To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 110
- compare with another revision
- download diff
- download tarball
- view history from revision 110
- Committer: Teddy Hogeborn
- Date: 2008-08-29 05:53:59 UTC
- Revision ID: teddy@fukt.bsnet.se-20080829055359-wkdasnyxtylmnxus
* mandos.xml (EXAMPLE): Replaced all occurences of command name with
"&COMMANDNAME;".
* plugins.d/password-prompt.c (main): Improved some documentation
strings. Do perror() of
tcgetattr() fails. Add debug
output if interrupted by signal.
Loop over write() instead of
using fwrite() when outputting
password. Add debug output if
getline() returns 0, unless it
was caused by a signal. Add
exit status code to debug
output.
* plugins.d/password-prompt.xml: Changed all single quotes to double
quotes for consistency. Removed
<?xml-stylesheet>.
(ENTITY TIMESTAMP): New. Automatically updated by Emacs time-stamp
by using Emacs local variables.
(/refentry/refentryinfo/title): Changed to "Mandos Manual".
(/refentry/refentryinfo/productname): Changed to "Mandos".
(/refentry/refentryinfo/date): New; set to "&TIMESTAMP;".
(/refentry/refentryinfo/copyright): Split copyright holders.
(/refentry/refnamediv/refpurpose): Improved wording.
(SYNOPSIS): Fix to use correct markup. Add short options.
(DESCRIPTION, OPTIONS): Improved wording.
(OPTIONS): Improved wording. Use more correct markup. Document
short options.
(EXIT STATUS): Add text.
(ENVIRONMENT): Document use of "cryptsource" and "crypttarget".
(FILES): REMOVED.
(BUGS): Add text.
(EXAMPLE): Added some examples.
(SECURITY): Added text.
(SEE ALSO): Remove reference to mandos(8). Add reference to
crypttab(5).
"&COMMANDNAME;".
* plugins.d/password-prompt.c (main): Improved some documentation
strings. Do perror() of
tcgetattr() fails. Add debug
output if interrupted by signal.
Loop over write() instead of
using fwrite() when outputting
password. Add debug output if
getline() returns 0, unless it
was caused by a signal. Add
exit status code to debug
output.
* plugins.d/password-prompt.xml: Changed all single quotes to double
quotes for consistency. Removed
<?xml-stylesheet>.
(ENTITY TIMESTAMP): New. Automatically updated by Emacs time-stamp
by using Emacs local variables.
(/refentry/refentryinfo/title): Changed to "Mandos Manual".
(/refentry/refentryinfo/productname): Changed to "Mandos".
(/refentry/refentryinfo/date): New; set to "&TIMESTAMP;".
(/refentry/refentryinfo/copyright): Split copyright holders.
(/refentry/refnamediv/refpurpose): Improved wording.
(SYNOPSIS): Fix to use correct markup. Add short options.
(DESCRIPTION, OPTIONS): Improved wording.
(OPTIONS): Improved wording. Use more correct markup. Document
short options.
(EXIT STATUS): Add text.
(ENVIRONMENT): Document use of "cryptsource" and "crypttarget".
(FILES): REMOVED.
(BUGS): Add text.
(EXAMPLE): Added some examples.
(SECURITY): Added text.
(SEE ALSO): Remove reference to mandos(8). Add reference to
crypttab(5).
