To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 1152
- compare with another revision
- download diff
- download tarball
- view history from revision 1152
- Committer: Teddy Hogeborn
- Date: 2019-08-05 21:14:05 UTC
- Revision ID: teddy@recompile.se-20190805211405-9m6hecekaihpttz9
Override lintian warnings about upgrading from old versions
There are some really things which are imperative that we fix in case
someone were to upgrade from a really old version. We want to keep
these fixes in the postinst maintainer scripts, even though lintian
complains about such old upgrades not being supported by Debian in
general. We prefer the code being there, for the sake of the users.
* debian/mandos-client.lintian-overrides
(maintainer-script-supports-ancient-package-version): New.
debian/mandos.lintian-overrides
(maintainer-script-supports-ancient-package-version): - '' -
There are some really things which are imperative that we fix in case
someone were to upgrade from a really old version. We want to keep
these fixes in the postinst maintainer scripts, even though lintian
complains about such old upgrades not being supported by Debian in
general. We prefer the code being there, for the sake of the users.
* debian/mandos-client.lintian-overrides
(maintainer-script-supports-ancient-package-version): New.
debian/mandos.lintian-overrides
(maintainer-script-supports-ancient-package-version): - '' -
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files renamed:
- plugins.d/password-request.c => plugins.d/mandos-client.c
- plugins.d/password-request.xml => plugins.d/mandos-client.xml
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Wunreachable-code -Winline \
8
-Wvolatile-register-var
9
DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
35
36
# If BROKEN_PIE is set, do not build with -pie
37
ifndef BROKEN_PIE
38
FORTIFY += -fPIE
39
LINK_FORTIFY += -pie
40
endif
13
41
#COVERAGE=--coverage
14
OPTIMIZE=-Os
15
LANGUAGE=-std=gnu99
16
# PREFIX=/usr/local
17
PREFIX=$(DESTDIR)/usr
18
# CONFDIR=/usr/local/lib/mandos
19
CONFDIR=$(DESTDIR)/etc/mandos
20
# MANDIR=/usr/local/man
21
MANDIR=$(DESTDIR)/usr/share/man
22
23
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
24
GNUTLS_LIBS=$(shell libgnutls-config --libs)
25
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
26
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
27
GPGME_CFLAGS=$(shell gpgme-config --cflags)
28
GPGME_LIBS=$(shell gpgme-config --libs)
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
FEATURES:=-D_FILE_OFFSET_BITS=64
45
htmldir:=man
46
version:=1.8.6
47
SED:=sed
48
PKG_CONFIG?=pkg-config
49
50
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
|| getent passwd nobody || echo 65534)))
52
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
|| getent group nogroup || echo 65534)))
54
55
LINUXVERSION:=$(shell uname --kernel-release)
56
57
## Use these settings for a traditional /usr/local install
58
# PREFIX:=$(DESTDIR)/usr/local
59
# CONFDIR:=$(DESTDIR)/etc/mandos
60
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
# MANDIR:=$(PREFIX)/man
62
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
# LIBDIR:=$(PREFIX)/lib
66
##
67
68
## These settings are for a package-type install
69
PREFIX:=$(DESTDIR)/usr
70
CONFDIR:=$(DESTDIR)/etc/mandos
71
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
MANDIR:=$(PREFIX)/share/man
73
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
LIBDIR:=$(shell \
77
for d in \
78
"/usr/lib/`dpkg-architecture \
79
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
80
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
81
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
82
echo "$(DESTDIR)$$d"; \
83
break; \
84
fi; \
85
done)
86
##
87
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
--variable=systemdsystemunitdir)
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
--variable=tmpfilesdir)
92
93
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
94
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
95
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
96
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
97
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
98
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
99
getconf LFS_LDFLAGS)
100
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
101
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
102
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
103
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
29
104
30
105
# Do not change these two
31
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
32
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
33
LDFLAGS=$(COVERAGE)
106
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
