To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 237.7.846
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.846
- Committer: Teddy Hogeborn
- Date: 2024-09-09 04:24:39 UTC
- mto: This revision was merged to the branch mainline in revision 410.
- Revision ID: teddy@recompile.se-20240909042439-j85mr20uli2hnyis
Eliminate compiler warnings
Many programs use nested functions, which now result in a linker
warning about executable stack. Hide this warning. Also, rewrite a
loop in the plymouth plugin to avoid warning about signed overflow.
This change also makes the plugin pick the alphabetically first
process entry instead of the last, in case many plymouth processes are
found (which should be unlikely).
* Makefile (plugin-runner, dracut-module/password-agent,
plugins.d/password-prompt, plugins.d/mandos-client,
plugins.d/plymouth): New target; set LDFLAGS to add "-Xlinker
--no-warn-execstack".
* plugins.d/plymouth.c (get_pid): When no pid files are found, and we
are looking through the process list, go though it from the start
instead of from the end, i.e. in normal alphabetical order and not
in reverse order.
Many programs use nested functions, which now result in a linker
warning about executable stack. Hide this warning. Also, rewrite a
loop in the plymouth plugin to avoid warning about signed overflow.
This change also makes the plugin pick the alphabetically first
process entry instead of the last, in case many plymouth processes are
found (which should be unlikely).
* Makefile (plugin-runner, dracut-module/password-agent,
plugins.d/password-prompt, plugins.d/mandos-client,
plugins.d/plymouth): New target; set LDFLAGS to add "-Xlinker
--no-warn-execstack".
* plugins.d/plymouth.c (get_pid): When no pid files are found, and we
are looking through the process list, go though it from the start
instead of from the end, i.e. in normal alphabetical order and not
in reverse order.
- files added:
- DBUS-API
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=1 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://www.kernel.org/doc/man-pages/online/pages/man7/feature_test_macros.7.html>
12
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
13
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
14
LINK_FORTIFY_LD=-z relro -z now
15
LINK_FORTIFY=
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-fstack-protector-all -fPIC
33
CPPFLAGS+=-D_FORTIFY_SOURCE=3
34
LINK_FORTIFY_LD:=-z relro -z now
35
LINK_FORTIFY:=
36
37
# If BROKEN_PIE is set, do not build with -pie
16
38
ifndef BROKEN_PIE
17
39
FORTIFY += -fPIE
18
LINK_FORTIFY_LD += -fPIE
19
40
LINK_FORTIFY += -pie
20
41
endif
21
42
#COVERAGE=--coverage
22
OPTIMIZE=-Os
23
LANGUAGE=-std=gnu99
24
htmldir=man
25
version=1.0.14
26
SED=sed
43
OPTIMIZE:=-Os -fno-strict-aliasing
44
LANGUAGE:=-std=gnu11
45
CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64
46
htmldir:=man
47
version:=1.8.16
48
SED:=sed
49
PKG_CONFIG?=pkg-config
50
51
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
52
|| getent passwd nobody || echo 65534)))
53
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
54
|| getent group nogroup || echo 65534)))
55
56
LINUXVERSION:=$(shell uname --kernel-release)
27
57
28
58
## Use these settings for a traditional /usr/local install
29
# PREFIX=$(DESTDIR)/usr/local
30
# CONFDIR=$(DESTDIR)/etc/mandos
31
# KEYDIR=$(DESTDIR)/etc/mandos/keys
32
# MANDIR=$(PREFIX)/man
33
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
59
# PREFIX:=$(DESTDIR)/usr/local
60
# CONFDIR:=$(DESTDIR)/etc/mandos
61
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
62
# MANDIR:=$(PREFIX)/man
63
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
64
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
65
# STATEDIR:=$(DESTDIR)/var/lib/mandos
66
# LIBDIR:=$(PREFIX)/lib
67
# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d
34
68
##
35
69
36
70
## These settings are for a package-type install
37
PREFIX=$(DESTDIR)/usr
38
CONFDIR=$(DESTDIR)/etc/mandos
39
KEYDIR=$(DESTDIR)/etc/keys/mandos
40
MANDIR=$(PREFIX)/share/man
41
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
71
PREFIX:=$(DESTDIR)/usr
72
CONFDIR:=$(DESTDIR)/etc/mandos
73
KEYDIR:=$(DESTDIR)/etc/keys/mandos
74
MANDIR:=$(PREFIX)/share/man
75
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
