version
317
 
        ./plugin-helpers/mandos-client-iprouteadddel --version
318
 
        ./dracut-module/password-agent --test
319
192
 
320
193
# Run the client with a local config and key
321
 
run-client: all keydir/seckey.txt keydir/pubkey.txt \
322
 
                        keydir/tls-privkey.pem keydir/tls-pubkey.pem
323
 
        @echo '######################################################'
324
 
        @echo '# The following error messages are harmless and can  #'
325
 
        @echo '#  be safely ignored:                                #'
326
 
        @echo '## From plugin-runner:                               #'
327
 
        @echo '# setgid: Operation not permitted                    #'
328
 
        @echo '# setuid: Operation not permitted                    #'
329
 
        @echo '## From askpass-fifo:                                #'
330
 
        @echo '# mkfifo: Permission denied                          #'
331
 
        @echo '## From mandos-client:                               #'
332
 
        @echo '# Failed to raise privileges: Operation not permi... #'
333
 
        @echo '# Warning: network hook "*" exited with status *     #'
334
 
        @echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
335
 
        @echo '# Failed to bring up interface "*": Operation not... #'
336
 
        @echo '#                                                    #'
337
 
        @echo '# (The messages are caused by not running as root,   #'
338
 
        @echo '# but you should NOT run "make run-client" as root   #'
339
 
        @echo '# unless you also unpacked and compiled Mandos as    #'
340
 
        @echo '# root, which is also NOT recommended.)              #'
341
 
        @echo '######################################################'
342
 
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
 
194
run-client: all keydir/seckey.txt keydir/pubkey.txt
343
195
        ./plugin-runner --plugin-dir=plugins.d \
344
 
                --plugin-helper-dir=plugin-helpers \
345
196
                --config-file=plugin-runner.conf \
346
 
                --options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
347
 
                --env-for=mandos-client:GNOME_KEYRING_CONTROL= \
348
 
                $(CLIENTARGS)
 
197
                --options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
349
198
 
350
199
# Used by run-client
351
 
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
 
200
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
352
201
        install --directory keydir
353
202
        ./mandos-keygen --dir keydir --force
354
203
 
355
204
# Run the server with a local config
356
 
run-server: confdir/mandos.conf confdir/clients.conf statedir
357
 
        ./mandos --debug --no-dbus --configdir=confdir \
358
 
                --statedir=statedir $(SERVERARGS)
 
205
run-server: confdir/mandos.conf confdir/clients.conf
 
206
        ./mandos --debug --configdir=confdir
359
207
 
360
208
# Used by run-server
361
209
confdir/mandos.conf: mandos.conf
362
210
        install --directory confdir
363
211
        install --mode=u=rw,go=r $^ $@
364
 
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
 
212
confdir/clients.conf: clients.conf keydir/seckey.txt
365
213
        install --directory confdir
366
214
        install --mode=u=rw $< $@
367
215
# Add a client password
368
 
        ./mandos-keygen --dir keydir --password --no-ssh >> $@
369
 
statedir:
370
 
        install --directory statedir
 
216
        ./mandos-keygen --dir keydir --password >> $@
371
217
 
372
218
install: install-server install-client-nokey
373
219
 
378
224
 
379
225
install-server: doc
380
226
        install --directory $(CONFDIR)
381
 
        if install --directory --mode=u=rwx --owner=$(USER) \
382
 
                --group=$(GROUP) $(STATEDIR); then \
383
 
                :; \
384
 
        elif install --directory --mode=u=rwx $(STATEDIR); then \
385
 
                chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
386
 
        fi
387
 
        if [ "$(TMPFILES)" != "$(DESTDIR)" \
388
 
                        -a -d "$(TMPFILES)" ]; then \
389
 
                install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
390
 
                        $(TMPFILES)/mandos.conf; \
391
 
        fi
392
227
        install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
393
 