- files added:
- plugins.d/usplash
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
6
4
-Wunsafe-loop-optimizations -Wpointer-arith \
7
5
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
#DEBUG=-ggdb3
14
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
15
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
16
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
17
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
18
ALL_SANITIZE_OPTIONS:=-fsanitize=address -fsanitize=undefined \
19
-fsanitize=shift -fsanitize=integer-divide-by-zero \
20
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
21
-fsanitize=return -fsanitize=signed-integer-overflow \
22
-fsanitize=bounds -fsanitize=alignment \
23
-fsanitize=object-size -fsanitize=float-divide-by-zero \
24
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
25
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
26
-fsanitize=enum
27
# Check which sanitizing options can be used
28
SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
29
echo 'int main(){}' | $(CC) --language=c $(option) /dev/stdin \
30
-o /dev/null >/dev/null 2>&1 && echo $(option)))
31
LINK_FORTIFY_LD=-z relro -z now
32
LINK_FORTIFY=
33
34
# If BROKEN_PIE is set, do not build with -pie
35
ifndef BROKEN_PIE
36
FORTIFY += -fPIE
37
LINK_FORTIFY += -pie
38
endif
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Wunreachable-code -Winline \
8
-Wvolatile-register-var
9
DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
39
13
#COVERAGE=--coverage
40
OPTIMIZE=-Os -fno-strict-aliasing
41
LANGUAGE=-std=gnu11
42
htmldir=man
43
version=1.7.6
44
SED=sed
45
46
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
47
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nogroup || echo 65534)))
48
49
## Use these settings for a traditional /usr/local install
50
# PREFIX=$(DESTDIR)/usr/local
51
# CONFDIR=$(DESTDIR)/etc/mandos
52
# KEYDIR=$(DESTDIR)/etc/mandos/keys
53
# MANDIR=$(PREFIX)/man
54
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
55
# STATEDIR=$(DESTDIR)/var/lib/mandos
56
# LIBDIR=$(PREFIX)/lib
57
##
58
59
## These settings are for a package-type install
14
OPTIMIZE=-Os
15
LANGUAGE=-std=gnu99
16
# PREFIX=/usr/local
60
17
PREFIX=$(DESTDIR)/usr
18
# CONFDIR=/usr/local/lib/mandos
61
19
CONFDIR=$(DESTDIR)/etc/mandos
62
KEYDIR=$(DESTDIR)/etc/keys/mandos
63
MANDIR=$(PREFIX)/share/man
64
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
65
STATEDIR=$(DESTDIR)/var/lib/mandos
66
LIBDIR=$(shell \
67
for d in \
68
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
69
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
70
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
71
echo "$(DESTDIR)$$d"; \
72
break; \
73
fi; \
74
done)
75
##
76
77
SYSTEMD=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
78
79
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
80
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
20
# MANDIR=/usr/local/man
21
MANDIR=$(DESTDIR)/usr/share/man
22
23
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
24
GNUTLS_LIBS=$(shell libgnutls-config --libs)
81
25
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
82
26
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
83
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
84
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
85
getconf LFS_LDFLAGS)
86
LIBNL3_CFLAGS=$(shell pkg-config --cflags-only-I libnl-route-3.0)
87
LIBNL3_LIBS=$(shell pkg-config --libs libnl-route-3.0)
27
GPGME_CFLAGS=$(shell gpgme-config --cflags)
28
GPGME_LIBS=$(shell gpgme-config --libs)
88
29
89
30
# Do not change these two
90
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(SANITIZE) $(COVERAGE) \
91
$(OPTIMIZE) $(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) \
92
$(GPGME_CFLAGS) -DVERSION='"$(version)"'
93
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
31
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
32
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
33
LDFLAGS=$(COVERAGE)
94
34
95
# Commands to format a DocBook <refentry> document into a manual page
96
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
35
# Commands to format a DocBook refentry document into a manual page
36
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
97
37
--param man.charmap.use.subset 0 \
98
38
--param make.year.ranges 1 \
99
39
--param make.single.year.ranges 1 \
100
40
--param man.output.quietly 1 \
101
41
--param man.authors.section.enabled 0 \
102
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
42
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
103
43
$(notdir $<); \
