99
96
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
100
97
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
101
98
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
102
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
103
|| gpgme-config --cflags; getconf LFS_CFLAGS)
104
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
105
|| gpgme-config --libs; getconf LFS_LIBS; \
99
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
100
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
106
101
getconf LFS_LDFLAGS)
107
102
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
108
103
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
289
284
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
292
# Does the linker support the --no-warn-execstack option?
293
ifeq ($(shell echo 'int main(){}'|$(CC) --language=c /dev/stdin -o /dev/null -Xlinker --no-warn-execstack >/dev/null 2>&1 && echo yes),yes)
294
# These programs use nested functions, which uses an executable stack
295
plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack
296
dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack
297
plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack
298
plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack
299
plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack
302
287
# Need to add the GnuTLS, Avahi and GPGME libraries
303
288
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
304
289
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
370
354
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
371
355
install --directory keydir
372
356
./mandos-keygen --dir keydir --force
373
if ! [ -e keydir/tls-privkey.pem ]; then \
374
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
376
if ! [ -e keydir/tls-pubkey.pem ]; then \
377
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
380
358
# Run the server with a local config
381
359
.PHONY: run-server
386
364
# Used by run-server
387
365
confdir/mandos.conf: mandos.conf
388
install -D --mode=u=rw,go=r $^ $@
366
install --directory confdir
367
install --mode=u=rw,go=r $^ $@
389
368
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
390
install -D --mode=u=rw $< $@
369
install --directory confdir
370
install --mode=u=rw $< $@
391
371
# Add a client password
392
372
./mandos-keygen --dir keydir --password --no-ssh >> $@
399
379
.PHONY: install-html
400
380
install-html: html
401
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
381
install --directory $(htmldir)
382
install --mode=u=rw,go=r --target-directory=$(htmldir) \
404
385
.PHONY: install-server
405
386
install-server: doc
387
install --directory $(CONFDIR)
406
388
if install --directory --mode=u=rwx --owner=$(USER) \
407
389
--group=$(GROUP) $(STATEDIR); then \
409
391
elif install --directory --mode=u=rwx $(STATEDIR); then \
410
392
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
412
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
413
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
394
if [ "$(TMPFILES)" != "$(DESTDIR)" \
395
-a -d "$(TMPFILES)" ]; then \
396
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
414
397
$(TMPFILES)/mandos.conf; \
416
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
417
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
399
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
400
-a -d "$(SYSUSERS)" ]; then \
401
install --mode=u=rw,go=r sysusers.d-mandos.conf \
418
402
$(SYSUSERS)/mandos.conf; \
420
install --directory $(PREFIX)/sbin
421
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
404
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
423
405
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
425
407
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
427
install --directory $(CONFDIR)
428
409
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
430
411
install --mode=u=rw --target-directory=$(CONFDIR) \
432
install -D --mode=u=rw,go=r dbus-mandos.conf \
433
$(DBUSPOLICYDIR)/mandos.conf
434
install -D --mode=u=rwx,go=rx init.d-mandos \
413
install --mode=u=rw,go=r dbus-mandos.conf \
414
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
415
install --mode=u=rwx,go=rx init.d-mandos \
435
416
$(DESTDIR)/etc/init.d/mandos
436
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
437
install -D --mode=u=rw,go=r mandos.service \
417
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
418
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
440
install -D --mode=u=rw,go=r default-mandos \
420
install --mode=u=rw,go=r default-mandos \
441
421
$(DESTDIR)/etc/default/mandos
442
422
if [ -z $(DESTDIR) ]; then \
443
423
update-rc.d mandos defaults 25 15;\
445
install --directory $(MANDIR)/man8 $(MANDIR)/man5
446
425
gzip --best --to-stdout mandos.8 \
447
426
> $(MANDIR)/man8/mandos.8.gz
448
427
gzip --best --to-stdout mandos-monitor.8 \
459
438
.PHONY: install-client-nokey
460
439
install-client-nokey: all doc
440
install --directory $(LIBDIR)/mandos $(CONFDIR)
461
441
install --directory --mode=u=rwx $(KEYDIR) \
462
442
$(LIBDIR)/mandos/plugins.d \
463
443
$(LIBDIR)/mandos/plugin-helpers
464
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
465
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
444
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
445
-a -d "$(SYSUSERS)" ]; then \
446
install --mode=u=rw,go=r sysusers.d-mandos.conf \
466
447
$(SYSUSERS)/mandos-client.conf; \
468
449
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
469
install --directory \
470
--mode=u=rwx "$(CONFDIR)/plugins.d" \
450
install --mode=u=rwx \
451
--directory "$(CONFDIR)/plugins.d" \
471
452
"$(CONFDIR)/plugin-helpers"; \
473
install --directory --mode=u=rwx,go=rx \
454
install --mode=u=rwx,go=rx --directory \
474
455
"$(CONFDIR)/network-hooks.d"
475
456
install --mode=u=rwx,go=rx \
476
457
--target-directory=$(LIBDIR)/mandos plugin-runner
477
458
install --mode=u=rwx,go=rx \
478
459
--target-directory=$(LIBDIR)/mandos \
479
460
mandos-to-cryptroot-unlock
480
install --directory $(PREFIX)/sbin
481
461
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
483
463
install --mode=u=rwx,go=rx \
501
481
install --mode=u=rwx,go=rx \
502
482
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
503
483
plugin-helpers/mandos-client-iprouteadddel
504
install -D initramfs-tools-hook \
484
install initramfs-tools-hook \
505
485
$(INITRAMFSTOOLS)/hooks/mandos
506
install -D --mode=u=rw,go=r initramfs-tools-conf \
486
install --mode=u=rw,go=r initramfs-tools-conf \
507
487
$(INITRAMFSTOOLS)/conf.d/mandos-conf
508
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
488
install --mode=u=rw,go=r initramfs-tools-conf-hook \
509
489
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
510
install -D initramfs-tools-script \
490
install initramfs-tools-script \
511
491
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
512
install -D initramfs-tools-script-stop \
492
install initramfs-tools-script-stop \
513
493
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
514
install -D --mode=u=rw,go=r \
515
--target-directory=$(DRACUTMODULE) \
494
install --directory $(DRACUTMODULE)
495
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
516
496
dracut-module/ask-password-mandos.path \
517
497
dracut-module/ask-password-mandos.service
518
498
install --mode=u=rwxs,go=rx \