107
$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
108
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
109
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
34
110
35
# Commands to format a DocBook refentry document into a manual page
36
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
111
# Commands to format a DocBook <refentry> document into a manual page
112
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
37
113
--param man.charmap.use.subset 0 \
38
114
--param make.year.ranges 1 \
39
115
--param make.single.year.ranges 1 \
40
116
--param man.output.quietly 1 \
41
117
--param man.authors.section.enabled 0 \
42
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
118
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
43
119
$(notdir $<); \
44
$(MANPOST) $(notdir $@)
45
# DocBook-to-man post-processing to fix a \n escape bug
46
MANPOST=sed --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
47
48
PLUGINS=plugins.d/password-prompt plugins.d/password-request
49
PROGS=plugin-runner $(PLUGINS)
50
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
51
plugins.d/password-request.8mandos \
52
plugins.d/password-prompt.8mandos mandos.conf.5 \
53
mandos-clients.conf.5
54
55
objects=$(addsuffix .o,$(PROGS))
56
57
all: $(PROGS)
120
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
121
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
122
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
123
$(notdir $@); fi >/dev/null)
124
125
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
126
--param make.year.ranges 1 \
127
--param make.single.year.ranges 1 \
128
--param man.output.quietly 1 \
129
--param man.authors.section.enabled 0 \
130
--param citerefentry.link 1 \
131
--output $@ \
132
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
133
$<; $(HTMLPOST) $@)
134
# Fix citerefentry links
135
HTMLPOST:=$(SED) --in-place \
136
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
137
138
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
139
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
140
plugins.d/plymouth
141
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
142
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
143
$(PLUGIN_HELPERS)
144
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
145
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
146
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
147
dracut-module/password-agent.8mandos \
148
plugins.d/mandos-client.8mandos \
149
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
150
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
151
plugins.d/plymouth.8mandos intro.8mandos
152
153
htmldocs:=$(addsuffix .xhtml,$(DOCS))
154
155
objects:=$(addsuffix .o,$(CPROGS))
156
157
all: $(PROGS) mandos.lsm
58
158
59
159
doc: $(DOCS)
60
160
61
%.5: %.xml legalnotice.xml
62
$(DOCBOOKTOMAN)
63
64
%.8: %.xml legalnotice.xml
65
$(DOCBOOKTOMAN)
66
67
%.8mandos: %.xml legalnotice.xml
68
$(DOCBOOKTOMAN)
69
70
mandos.8: mandos.xml mandos-options.xml overview.xml legalnotice.xml
71
$(DOCBOOKTOMAN)
72
73
mandos-keygen.8: mandos-keygen.xml overview.xml legalnotice.xml
74
$(DOCBOOKTOMAN)
75
76
mandos.conf.5: mandos.conf.xml mandos-options.xml legalnotice.xml
77
$(DOCBOOKTOMAN)
78
79
plugin-runner.8mandos: plugin-runner.xml overview.xml legalnotice.xml
80
$(DOCBOOKTOMAN)
81
82
plugins.d/password-request.8mandos: plugins.d/password-request.xml \
83
mandos-options.xml \
84
overview.xml legalnotice.xml
85
$(DOCBOOKTOMAN)
86
87
plugins.d/password-request: plugins.d/password-request.o
88
$(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
89
$(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
90
91
.PHONY : all doc clean distclean run-client run-server install \
92
install-server install-client uninstall uninstall-server \
93
uninstall-client purge purge-server purge-client
161
html: $(htmldocs)
162
163
%.5: %.xml common.ent legalnotice.xml
164
$(DOCBOOKTOMAN)
165
%.5.xhtml: %.xml common.ent legalnotice.xml
166
$(DOCBOOKTOHTML)
167
168
%.8: %.xml common.ent legalnotice.xml
169
$(DOCBOOKTOMAN)
170
%.8.xhtml: %.xml common.ent legalnotice.xml
171
$(DOCBOOKTOHTML)
172
173
%.8mandos: %.xml common.ent legalnotice.xml
174
$(DOCBOOKTOMAN)
175
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
176
$(DOCBOOKTOHTML)
177
178
intro.8mandos: intro.xml common.ent legalnotice.xml
179
$(DOCBOOKTOMAN)
180
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
181
$(DOCBOOKTOHTML)
182
183
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
184
legalnotice.xml
185
$(DOCBOOKTOMAN)
186
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
187
overview.xml legalnotice.xml
188
$(DOCBOOKTOHTML)
189
190
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