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
394
 
                mandos-ctl
395
 
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
396
 
                mandos-monitor
397
228
        install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
398
229
                mandos.conf
399
230
        install --mode=u=rw --target-directory=$(CONFDIR) \
400
231
                clients.conf
401
 
        install --mode=u=rw,go=r dbus-mandos.conf \
402
 
                $(DESTDIR)/etc/dbus-1/system.d/mandos.conf
403
232
        install --mode=u=rwx,go=rx init.d-mandos \
404
233
                $(DESTDIR)/etc/init.d/mandos
405
 
        if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
406
 
                install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
407
 
        fi
408
234
        install --mode=u=rw,go=r default-mandos \
409
235
                $(DESTDIR)/etc/default/mandos
410
236
        if [ -z $(DESTDIR) ]; then \
412
238
        fi
413
239
        gzip --best --to-stdout mandos.8 \
414
240
                > $(MANDIR)/man8/mandos.8.gz
415
 
        gzip --best --to-stdout mandos-monitor.8 \
416
 
                > $(MANDIR)/man8/mandos-monitor.8.gz
417
 
        gzip --best --to-stdout mandos-ctl.8 \
418
 
                > $(MANDIR)/man8/mandos-ctl.8.gz
419
241
        gzip --best --to-stdout mandos.conf.5 \
420
242
                > $(MANDIR)/man5/mandos.conf.5.gz
421
243
        gzip --best --to-stdout mandos-clients.conf.5 \
422
244
                > $(MANDIR)/man5/mandos-clients.conf.5.gz
423
 
        gzip --best --to-stdout intro.8mandos \
424
 
                > $(MANDIR)/man8/intro.8mandos.gz
425
245
 
426
246
install-client-nokey: all doc
427
 
        install --directory $(LIBDIR)/mandos $(CONFDIR)
 
247
        install --directory $(PREFIX)/lib/mandos $(CONFDIR)
428
248
        install --directory --mode=u=rwx $(KEYDIR) \
429
 
                $(LIBDIR)/mandos/plugins.d \
430
 
                $(LIBDIR)/mandos/plugin-helpers
431
 
        if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
 
249
                $(PREFIX)/lib/mandos/plugins.d
 
250
        if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
432
251
                install --mode=u=rwx \
433
 
                        --directory "$(CONFDIR)/plugins.d" \
434
 
                        "$(CONFDIR)/plugin-helpers"; \
 
252
                        --directory "$(CONFDIR)/plugins.d"; \
435
253
        fi
436
 
        install --mode=u=rwx,go=rx --directory \
437
 
                "$(CONFDIR)/network-hooks.d"
438
 
        install --mode=u=rwx,go=rx \
439
 
                --target-directory=$(LIBDIR)/mandos plugin-runner
440
 
        install --mode=u=rwx,go=rx \
441
 
                --target-directory=$(LIBDIR)/mandos \
442
 
                mandos-to-cryptroot-unlock
 
254
        install --mode=u=rwx,go=rx \
 
255
                --target-directory=$(PREFIX)/lib/mandos plugin-runner
443
256
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
444
257
                mandos-keygen
445
258
        install --mode=u=rwx,go=rx \
446
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
259
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
447
260
                plugins.d/password-prompt
448
261
        install --mode=u=rwxs,go=rx \
449
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
262
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
450
263
                plugins.d/mandos-client
451
264
        install --mode=u=rwxs,go=rx \
452
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
265
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
453
266
                plugins.d/usplash
454
267
        install --mode=u=rwxs,go=rx \
455
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
268
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
456
269
                plugins.d/splashy
457
270
        install --mode=u=rwxs,go=rx \
458
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
271
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
459
272
                plugins.d/askpass-fifo
460
 
        install --mode=u=rwxs,go=rx \
461
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
462
 
                plugins.d/plymouth
463
 
        install --mode=u=rwx,go=rx \
464
 
                --target-directory=$(LIBDIR)/mandos/plugin-helpers \
465
 
                plugin-helpers/mandos-client-iprouteadddel
466
273
        install initramfs-tools-hook \
467
274
                $(INITRAMFSTOOLS)/hooks/mandos
468
 
        install --mode=u=rw,go=r initramfs-tools-conf \
469
 
                $(INITRAMFSTOOLS)/conf.d/mandos-conf
470
 
        install --mode=u=rw,go=r initramfs-tools-conf-hook \
471
 
                $(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
 
275
        install --mode=u=rw,go=r initramfs-tools-hook-conf \
 
276
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos
472
277
        install initramfs-tools-script \
473
 