104
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
105
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
106
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
107
fi >/dev/null)
108
109
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
110
--param make.year.ranges 1 \
111
--param make.single.year.ranges 1 \
112
--param man.output.quietly 1 \
113
--param man.authors.section.enabled 0 \
114
--param citerefentry.link 1 \
115
--output $@ \
116
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
117
$<; $(HTMLPOST) $@)
118
# Fix citerefentry links
119
HTMLPOST=$(SED) --in-place \
120
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
121
122
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
123
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
124
plugins.d/plymouth
125
PLUGIN_HELPERS=plugin-helpers/mandos-client-iprouteadddel
126
CPROGS=plugin-runner $(PLUGINS) $(PLUGIN_HELPERS)
127
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
128
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
129
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
130
plugins.d/mandos-client.8mandos \
131
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
132
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
133
plugins.d/plymouth.8mandos intro.8mandos
134
135
htmldocs=$(addsuffix .xhtml,$(DOCS))
136
137
objects=$(addsuffix .o,$(CPROGS))
138
139
all: $(PROGS) mandos.lsm
44
$(MANPOST) $(notdir $@)
45
# DocBook-to-man post-processing to fix a \n escape bug
46
MANPOST=sed --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
47
48
PLUGINS=plugins.d/password-prompt plugins.d/password-request
49
PROGS=plugin-runner $(PLUGINS)
50
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
51
plugins.d/password-request.8mandos \
52
plugins.d/password-prompt.8mandos mandos.conf.5 \
53
mandos-clients.conf.5
54
55
objects=$(addsuffix .o,$(PROGS))
56
57
all: $(PROGS)
140
58
141
59
doc: $(DOCS)
142
60
143
html: $(htmldocs)
144
145
%.5: %.xml common.ent legalnotice.xml
146
$(DOCBOOKTOMAN)
147
%.5.xhtml: %.xml common.ent legalnotice.xml
148
$(DOCBOOKTOHTML)
149
150
%.8: %.xml common.ent legalnotice.xml
151
$(DOCBOOKTOMAN)
152
%.8.xhtml: %.xml common.ent legalnotice.xml
153
$(DOCBOOKTOHTML)
154
155
%.8mandos: %.xml common.ent legalnotice.xml
156
$(DOCBOOKTOMAN)
157
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
158
$(DOCBOOKTOHTML)
159
160
intro.8mandos: intro.xml common.ent legalnotice.xml
161
$(DOCBOOKTOMAN)
162
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
163
$(DOCBOOKTOHTML)
164
165
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
166
legalnotice.xml
167
$(DOCBOOKTOMAN)
168
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
169
overview.xml legalnotice.xml
170
$(DOCBOOKTOHTML)
171
172
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
173
legalnotice.xml
174
$(DOCBOOKTOMAN)
175
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
176
legalnotice.xml
177
$(DOCBOOKTOHTML)
178
179
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
180
legalnotice.xml
181
$(DOCBOOKTOMAN)
182
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
183
legalnotice.xml
184
$(DOCBOOKTOHTML)
185
186
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
187
legalnotice.xml
188
$(DOCBOOKTOMAN)
189
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
190
legalnotice.xml
191
$(DOCBOOKTOHTML)
192
193
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
194
legalnotice.xml
195
$(DOCBOOKTOMAN)
196
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
197
legalnotice.xml
198
$(DOCBOOKTOHTML)
199
200
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
201
legalnotice.xml
202
$(DOCBOOKTOMAN)
203
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
204
overview.xml legalnotice.xml
205
$(DOCBOOKTOHTML)
206
207
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
208
common.ent \
209
mandos-options.xml \
210
overview.xml legalnotice.xml
211
$(DOCBOOKTOMAN)
212
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
213
common.ent \
214
mandos-options.xml \
215
overview.xml legalnotice.xml
216
$(DOCBOOKTOHTML)
217
218
# Update all these files with version number $(version)
219
common.ent: Makefile
220
$(strip $(SED) --in-place \
221
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
222
$@)
223
224
mandos: Makefile
225
$(strip $(SED) --in-place \
226
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
227
$@)
228
229
mandos-keygen: Makefile
230
$(strip $(SED) --in-place \
231
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
232
$@)
233
234
mandos-ctl: Makefile
235
$(strip $(SED) --in-place \