76
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
77
STATEDIR:=$(DESTDIR)/var/lib/mandos
78
LIBDIR:=$(shell \
79
for d in \
80
"/usr/lib/`dpkg-architecture \
81
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
82
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
83
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
84
echo "$(DESTDIR)$$d"; \
85
break; \
86
fi; \
87
done)
88
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
42
89
##
43
90
44
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
45
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
46
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
47
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
48
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
49
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
91
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
92
--variable=systemdsystemunitdir)
93
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
--variable=tmpfilesdir)
95
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
--variable=sysusersdir)
97
98
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
99
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
100
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
101
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
102
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
103
|| gpgme-config --cflags; getconf LFS_CFLAGS)
104
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
105
|| gpgme-config --libs; getconf LFS_LIBS; \
50
106
getconf LFS_LDFLAGS)
107
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
108
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
109
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
110
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
51
111
52
112
# Do not change these two
53
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
54
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
55
-DVERSION='"$(version)"'
56
LDFLAGS=$(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
113
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
114
$(LANGUAGE) -DVERSION='"$(version)"'
115
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
116
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
57
117
58
118
# Commands to format a DocBook <refentry> document into a manual page
59
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
119
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
60
120
--param man.charmap.use.subset 0 \
61
121
--param make.year.ranges 1 \
62
122
--param make.single.year.ranges 1 \
63
123
--param man.output.quietly 1 \
64
124
--param man.authors.section.enabled 0 \
65
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
125
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
66
126
$(notdir $<); \
67
$(MANPOST) $(notdir $@)
68
# DocBook-to-man post-processing to fix a '\n' escape bug
69
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
127
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
128
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
129
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
130
$(notdir $@); fi >/dev/null)
70
131
71
DOCBOOKTOHTML=xsltproc --nonet --xinclude \
132
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
72
133
--param make.year.ranges 1 \
73
134
--param make.single.year.ranges 1 \
74
135
--param man.output.quietly 1 \
76
137
--param citerefentry.link 1 \
77
138
--output $@ \
78
139
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
79
$<; $(HTMLPOST) $@
140
$<; $(HTMLPOST) $@)
80
141
# Fix citerefentry links
81
HTMLPOST=$(SED) --in-place \
142
HTMLPOST:=$(SED) --in-place \
82
143
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
83
144
84
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
85
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo
86
CPROGS=plugin-runner $(PLUGINS)
87
PROGS=mandos mandos-keygen mandos-ctl $(CPROGS)
88
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
145
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
146
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
147
plugins.d/plymouth
148
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
149
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
150
$(PLUGIN_HELPERS)
151
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