                $(INITRAMFSTOOLS)/scripts/init-premount/mandos
474
 
        install initramfs-tools-script-stop \
475
 
                $(INITRAMFSTOOLS)/scripts/local-premount/mandos
476
 
        install --directory $(DRACUTMODULE)
477
 
        install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
478
 
                dracut-module/ask-password-mandos.path \
479
 
                dracut-module/ask-password-mandos.service
480
 
        install --mode=u=rwxs,go=rx \
481
 
                --target-directory=$(DRACUTMODULE) \
482
 
                dracut-module/module-setup.sh \
483
 
                dracut-module/cmdline-mandos.sh \
484
 
                dracut-module/password-agent
 
278
                $(INITRAMFSTOOLS)/scripts/local-top/mandos
485
279
        install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
486
280
        gzip --best --to-stdout mandos-keygen.8 \
487
281
                > $(MANDIR)/man8/mandos-keygen.8.gz
488
282
        gzip --best --to-stdout plugin-runner.8mandos \
489
283
                > $(MANDIR)/man8/plugin-runner.8mandos.gz
 
284
        gzip --best --to-stdout plugins.d/password-prompt.8mandos \
 
285
                > $(MANDIR)/man8/password-prompt.8mandos.gz
490
286
        gzip --best --to-stdout plugins.d/mandos-client.8mandos \
491
287
                > $(MANDIR)/man8/mandos-client.8mandos.gz
492
 
        gzip --best --to-stdout plugins.d/password-prompt.8mandos \
493
 
                > $(MANDIR)/man8/password-prompt.8mandos.gz
494
288
        gzip --best --to-stdout plugins.d/usplash.8mandos \
495
289
                > $(MANDIR)/man8/usplash.8mandos.gz
496
290
        gzip --best --to-stdout plugins.d/splashy.8mandos \
497
291
                > $(MANDIR)/man8/splashy.8mandos.gz
498
292
        gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
499
293
                > $(MANDIR)/man8/askpass-fifo.8mandos.gz
500
 
        gzip --best --to-stdout plugins.d/plymouth.8mandos \
501
 
                > $(MANDIR)/man8/plymouth.8mandos.gz
502
 
        gzip --best --to-stdout dracut-module/password-agent.8mandos \
503
 
                > $(MANDIR)/man8/password-agent.8mandos.gz
504
294
 
505
295
install-client: install-client-nokey
506
296
# Post-installation stuff
507
297
        -$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
508
 
        if command -v update-initramfs >/dev/null; then \
509
 
            update-initramfs -k all -u; \
510
 
        elif command -v dracut >/dev/null; then \
511
 
            for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
512
 
                if [ -w "$$initrd" ]; then \
513
 
                    chmod go-r "$$initrd"; \
514
 
                    dracut --force "$$initrd"; \
515
 
                fi; \
516
 
            done; \
517
 
        fi
 
298
        update-initramfs -k all -u
518
299
        echo "Now run mandos-keygen --password --dir $(KEYDIR)"
519
300
 
520
301
uninstall: uninstall-server uninstall-client
521
302
 
522
303
uninstall-server:
523
304
        -rm --force $(PREFIX)/sbin/mandos \
524
 
                $(PREFIX)/sbin/mandos-ctl \
525
 
                $(PREFIX)/sbin/mandos-monitor \
526
305
                $(MANDIR)/man8/mandos.8.gz \
527
 
                $(MANDIR)/man8/mandos-monitor.8.gz \
528
 
                $(MANDIR)/man8/mandos-ctl.8.gz \
529
306
                $(MANDIR)/man5/mandos.conf.5.gz \
530
307
                $(MANDIR)/man5/mandos-clients.conf.5.gz
531
308
        update-rc.d -f mandos remove
537
314
        ! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
538
315
                $(DESTDIR)/etc/crypttab
539
316
        -rm --force $(PREFIX)/sbin/mandos-keygen \
540
 