236
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
237
$@)
238
239
mandos-monitor: Makefile
240
$(strip $(SED) --in-place \
241
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
242
$@)
243
244
mandos.lsm: Makefile
245
$(strip $(SED) --in-place \
246
--expression='s/^\(Version:\).*/\1\t$(version)/' \
247
$@)
248
$(strip $(SED) --in-place \
249
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
250
$@)
251
$(strip $(SED) --in-place \
252
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
253
$@)
254
255
plugins.d/mandos-client: plugins.d/mandos-client.c
256
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
257
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
258
259
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
260
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
261
) $(LOADLIBES) $(LDLIBS) -o $@
262
263
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
264
check run-client run-server install install-html \
265
install-server install-client-nokey install-client uninstall \
266
uninstall-server uninstall-client purge purge-server \
267
purge-client
61
%.5: %.xml
62
$(DOCBOOKTOMAN)
63
64
%.8: %.xml
65
$(DOCBOOKTOMAN)
66
67
%.8mandos: %.xml
68
$(DOCBOOKTOMAN)
69
70
mandos.8: mandos.xml mandos-options.xml
71
$(DOCBOOKTOMAN)
72
73
mandos.conf.5: mandos.conf.xml mandos-options.xml
74
$(DOCBOOKTOMAN)
75
76
plugins.d/password-request: plugins.d/password-request.o
77
$(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
78
$(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
79
80
.PHONY : all doc clean distclean run-client run-server install \
81
install-server install-client uninstall uninstall-server \
82
uninstall-client purge purge-server purge-client
268
83
269
84
clean:
270
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
85
-rm --force $(PROGS) $(objects) $(DOCS) core
271
86
272
87
distclean: clean
273
88
mostlyclean: clean
274
89
maintainer-clean: clean
275
-rm --force --recursive keydir confdir statedir
90
-rm --force --recursive keydir confdir
276
91
277
check: all
92
check:
278
93
./mandos --check
279
./mandos-ctl --check
280
94
281
# Run the client with a local config and key
282
run-client: all keydir/seckey.txt keydir/pubkey.txt
283
@echo "###################################################################"
284
@echo "# The following error messages are harmless and can be safely #"
285
@echo "# ignored. The messages are caused by not running as root, but #"
286
@echo "# you should NOT run \"make run-client\" as root unless you also #"
287
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
288
@echo "# From plugin-runner: setgid: Operation not permitted #"
289
@echo "# setuid: Operation not permitted #"
290
@echo "# From askpass-fifo: mkfifo: Permission denied #"
291
@echo "# From mandos-client: #"
292
@echo "# Failed to raise privileges: Operation not permitted #"
293
@echo "# Warning: network hook \"*\" exited with status * #"
294
@echo "###################################################################"
295
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
95
# Run the server with a local key
96
run-client: all keydir/seckey.txt keydir/pubkey.txt \
97
keydir/secring.gpg keydir/pubring.gpg
296
98
./plugin-runner --plugin-dir=plugins.d \
297
--plugin-helper-dir=plugin-helpers \
298
--config-file=plugin-runner.conf \
299
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
300
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
301
$(CLIENTARGS)
99
--options-for=password-request:--keydir=keydir
302
100
303
101
# Used by run-client
102
keydir/secring.gpg: keydir/seckey.txt
103
gpg --homedir $(dir $<) --import $^
104
keydir/pubring.gpg: keydir/pubkey.txt
105
gpg --homedir $(dir $<) --import $^
304
106
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
305
107
install --directory keydir
306
108
./mandos-keygen --dir keydir --force
307
109
308
110
# Run the server with a local config
309
run-server: confdir/mandos.conf confdir/clients.conf statedir
310
./mandos --debug --no-dbus --configdir=confdir \
311
--statedir=statedir $(SERVERARGS)
111
run-server: confdir/mandos.conf confdir/clients.conf
112
./mandos --debug --configdir=confdir
312
113
313
114
# Used by run-server
314
115
confdir/mandos.conf: mandos.conf
315
116
install --directory confdir
316
install --mode=u=rw,go=r $^ $@
117
install $^ $@
317
118
confdir/clients.conf: clients.conf keydir/seckey.txt
318
119
install --directory confdir
319
install --mode=u=rw $< $@
120
install clients.conf $@
320
121
# Add a client password
321
./mandos-keygen --dir keydir --password --no-ssh >> $@