152
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
153
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
154
dracut-module/password-agent.8mandos \
89
155
plugins.d/mandos-client.8mandos \
90
plugins.d/password-prompt.8mandos mandos.conf.5 \
91
plugins.d/usplash.8mandos plugins.d/splashy.8mandos \
92
plugins.d/askpass-fifo.8mandos mandos-clients.conf.5
93
94
htmldocs=$(addsuffix .xhtml,$(DOCS))
95
96
objects=$(addsuffix .o,$(CPROGS))
97
156
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
157
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
158
plugins.d/plymouth.8mandos intro.8mandos
159
160
htmldocs:=$(addsuffix .xhtml,$(DOCS))
161
162
objects:=$(addsuffix .o,$(CPROGS))
163
164
.PHONY: all
98
165
all: $(PROGS) mandos.lsm
99
166
167
.PHONY: doc
100
168
doc: $(DOCS)
101
169
170
.PHONY: html
102
171
html: $(htmldocs)
103
172
104
173
%.5: %.xml common.ent legalnotice.xml
116
185
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
117
186
$(DOCBOOKTOHTML)
118
187
188
intro.8mandos: intro.xml common.ent legalnotice.xml
189
$(DOCBOOKTOMAN)
190
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
191
$(DOCBOOKTOHTML)
192
119
193
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
120
194
legalnotice.xml
121
195
$(DOCBOOKTOMAN)
130
204
legalnotice.xml
131
205
$(DOCBOOKTOHTML)
132
206
207
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
208
legalnotice.xml
209
$(DOCBOOKTOMAN)
210
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
211
legalnotice.xml
212
$(DOCBOOKTOHTML)
213
214
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
215
legalnotice.xml
216
$(DOCBOOKTOMAN)
217
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
218
legalnotice.xml
219
$(DOCBOOKTOHTML)
220
133
221
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
134
222
legalnotice.xml
135
223
$(DOCBOOKTOMAN)
144
232
overview.xml legalnotice.xml
145
233
$(DOCBOOKTOHTML)
146
234
235
dracut-module/password-agent.8mandos: \
236
dracut-module/password-agent.xml common.ent \
237
overview.xml legalnotice.xml
238
$(DOCBOOKTOMAN)
239
dracut-module/password-agent.8mandos.xhtml: \
240
dracut-module/password-agent.xml common.ent \
241
overview.xml legalnotice.xml
242
$(DOCBOOKTOHTML)
243
147
244
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
148
245
common.ent \
149
246
mandos-options.xml \
157
254
158
255
# Update all these files with version number $(version)
159
256
common.ent: Makefile
160
$(SED) --in-place \
257
$(strip $(SED) --in-place \
161
258
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
162
$@
259
$@)
163
260
164
261
mandos: Makefile
165
$(SED) --in-place \
262
$(strip $(SED) --in-place \
166
263
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
167
$@
264
$@)
168
265
169
266
mandos-keygen: Makefile
170
$(SED) --in-place \
267
$(strip $(SED) --in-place \
171
268
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
172
$@
269
$@)
173
270
174
271
mandos-ctl: Makefile
175
$(SED) --in-place \
176
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
177
$@
272
$(strip $(SED) --in-place \
273
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
274
$@)
275
276
mandos-monitor: Makefile
277
$(strip $(SED) --in-place \
278
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
279
$@)
178
280
179
281
mandos.lsm: Makefile
180
$(SED) --in-place \
282
$(strip $(SED) --in-place \
181
283
--expression='s/^\(Version:\).*/\1\t$(version)/' \
182
$@
183
$(SED) --in-place \
284
$@)
285
$(strip $(SED) --in-place \
184
286
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
185
$@
186
$(SED) --in-place \
287
$@)
288
$(strip $(SED) --in-place \
187
289
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
188
$@
189
190
plugins.d/mandos-client: plugins.d/mandos-client.o
191
$(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
192
$(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
193
194
.PHONY : all doc html clean distclean run-client run-server install \
195
install-server install-client uninstall uninstall-server \
196
uninstall-client purge purge-server purge-client
197
290
$@)
291
292
# Uses nested functions
293
plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack
294
dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack
295
plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack
296
plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack
297
plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack
298
299
# Need to add the GnuTLS, Avahi and GPGME libraries
300
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
301
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
302
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
303
) $(AVAHI_LIBS) $(GPGME_LIBS)
304
305
# Need to add the libnl-route library
306
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
307
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
308
309
# Need to add the GLib and pthread libraries
310
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
311
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
312
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
313
314
.PHONY: clean
198
315
clean:
199
316
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
200
317
318
.PHONY: distclean
201
319
distclean: clean
320
.PHONY: mostlyclean
202
321
mostlyclean: clean
322
.PHONY: maintainer-clean
203
323
maintainer-clean: clean
204
-rm --force --recursive keydir confdir
324
-rm --force --recursive keydir confdir statedir
205
325
206
check: all
326
.PHONY: check
327
check: all
207
328
./mandos --check
329
./mandos-ctl --check
330
./mandos-keygen --version
331
./plugin-runner --version
332
./plugin-helpers/mandos-client-iprouteadddel --version
333
./dracut-module/password-agent --test
208
334
209
335
# Run the client with a local config and key
210
run-client: all keydir/seckey.txt keydir/pubkey.txt
336
.PHONY: run-client
337
run-client: all keydir/seckey.txt keydir/pubkey.txt \
338
keydir/tls-privkey.pem keydir/tls-pubkey.pem
339
@echo '######################################################'
340
@echo '# The following error messages are harmless and can #'
341
@echo '# be safely ignored: #'
342
@echo '## From plugin-runner: #'
343
@echo '# setgid: Operation not permitted #'
344
@echo '# setuid: Operation not permitted #'
345
@echo '## From askpass-fifo: #'
346
@echo '# mkfifo: Permission denied #'
347
@echo '## From mandos-client: #'
348
@echo '# Failed to raise privileges: Operation not permi... #'
349
@echo '# Warning: network hook "*" exited with status * #'
350
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
351
@echo '# Failed to bring up interface "*": Operation not... #'
352
@echo '# #'
353
@echo '# (The messages are caused by not running as root, #'
354
@echo '# but you should NOT run "make run-client" as root #'
355
@echo '# unless you also unpacked and compiled Mandos as #'
356
@echo '# root, which is also NOT recommended.) #'
357
@echo '######################################################'
358
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
211
359
./plugin-runner --plugin-dir=plugins.d \
360
--plugin-helper-dir=plugin-helpers \
212
361
--config-file=plugin-runner.conf \
213
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt \
362
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
363
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
214
364
$(CLIENTARGS)
215
365
216
366
# Used by run-client
217
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
367
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
218
368
install --directory keydir
219
369
./mandos-keygen --dir keydir --force
370
if ! [ -e keydir/tls-privkey.pem ]; then \
371
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
372
fi
373
if ! [ -e keydir/tls-pubkey.pem ]; then \
374
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
375
fi
220
376
221
377
# Run the server with a local config
222
run-server: confdir/mandos.conf confdir/clients.conf
223
./mandos --debug --no-dbus --configdir=confdir $(SERVERARGS)
378
.PHONY: run-server
379
run-server: confdir/mandos.conf confdir/clients.conf statedir
380
./mandos --debug --no-dbus --configdir=confdir \
381
--statedir=statedir $(SERVERARGS)
224
382
225
383
# Used by run-server
226
384
confdir/mandos.conf: mandos.conf
227
install --directory confdir
228
install --mode=u=rw,go=r $^ $@
229
confdir/clients.conf: clients.conf keydir/seckey.txt
230
install --directory confdir
231
install --mode=u=rw $< $@
385
install -D --mode=u=rw,go=r $^ $@
386
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
387