191
legalnotice.xml
192
$(DOCBOOKTOMAN)
193
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
194
legalnotice.xml
195
$(DOCBOOKTOHTML)
196
197
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
198
legalnotice.xml
199
$(DOCBOOKTOMAN)
200
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
201
legalnotice.xml
202
$(DOCBOOKTOHTML)
203
204
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
205
legalnotice.xml
206
$(DOCBOOKTOMAN)
207
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
208
legalnotice.xml
209
$(DOCBOOKTOHTML)
210
211
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
212
legalnotice.xml
213
$(DOCBOOKTOMAN)
214
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
215
legalnotice.xml
216
$(DOCBOOKTOHTML)
217
218
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
219
legalnotice.xml
220
$(DOCBOOKTOMAN)
221
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
222
overview.xml legalnotice.xml
223
$(DOCBOOKTOHTML)
224
225
dracut-module/password-agent.8mandos: \
226
dracut-module/password-agent.xml common.ent \
227
overview.xml legalnotice.xml
228
$(DOCBOOKTOMAN)
229
dracut-module/password-agent.8mandos.xhtml: \
230
dracut-module/password-agent.xml common.ent \
231
overview.xml legalnotice.xml
232
$(DOCBOOKTOHTML)
233
234
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
235
common.ent \
236
mandos-options.xml \
237
overview.xml legalnotice.xml
238
$(DOCBOOKTOMAN)
239
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
240
common.ent \
241
mandos-options.xml \
242
overview.xml legalnotice.xml
243
$(DOCBOOKTOHTML)
244
245
# Update all these files with version number $(version)
246
common.ent: Makefile
247
$(strip $(SED) --in-place \
248
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
249
$@)
250
251
mandos: Makefile
252
$(strip $(SED) --in-place \
253
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
254
$@)
255
256
mandos-keygen: Makefile
257
$(strip $(SED) --in-place \
258
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
259
$@)
260
261
mandos-ctl: Makefile
262
$(strip $(SED) --in-place \
263
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
264
$@)
265
266
mandos-monitor: Makefile
267
$(strip $(SED) --in-place \
268
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
269
$@)
270
271
mandos.lsm: Makefile
272
$(strip $(SED) --in-place \
273
--expression='s/^\(Version:\).*/\1\t$(version)/' \
274
$@)
275
$(strip $(SED) --in-place \
276
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
277
$@)
278
$(strip $(SED) --in-place \
279
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
280
$@)
281
282
# Need to add the GnuTLS, Avahi and GPGME libraries
283
plugins.d/mandos-client: plugins.d/mandos-client.c
284
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
285
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
286
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
287
) $(LDLIBS) -o $@
288
289
# Need to add the libnl-route library
290
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
291
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
292
) $(LOADLIBES) $(LDLIBS) -o $@
293
294
# Need to add the GLib and pthread libraries
295
dracut-module/password-agent: dracut-module/password-agent.c
296
$(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
297
) $(LOADLIBES) $(LDLIBS) -o $@
298
299
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
300
check run-client run-server install install-html \
301
install-server install-client-nokey install-client uninstall \
302
uninstall-server uninstall-client purge purge-server \
303
purge-client
94
304
95
305
clean:
96
-rm --force $(PROGS) $(objects) $(DOCS) core
306
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
97
307
98
308
distclean: clean
99
309
mostlyclean: clean
100
310
maintainer-clean: clean
101
-rm --force --recursive keydir confdir
311
-rm --force --recursive keydir confdir statedir
102
312
103
check:
313
check: all
104
314
./mandos --check
315
./mandos-ctl --check
316
./mandos-keygen --version
317
./plugin-runner --version
318
./plugin-helpers/mandos-client-iprouteadddel --version
319
./dracut-module/password-agent --test
105
320
106
321
# Run the client with a local config and key
107
322
run-client: all keydir/seckey.txt keydir/pubkey.txt \
108
keydir/secring.gpg keydir/pubring.gpg
323
keydir/tls-privkey.pem keydir/tls-pubkey.pem
324
@echo '######################################################'
325
@echo '# The following error messages are harmless and can #'
326
@echo '# be safely ignored: #'
327
@echo '## From plugin-runner: #'
328
@echo '# setgid: Operation not permitted #'
329
@echo '# setuid: Operation not permitted #'
330
@echo '## From askpass-fifo: #'
331
@echo '# mkfifo: Permission denied #'