322
statedir:
323
install --directory statedir
324
325
install: install-server install-client-nokey
326
327
install-html: html
328
install --directory $(htmldir)
329
install --mode=u=rw,go=r --target-directory=$(htmldir) \
330
$(htmldocs)
122
./mandos-keygen --dir keydir --password >> $@
123
124
install: install-server install-client
331
125
332
126
install-server: doc
333
install --directory $(CONFDIR)
334
if install --directory --mode=u=rwx --owner=$(USER) \
335
--group=$(GROUP) $(STATEDIR); then \
336
:; \
337
elif install --directory --mode=u=rwx $(STATEDIR); then \
338
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
339
fi
340
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
341
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
342
mandos-ctl
343
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
344
mandos-monitor
345
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
346
mandos.conf
347
install --mode=u=rw --target-directory=$(CONFDIR) \
127
install --directory --parents $(CONFDIR) $(MANDIR)/man5 \
128
$(MANDIR)/man8
129
install --mode=0755 mandos $(PREFIX)/sbin/mandos
130
install --mode=0644 --target-directory=$(CONFDIR) mandos.conf
131
install --mode=0640 --target-directory=$(CONFDIR) \
348
132
clients.conf
349
install --mode=u=rw,go=r dbus-mandos.conf \
350
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
351
install --mode=u=rwx,go=rx init.d-mandos \
352
$(DESTDIR)/etc/init.d/mandos
353
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
354
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
355
fi
356
install --mode=u=rw,go=r default-mandos \
357
$(DESTDIR)/etc/default/mandos
358
if [ -z $(DESTDIR) ]; then \
359
update-rc.d mandos defaults 25 15;\
360
fi
361
133
gzip --best --to-stdout mandos.8 \
362
134
> $(MANDIR)/man8/mandos.8.gz
363
gzip --best --to-stdout mandos-monitor.8 \
364
> $(MANDIR)/man8/mandos-monitor.8.gz
365
gzip --best --to-stdout mandos-ctl.8 \
366
> $(MANDIR)/man8/mandos-ctl.8.gz
367
135
gzip --best --to-stdout mandos.conf.5 \
368
136
> $(MANDIR)/man5/mandos.conf.5.gz
369
137
gzip --best --to-stdout mandos-clients.conf.5 \
370
138
> $(MANDIR)/man5/mandos-clients.conf.5.gz
371
gzip --best --to-stdout intro.8mandos \
372
> $(MANDIR)/man8/intro.8mandos.gz
373
139
374
install-client-nokey: all doc
375
install --directory $(LIBDIR)/mandos $(CONFDIR)
376
install --directory --mode=u=rwx $(KEYDIR) \
377
$(LIBDIR)/mandos/plugins.d \
378
$(LIBDIR)/mandos/plugin-helpers
379
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
380
install --mode=u=rwx \
381
--directory "$(CONFDIR)/plugins.d"; \
382
install --directory "$(CONFDIR)/plugin-helpers"; \
383
fi
384
install --mode=u=rwx,go=rx --directory \
385
"$(CONFDIR)/network-hooks.d"
386
install --mode=u=rwx,go=rx \
387
--target-directory=$(LIBDIR)/mandos plugin-runner
388
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
140
install-client: all doc /usr/share/initramfs-tools/hooks/.
141
install --directory --parents $(PREFIX)/lib/mandos \
142
$(CONFDIR) $(MANDIR)/man8
143
install --directory --mode=0700 $(PREFIX)/lib/mandos/plugins.d
144
chmod u=rwx,g=,o= $(PREFIX)/lib/mandos/plugins.d
145
install --mode=0755 --target-directory=$(PREFIX)/lib/mandos \
146
plugin-runner
147
install --mode=0755 --target-directory=$(PREFIX)/sbin \
389
148
mandos-keygen
390
install --mode=u=rwx,go=rx \
391
--target-directory=$(LIBDIR)/mandos/plugins.d \
149
install --mode=0755 \
150
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
392
151
plugins.d/password-prompt
393
install --mode=u=rwxs,go=rx \
394
--target-directory=$(LIBDIR)/mandos/plugins.d \
395
plugins.d/mandos-client
396
install --mode=u=rwxs,go=rx \
397
--target-directory=$(LIBDIR)/mandos/plugins.d \
398
plugins.d/usplash
399
install --mode=u=rwxs,go=rx \
400
--target-directory=$(LIBDIR)/mandos/plugins.d \
401
plugins.d/splashy
402
install --mode=u=rwxs,go=rx \
403
--target-directory=$(LIBDIR)/mandos/plugins.d \
404
plugins.d/askpass-fifo
405
install --mode=u=rwxs,go=rx \
406
--target-directory=$(LIBDIR)/mandos/plugins.d \
407
plugins.d/plymouth
408
install --mode=u=rwxs,go=rx \
409
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
410
plugin-helpers/mandos-client-iprouteadddel
152
install --mode=4755 \
153
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
154
plugins.d/password-request
411
155
install initramfs-tools-hook \
412
$(INITRAMFSTOOLS)/hooks/mandos
413
install --mode=u=rw,go=r initramfs-tools-hook-conf \
414
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
156
/usr/share/initramfs-tools/hooks/mandos
157
