/mandos/trunk : revision 1123

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to Makefile

Committer: Teddy Hogeborn
Date: 2019-07-25 21:42:40 UTC
Revision ID: teddy@recompile.se-20190725214240-31i9qehf60xb8yu4

Use hexadecimal unicode character references, not decimal

* mandos-options.xml (priority): Use "" instead of ""
to make it slightly more clear that ZERO WIDTH SPACE is intended.

Show diffs side-by-side

added added

removed removed

Makefile

-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \

-Wredundant-decls -Wnested-externs -Winline -Wvla \

-Wvolatile-register-var -Woverlength-strings

#DEBUG:=-ggdb3 -fsanitize=address

# For info about _FORTIFY_SOURCE, see feature_test_macros(7)

# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.

FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC

#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)

## Check which sanitizing options can be used

#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \

# echo 'int main(){}' | $(CC) --language=c $(option) \

# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))

# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>

ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \

-fsanitize=shift -fsanitize=integer-divide-by-zero \

-fsanitize=object-size -fsanitize=float-divide-by-zero \

-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \

-fsanitize=returns-nonnull-attribute -fsanitize=bool \

-fsanitize=enum

# Check which sanitizing options can be used

SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \

echo 'int main(){}' | $(CC) --language=c $(option) /dev/stdin \

-o /dev/null >/dev/null 2>&1 && echo $(option)))

-fsanitize=enum -fsanitize-address-use-after-scope

# For info about _FORTIFY_SOURCE, see feature_test_macros(7)

# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.

FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC

LINK_FORTIFY_LD:=-z relro -z now

LINK_FORTIFY:=

OPTIMIZE:=-Os -fno-strict-aliasing

LANGUAGE:=-std=gnu11

htmldir:=man

version:=1.8.3

version:=1.8.4

SED:=sed

USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))

GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nogroup || echo 65534)))

USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \

|| getent passwd nobody || echo 65534)))

GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \

|| getent group nogroup || echo 65534)))

## Use these settings for a traditional /usr/local install

# PREFIX:=$(DESTDIR)/usr/local

LIBNL3_LIBS:=$(shell pkg-config --libs libnl-route-3.0)

# Do not change these two

CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(SANITIZE) $(COVERAGE) \

CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) \

$(OPTIMIZE) $(LANGUAGE) -DVERSION='"$(version)"'

LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))

LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \

) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))

100

# Commands to format a DocBook <refentry> document into a manual page

101

DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \

102

107

/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \

103

108

$(notdir $<); \

104

109

if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \

105

&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \

106

man --warnings --encoding=UTF-8 --local-file $(notdir $@); \

107

fi >/dev/null)

110

&& command -v man >/dev/null; then LANG=en_US.UTF-8 \

111

MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \

112

$(notdir $@); fi >/dev/null)

108

113

109

114

DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \

110

115

--param make.year.ranges 1 \

252

257

--expression='s/$mandos_$[0-9.]\+$\.orig\.tar\.gz$/\1$(version)\2/' \

253

258

$@)

254

259

255

# Need to add the GnuTLS, Avahi and GPGME libraries, and can't use

256

# -fsanitize=leak because GnuTLS and GPGME both leak memory.

260

# Need to add the GnuTLS, Avahi and GPGME libraries

257

261

plugins.d/mandos-client: plugins.d/mandos-client.c

258

$(CC) $(filter-out -fsanitize=leak,$(CFLAGS)) $(strip\

259

) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) $(strip\

260

) $(CPPFLAGS) $(LDFLAGS) $(TARGET_ARCH) $^ $(strip\

261

) -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\

262

) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@

262

$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\

263

) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\

264

) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\

265

) $(LDLIBS) -o $@

263

266

267

# Need to add the libnl-route library

264

268

plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c

265

269

$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\

266

270

) $(LOADLIBES) $(LDLIBS) -o $@

279

283

maintainer-clean: clean

280

284

-rm --force --recursive keydir confdir statedir

281

285

282

check: all

286

check: all

283

287

./mandos --check

284

288

./mandos-ctl --check

289

./mandos-keygen --version

290

./plugin-runner --version

291

./plugin-helpers/mandos-client-iprouteadddel --version

285

292

286

293

# Run the client with a local config and key

287

294

run-client: all keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem

425

432

$(INITRAMFSTOOLS)/hooks/mandos

426

433

install --mode=u=rw,go=r initramfs-tools-conf \

427

434

$(INITRAMFSTOOLS)/conf.d/mandos-conf

435

install --mode=u=rw,go=r initramfs-tools-conf-hook \

436

$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos

428

437

install initramfs-tools-script \

429

438

$(INITRAMFSTOOLS)/scripts/init-premount/mandos

430

439

install initramfs-tools-script-stop \

Older »