332
@echo '## From mandos-client: #'
333
@echo '# Failed to raise privileges: Operation not permi... #'
334
@echo '# Warning: network hook "*" exited with status * #'
335
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
336
@echo '# Failed to bring up interface "*": Operation not... #'
337
@echo '# #'
338
@echo '# (The messages are caused by not running as root, #'
339
@echo '# but you should NOT run "make run-client" as root #'
340
@echo '# unless you also unpacked and compiled Mandos as #'
341
@echo '# root, which is also NOT recommended.) #'
342
@echo '######################################################'
343
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
109
344
./plugin-runner --plugin-dir=plugins.d \
345
--plugin-helper-dir=plugin-helpers \
110
346
--config-file=plugin-runner.conf \
111
--options-for=password-request:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
347
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
348
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
349
$(CLIENTARGS)
112
350
113
351
# Used by run-client
114
keydir/secring.gpg: keydir/seckey.txt
115
gpg --homedir $(dir $<) --import $^
116
keydir/pubring.gpg: keydir/pubkey.txt
117
gpg --homedir $(dir $<) --import $^
118
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
352
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
119
353
install --directory keydir
120
354
./mandos-keygen --dir keydir --force
121
355
122
356
# Run the server with a local config
123
run-server: confdir/mandos.conf confdir/clients.conf
124
./mandos --debug --configdir=confdir
357
run-server: confdir/mandos.conf confdir/clients.conf statedir
358
./mandos --debug --no-dbus --configdir=confdir \
359
--statedir=statedir $(SERVERARGS)
125
360
126
361
# Used by run-server
127
362
confdir/mandos.conf: mandos.conf
128
363
install --directory confdir
129
install $^ $@
130
confdir/clients.conf: clients.conf keydir/seckey.txt
364
install --mode=u=rw,go=r $^ $@
365
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
131
366
install --directory confdir
132
install clients.conf $@
367
install --mode=u=rw $< $@
133
368
# Add a client password
134
./mandos-keygen --dir keydir --password >> $@
135
136
install: install-server install-client
369
./mandos-keygen --dir keydir --password --no-ssh >> $@
370
statedir:
371
install --directory statedir
372
373
install: install-server install-client-nokey
374
375
install-html: html
376
install --directory $(htmldir)
377
install --mode=u=rw,go=r --target-directory=$(htmldir) \
378
$(htmldocs)
137
379
138
380
install-server: doc
139
install --directory --parents $(CONFDIR) $(MANDIR)/man5 \
140
$(MANDIR)/man8
141
install --mode=0755 mandos $(PREFIX)/sbin/mandos
142
install --mode=0644 --target-directory=$(CONFDIR) mandos.conf
143
install --mode=0640 --target-directory=$(CONFDIR) \
381
install --directory $(CONFDIR)
382
if install --directory --mode=u=rwx --owner=$(USER) \
383
--group=$(GROUP) $(STATEDIR); then \
384
:; \
385
elif install --directory --mode=u=rwx $(STATEDIR); then \
386
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
387
fi
388
if [ "$(TMPFILES)" != "$(DESTDIR)" \
389
-a -d "$(TMPFILES)" ]; then \
390
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
391
$(TMPFILES)/mandos.conf; \
392
fi
393
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
394
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
395
mandos-ctl
396
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
397
mandos-monitor
398
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
399
mandos.conf
400
install --mode=u=rw --target-directory=$(CONFDIR) \
144
401
clients.conf
402
install --mode=u=rw,go=r dbus-mandos.conf \
403
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
404
install --mode=u=rwx,go=rx init.d-mandos \
405
$(DESTDIR)/etc/init.d/mandos
406
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
407
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
408
fi
409
install --mode=u=rw,go=r default-mandos \
410
$(DESTDIR)/etc/default/mandos
411
if [ -z $(DESTDIR) ]; then \
412
update-rc.d mandos defaults 25 15;\
413
fi
145
414
gzip --best --to-stdout mandos.8 \
146
415
> $(MANDIR)/man8/mandos.8.gz
416
gzip --best --to-stdout mandos-monitor.8 \
417
> $(MANDIR)/man8/mandos-monitor.8.gz
418
gzip --best --to-stdout mandos-ctl.8 \
419
> $(MANDIR)/man8/mandos-ctl.8.gz
147
420
gzip --best --to-stdout mandos.conf.5 \
148
421
> $(MANDIR)/man5/mandos.conf.5.gz
149
422
gzip --best --to-stdout mandos-clients.conf.5 \
150
423
> $(MANDIR)/man5/mandos-clients.conf.5.gz
424
gzip --best --to-stdout intro.8mandos \
425
> $(MANDIR)/man8/intro.8mandos.gz
151
426
152
install-client: all doc /usr/share/initramfs-tools/hooks/.