install -D --mode=u=rw $< $@
232
388
# Add a client password
233
./mandos-keygen --dir keydir --password >> $@
389
./mandos-keygen --dir keydir --password --no-ssh >> $@
390
statedir:
391
install --directory statedir
234
392
393
.PHONY: install
235
394
install: install-server install-client-nokey
236
395
396
.PHONY: install-html
237
397
install-html: html
238
install --directory $(htmldir)
239
install --mode=u=rw,go=r --target-directory=$(htmldir) \
398
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
240
399
$(htmldocs)
241
400
401
.PHONY: install-server
242
402
install-server: doc
403
if install --directory --mode=u=rwx --owner=$(USER) \
404
--group=$(GROUP) $(STATEDIR); then \
405
:; \
406
elif install --directory --mode=u=rwx $(STATEDIR); then \
407
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
408
fi
409
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
410
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
411
$(TMPFILES)/mandos.conf; \
412
fi
413
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
414
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
415
$(SYSUSERS)/mandos.conf; \
416
fi
417
install --directory $(PREFIX)/sbin
418
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
419
mandos
420
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
421
mandos-ctl
422
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
423
mandos-monitor
243
424
install --directory $(CONFDIR)
244
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
245
425
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
246
426
mandos.conf
247
427
install --mode=u=rw --target-directory=$(CONFDIR) \
248
428
clients.conf
249
install --mode=u=rwx,go=rx init.d-mandos \
429
install -D --mode=u=rw,go=r dbus-mandos.conf \
430
$(DBUSPOLICYDIR)/mandos.conf
431
install -D --mode=u=rwx,go=rx init.d-mandos \
250
432
$(DESTDIR)/etc/init.d/mandos
251
install --mode=u=rw,go=r default-mandos \
433
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
434
install -D --mode=u=rw,go=r mandos.service \
435
$(SYSTEMD); \
436
fi
437
install -D --mode=u=rw,go=r default-mandos \
252
438
$(DESTDIR)/etc/default/mandos
253
439
if [ -z $(DESTDIR) ]; then \
254
440
update-rc.d mandos defaults 25 15;\
255
441
fi
442
install --directory $(MANDIR)/man8 $(MANDIR)/man5
256
443
gzip --best --to-stdout mandos.8 \
257
444
> $(MANDIR)/man8/mandos.8.gz
445
gzip --best --to-stdout mandos-monitor.8 \
446
> $(MANDIR)/man8/mandos-monitor.8.gz
447
gzip --best --to-stdout mandos-ctl.8 \
448
> $(MANDIR)/man8/mandos-ctl.8.gz
258
449
gzip --best --to-stdout mandos.conf.5 \
259
450
> $(MANDIR)/man5/mandos.conf.5.gz
260
451
gzip --best --to-stdout mandos-clients.conf.5 \
261
452
> $(MANDIR)/man5/mandos-clients.conf.5.gz
453
gzip --best --to-stdout intro.8mandos \
454
> $(MANDIR)/man8/intro.8mandos.gz
262
455
456
.PHONY: install-client-nokey
263
457
install-client-nokey: all doc
264
install --directory $(PREFIX)/lib/mandos $(CONFDIR)
265
458
install --directory --mode=u=rwx $(KEYDIR) \
266
$(PREFIX)/lib/mandos/plugins.d
267
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
268
install --mode=u=rwx \
269
--directory "$(CONFDIR)/plugins.d"; \
270
fi
271
install --mode=u=rwx,go=rx \
272
--target-directory=$(PREFIX)/lib/mandos plugin-runner
459
$(LIBDIR)/mandos/plugins.d \
460
$(LIBDIR)/mandos/plugin-helpers
461
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
462
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
463
$(SYSUSERS)/mandos-client.conf; \
464
fi
465
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
466
install --directory \
467
--mode=u=rwx "$(CONFDIR)/plugins.d" \
468
"$(CONFDIR)/plugin-helpers"; \
469
fi
470
install --directory --mode=u=rwx,go=rx \
471
"$(CONFDIR)/network-hooks.d"
472
install --mode=u=rwx,go=rx \
473
--target-directory=$(LIBDIR)/mandos plugin-runner
474
install --mode=u=rwx,go=rx \
475
--target-directory=$(LIBDIR)/mandos \
476
mandos-to-cryptroot-unlock
477
install --directory $(PREFIX)/sbin
273
478
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
274
479
mandos-keygen
275
480
install --mode=u=rwx,go=rx \
276
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
481
--target-directory=$(LIBDIR)/mandos/plugins.d \
277
482
plugins.d/password-prompt
278
483
install --mode=u=rwxs,go=rx \
279