install initramfs-tools-hook-conf \
158
/usr/share/initramfs-tools/conf-hooks.d/mandos
415
159
install initramfs-tools-script \
416
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
417
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
160
/usr/share/initramfs-tools/scripts/local-top/mandos
418
161
gzip --best --to-stdout mandos-keygen.8 \
419
162
> $(MANDIR)/man8/mandos-keygen.8.gz
420
163
gzip --best --to-stdout plugin-runner.8mandos \
421
164
> $(MANDIR)/man8/plugin-runner.8mandos.gz
422
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
423
> $(MANDIR)/man8/mandos-client.8mandos.gz
424
165
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
425
166
> $(MANDIR)/man8/password-prompt.8mandos.gz
426
gzip --best --to-stdout plugins.d/usplash.8mandos \
427
> $(MANDIR)/man8/usplash.8mandos.gz
428
gzip --best --to-stdout plugins.d/splashy.8mandos \
429
> $(MANDIR)/man8/splashy.8mandos.gz
430
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
431
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
432
gzip --best --to-stdout plugins.d/plymouth.8mandos \
433
> $(MANDIR)/man8/plymouth.8mandos.gz
434
435
install-client: install-client-nokey
436
# Post-installation stuff
437
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
167
gzip --best --to-stdout plugins.d/password-request.8mandos \
168
> $(MANDIR)/man8/password-request.8mandos.gz
169
-$(PREFIX)/sbin/mandos-keygen
438
170
update-initramfs -k all -u
439
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
440
171
441
172
uninstall: uninstall-server uninstall-client
442
173
443
uninstall-server:
174
uninstall-server: $(PREFIX)/sbin/mandos
444
175
-rm --force $(PREFIX)/sbin/mandos \
445
$(PREFIX)/sbin/mandos-ctl \
446
$(PREFIX)/sbin/mandos-monitor \
447
176
$(MANDIR)/man8/mandos.8.gz \
448
$(MANDIR)/man8/mandos-monitor.8.gz \
449
$(MANDIR)/man8/mandos-ctl.8.gz \
450
177
$(MANDIR)/man5/mandos.conf.5.gz \
451
178
$(MANDIR)/man5/mandos-clients.conf.5.gz
452
update-rc.d -f mandos remove
453
179
-rmdir $(CONFDIR)
454
180
455
181
uninstall-client:
456
182
# Refuse to uninstall client if /etc/crypttab is explicitly configured
457
183
# to use it.
458
184
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
459
$(DESTDIR)/etc/crypttab
185
/etc/crypttab
460
186
-rm --force $(PREFIX)/sbin/mandos-keygen \
461
$(LIBDIR)/mandos/plugin-runner \
462
$(LIBDIR)/mandos/plugins.d/password-prompt \
463
$(LIBDIR)/mandos/plugins.d/mandos-client \
464
$(LIBDIR)/mandos/plugins.d/usplash \
465
$(LIBDIR)/mandos/plugins.d/splashy \
466
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
467
$(LIBDIR)/mandos/plugins.d/plymouth \
468
$(INITRAMFSTOOLS)/hooks/mandos \
469
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
470
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
187
$(PREFIX)/lib/mandos/plugin-runner \
188
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
189
$(PREFIX)/lib/mandos/plugins.d/password-request \
190
/usr/share/initramfs-tools/hooks/mandos \
191
/usr/share/initramfs-tools/conf-hooks.d/mandos \
192
$(MANDIR)/man8/plugin-runner.8mandos.gz \
471
193
$(MANDIR)/man8/mandos-keygen.8.gz \
472
$(MANDIR)/man8/plugin-runner.8mandos.gz \
473
$(MANDIR)/man8/mandos-client.8mandos.gz
474
194
$(MANDIR)/man8/password-prompt.8mandos.gz \
475
$(MANDIR)/man8/usplash.8mandos.gz \
476
$(MANDIR)/man8/splashy.8mandos.gz \
477
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
478
$(MANDIR)/man8/plymouth.8mandos.gz \
479
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
480
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
195
$(MANDIR)/man8/password-request.8mandos.gz
196
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
197
$(PREFIX)/lib/mandos $(CONFDIR)
481
198
update-initramfs -k all -u
482
199
483
200
purge: purge-server purge-client
484
201
485
202
purge-server: uninstall-server
486
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
487
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
488
$(DESTDIR)/etc/default/mandos \
489
$(DESTDIR)/etc/init.d/mandos \
490
$(SYSTEMD)/mandos.service \
491
$(DESTDIR)/run/mandos.pid \
492
$(DESTDIR)/var/run/mandos.pid
203
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf
493
204
-rmdir $(CONFDIR)
494
205
495
206
purge-client: uninstall-client
496
-shred --remove $(KEYDIR)/seckey.txt
497
-rm --force $(CONFDIR)/plugin-runner.conf \
498
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
499
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
207
-rm --force $(CONFDIR)/seckey.txt $(CONFDIR)/pubkey.txt
208
-rmdir $(CONFDIR) $(CONFDIR)/plugins.d
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0