                $(LIBDIR)/mandos/plugin-runner \
541
 
                $(LIBDIR)/mandos/plugins.d/password-prompt \
542
 
                $(LIBDIR)/mandos/plugins.d/mandos-client \
543
 
                $(LIBDIR)/mandos/plugins.d/usplash \
544
 
                $(LIBDIR)/mandos/plugins.d/splashy \
545
 
                $(LIBDIR)/mandos/plugins.d/askpass-fifo \
546
 
                $(LIBDIR)/mandos/plugins.d/plymouth \
 
317
                $(PREFIX)/lib/mandos/plugin-runner \
 
318
                $(PREFIX)/lib/mandos/plugins.d/password-prompt \
 
319
                $(PREFIX)/lib/mandos/plugins.d/mandos-client \
 
320
                $(PREFIX)/lib/mandos/plugins.d/usplash \
 
321
                $(PREFIX)/lib/mandos/plugins.d/splashy \
 
322
                $(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
547
323
                $(INITRAMFSTOOLS)/hooks/mandos \
548
324
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos \
549
 
                $(INITRAMFSTOOLS)/scripts/init-premount/mandos \
550
 
                $(INITRAMFSTOOLS)/scripts/local-premount/mandos \
551
 
                $(DRACUTMODULE)/ask-password-mandos.path \
552
 
                $(DRACUTMODULE)/ask-password-mandos.service \
553
 
                $(DRACUTMODULE)/module-setup.sh \
554
 
                $(DRACUTMODULE)/cmdline-mandos.sh \
555
 
                $(DRACUTMODULE)/password-agent \
 
325
                $(INITRAMFSTOOLS)/scripts/local-top/mandos \
 
326
                $(MANDIR)/man8/plugin-runner.8mandos.gz \
556
327
                $(MANDIR)/man8/mandos-keygen.8.gz \
557
 
                $(MANDIR)/man8/plugin-runner.8mandos.gz \
558
 
                $(MANDIR)/man8/mandos-client.8mandos.gz
559
328
                $(MANDIR)/man8/password-prompt.8mandos.gz \
560
329
                $(MANDIR)/man8/usplash.8mandos.gz \
561
330
                $(MANDIR)/man8/splashy.8mandos.gz \
562
331
                $(MANDIR)/man8/askpass-fifo.8mandos.gz \
563
 
                $(MANDIR)/man8/plymouth.8mandos.gz \
564
 
                $(MANDIR)/man8/password-agent.8mandos.gz \
565
 
        -rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
566
 
                 $(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
567
 
        if command -v update-initramfs >/dev/null; then \
568
 
            update-initramfs -k all -u; \
569
 
        elif command -v dracut >/dev/null; then \
570
 
            for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
571
 
                test -w "$$initrd" && dracut --force "$$initrd"; \
572
 
            done; \
573
 
        fi
 
332
                $(MANDIR)/man8/mandos-client.8mandos.gz
 
333
        -rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
 
334
                 $(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
 
335
        update-initramfs -k all -u
574
336
 
575
337
purge: purge-server purge-client
576
338
 
577
339
purge-server: uninstall-server
578
340
        -rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
579
 
                $(DESTDIR)/etc/dbus-1/system.d/mandos.conf
580
341
                $(DESTDIR)/etc/default/mandos \
581
342
                $(DESTDIR)/etc/init.d/mandos \
582
 
                $(SYSTEMD)/mandos.service \
583
 
                $(DESTDIR)/run/mandos.pid \
584
343
                $(DESTDIR)/var/run/mandos.pid
585
344
        -rmdir $(CONFDIR)
586
345
 
587
346
purge-client: uninstall-client
588
 
        -shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
 
347
        -shred --remove $(KEYDIR)/seckey.txt
589
348
        -rm --force $(CONFDIR)/plugin-runner.conf \
590
 
                $(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
591
 
                $(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
 
349
                $(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
592
350
        -rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)