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
484
--target-directory=$(LIBDIR)/mandos/plugins.d \
280
485
plugins.d/mandos-client
281
486
install --mode=u=rwxs,go=rx \
282
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
487
--target-directory=$(LIBDIR)/mandos/plugins.d \
283
488
plugins.d/usplash
284
489
install --mode=u=rwxs,go=rx \
285
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
490
--target-directory=$(LIBDIR)/mandos/plugins.d \
286
491
plugins.d/splashy
287
492
install --mode=u=rwxs,go=rx \
288
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
493
--target-directory=$(LIBDIR)/mandos/plugins.d \
289
494
plugins.d/askpass-fifo
290
install initramfs-tools-hook \
495
install --mode=u=rwxs,go=rx \
496
--target-directory=$(LIBDIR)/mandos/plugins.d \
497
plugins.d/plymouth
498
install --mode=u=rwx,go=rx \
499
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
500
plugin-helpers/mandos-client-iprouteadddel
501
install -D initramfs-tools-hook \
291
502
$(INITRAMFSTOOLS)/hooks/mandos
292
install --mode=u=rw,go=r initramfs-tools-hook-conf \
293
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
294
install initramfs-tools-script \
503
install -D --mode=u=rw,go=r initramfs-tools-conf \
504
$(INITRAMFSTOOLS)/conf.d/mandos-conf
505
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
506
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
507
install -D initramfs-tools-script \
295
508
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
509
install -D initramfs-tools-script-stop \
510
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
511
install -D --mode=u=rw,go=r \
512
--target-directory=$(DRACUTMODULE) \
513
dracut-module/ask-password-mandos.path \
514
dracut-module/ask-password-mandos.service
515
install --mode=u=rwxs,go=rx \
516
--target-directory=$(DRACUTMODULE) \
517
dracut-module/module-setup.sh \
518
dracut-module/cmdline-mandos.sh \
519
dracut-module/password-agent
296
520
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
521
install --directory $(MANDIR)/man8
297
522
gzip --best --to-stdout mandos-keygen.8 \
298
523
> $(MANDIR)/man8/mandos-keygen.8.gz
299
524
gzip --best --to-stdout plugin-runner.8mandos \
300
525
> $(MANDIR)/man8/plugin-runner.8mandos.gz
526
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
527
> $(MANDIR)/man8/mandos-client.8mandos.gz
301
528
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
302
529
> $(MANDIR)/man8/password-prompt.8mandos.gz
303
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
304
> $(MANDIR)/man8/mandos-client.8mandos.gz
305
530
gzip --best --to-stdout plugins.d/usplash.8mandos \
306
531
> $(MANDIR)/man8/usplash.8mandos.gz
307
532
gzip --best --to-stdout plugins.d/splashy.8mandos \
308
533
> $(MANDIR)/man8/splashy.8mandos.gz
309
534
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
310
535
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
536
gzip --best --to-stdout plugins.d/plymouth.8mandos \
537
> $(MANDIR)/man8/plymouth.8mandos.gz
538
gzip --best --to-stdout dracut-module/password-agent.8mandos \
539
> $(MANDIR)/man8/password-agent.8mandos.gz
311
540
541
.PHONY: install-client
312
542
install-client: install-client-nokey
313
543
# Post-installation stuff
314
544
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
315
update-initramfs -k all -u
545
if command -v update-initramfs >/dev/null; then \
546
update-initramfs -k all -u; \
547
elif command -v dracut >/dev/null; then \
548
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
549
if [ -w "$$initrd" ]; then \
550
chmod go-r "$$initrd"; \
551
dracut --force "$$initrd"; \
552
fi; \
553
done; \
554
fi
316
555
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
317
556
557
.PHONY: uninstall
318
558
uninstall: uninstall-server uninstall-client
319
559
560
.PHONY: uninstall-server
320
561
uninstall-server:
321
562
-rm --force $(PREFIX)/sbin/mandos \
563
$(PREFIX)/sbin/mandos-ctl \
564
$(PREFIX)/sbin/mandos-monitor \
322
565
$(MANDIR)/man8/mandos.8.gz \
566
$(MANDIR)/man8/mandos-monitor.8.gz \
567
$(MANDIR)/man8/mandos-ctl.8.gz \
323
568
$(MANDIR)/man5/mandos.conf.5.gz \
324
569
$(MANDIR)/man5/mandos-clients.conf.5.gz
325
570
update-rc.d -f mandos remove
326
571
-rmdir $(CONFDIR)
327
572
573
.PHONY: uninstall-client
328
574
uninstall-client:
329
575
# Refuse to uninstall client if /etc/crypttab is explicitly configured
330
576
# to use it.
331
577
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
332
578
$(DESTDIR)/etc/crypttab
333
579
-rm --force $(PREFIX)/sbin/mandos-keygen \
334
$(PREFIX)/lib/mandos/plugin-runner \
335
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
336
$(PREFIX)/lib/mandos/plugins.d/mandos-client \
337
$(PREFIX)/lib/mandos/plugins.d/usplash \
338
$(PREFIX)/lib/mandos/plugins.d/splashy \
339
$(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
580
$(LIBDIR)/mandos/plugin-runner \
581
$(LIBDIR)/mandos/plugins.d/password-prompt \
582
$(LIBDIR)/mandos/plugins.d/mandos-client \
583
$(LIBDIR)/mandos/plugins.d/usplash \
584
$(LIBDIR)/mandos/plugins.d/splashy \
585
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
586
$(LIBDIR)/mandos/plugins.d/plymouth \
340
587
$(INITRAMFSTOOLS)/hooks/mandos \
341
588
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
342
589
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
590
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
591
$(DRACUTMODULE)/ask-password-mandos.path \
592
$(DRACUTMODULE)/ask-password-mandos.service \
593
$(DRACUTMODULE)/module-setup.sh \
594
$(DRACUTMODULE)/cmdline-mandos.sh \
595
$(DRACUTMODULE)/password-agent \
596
$(MANDIR)/man8/mandos-keygen.8.gz \
343
597
$(MANDIR)/man8/plugin-runner.8mandos.gz \
344
$(MANDIR)/man8/mandos-keygen.8.gz \
598
$(MANDIR)/man8/mandos-client.8mandos.gz
345
599
$(MANDIR)/man8/password-prompt.8mandos.gz \
346
600
$(MANDIR)/man8/usplash.8mandos.gz \
347
601
$(MANDIR)/man8/splashy.8mandos.gz \
348
602
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
349
$(MANDIR)/man8/mandos-client.8mandos.gz
350
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
351
$(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
352
update-initramfs -k all -u
603
$(MANDIR)/man8/plymouth.8mandos.gz \
604
$(MANDIR)/man8/password-agent.8mandos.gz \
605
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
606
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
607
if command -v update-initramfs >/dev/null; then \
608
update-initramfs -k all -u; \
609
elif command -v dracut >/dev/null; then \
610
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
611
test -w "$$initrd" && dracut --force "$$initrd"; \
612
done; \
613
fi
353
614
615
.PHONY: purge
354
616
purge: purge-server purge-client
355
617
618
.PHONY: purge-server
356
619
purge-server: uninstall-server
357
620
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
621
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
358
622
$(DESTDIR)/etc/default/mandos \
359
623
$(DESTDIR)/etc/init.d/mandos \
624
$(DESTDIR)/run/mandos.pid \
360
625
$(DESTDIR)/var/run/mandos.pid
626
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
627
-rm --force -- $(SYSTEMD)/mandos.service; \
628
fi
361
629
-rmdir $(CONFDIR)
362
630
631
.PHONY: purge-client
363
632
purge-client: uninstall-client
364
-shred --remove $(KEYDIR)/seckey.txt
633
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
365
634
-rm --force $(CONFDIR)/plugin-runner.conf \
366
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
635
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
636
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
367
637
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0