153
install --directory --parents $(PREFIX)/lib/mandos \
154
$(CONFDIR) $(MANDIR)/man8
155
install --directory --mode=0700 $(PREFIX)/lib/mandos/plugins.d
156
chmod u=rwx,g=,o= $(PREFIX)/lib/mandos/plugins.d
157
install --mode=0755 --target-directory=$(PREFIX)/lib/mandos \
158
plugin-runner
159
install --mode=0755 --target-directory=$(PREFIX)/sbin \
427
install-client-nokey: all doc
428
install --directory $(LIBDIR)/mandos $(CONFDIR)
429
install --directory --mode=u=rwx $(KEYDIR) \
430
$(LIBDIR)/mandos/plugins.d \
431
$(LIBDIR)/mandos/plugin-helpers
432
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
433
install --mode=u=rwx \
434
--directory "$(CONFDIR)/plugins.d" \
435
"$(CONFDIR)/plugin-helpers"; \
436
fi
437
install --mode=u=rwx,go=rx --directory \
438
"$(CONFDIR)/network-hooks.d"
439
install --mode=u=rwx,go=rx \
440
--target-directory=$(LIBDIR)/mandos plugin-runner
441
install --mode=u=rwx,go=rx \
442
--target-directory=$(LIBDIR)/mandos \
443
mandos-to-cryptroot-unlock
444
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
160
445
mandos-keygen
161
install --mode=0755 \
162
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
446
install --mode=u=rwx,go=rx \
447
--target-directory=$(LIBDIR)/mandos/plugins.d \
163
448
plugins.d/password-prompt
164
install --mode=4755 \
165
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
166
plugins.d/password-request
449
install --mode=u=rwxs,go=rx \
450
--target-directory=$(LIBDIR)/mandos/plugins.d \
451
plugins.d/mandos-client
452
install --mode=u=rwxs,go=rx \
453
--target-directory=$(LIBDIR)/mandos/plugins.d \
454
plugins.d/usplash
455
install --mode=u=rwxs,go=rx \
456
--target-directory=$(LIBDIR)/mandos/plugins.d \
457
plugins.d/splashy
458
install --mode=u=rwxs,go=rx \
459
--target-directory=$(LIBDIR)/mandos/plugins.d \
460
plugins.d/askpass-fifo
461
install --mode=u=rwxs,go=rx \
462
--target-directory=$(LIBDIR)/mandos/plugins.d \
463
plugins.d/plymouth
464
install --mode=u=rwx,go=rx \
465
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
466
plugin-helpers/mandos-client-iprouteadddel
167
467
install initramfs-tools-hook \
168
/usr/share/initramfs-tools/hooks/mandos
169
install initramfs-tools-hook-conf \
170
/usr/share/initramfs-tools/conf-hooks.d/mandos
468
$(INITRAMFSTOOLS)/hooks/mandos
469
install --mode=u=rw,go=r initramfs-tools-conf \
470
$(INITRAMFSTOOLS)/conf.d/mandos-conf
471
install --mode=u=rw,go=r initramfs-tools-conf-hook \
472
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
171
473
install initramfs-tools-script \
172
/usr/share/initramfs-tools/scripts/local-top/mandos
474
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
475
install initramfs-tools-script-stop \
476
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
477
install --directory $(DRACUTMODULE)
478
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
479
dracut-module/ask-password-mandos.path \
480
dracut-module/ask-password-mandos.service
481
install --mode=u=rwxs,go=rx \
482
--target-directory=$(DRACUTMODULE) \
483
dracut-module/module-setup.sh \
484
dracut-module/cmdline-mandos.sh \
485
dracut-module/password-agent
486
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
173
487
gzip --best --to-stdout mandos-keygen.8 \
174
488
> $(MANDIR)/man8/mandos-keygen.8.gz
175
489
gzip --best --to-stdout plugin-runner.8mandos \
176
490
> $(MANDIR)/man8/plugin-runner.8mandos.gz
491
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
492
> $(MANDIR)/man8/mandos-client.8mandos.gz
177
493
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
178
494
> $(MANDIR)/man8/password-prompt.8mandos.gz
179
gzip --best --to-stdout plugins.d/password-request.8mandos \
180
> $(MANDIR)/man8/password-request.8mandos.gz
181
-$(PREFIX)/sbin/mandos-keygen
182
update-initramfs -k all -u
495
gzip --best --to-stdout plugins.d/usplash.8mandos \
496
> $(MANDIR)/man8/usplash.8mandos.gz
497
gzip --best --to-stdout plugins.d/splashy.8mandos \
498
> $(MANDIR)/man8/splashy.8mandos.gz
499
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
500
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
501
gzip --best --to-stdout plugins.d/plymouth.8mandos \
502
> $(MANDIR)/man8/plymouth.8mandos.gz
503
gzip --best --to-stdout dracut-module/password-agent.8mandos \
504
> $(MANDIR)/man8/password-agent.8mandos.gz
505
506
install-client: install-client-nokey
507
# Post-installation stuff
508
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
509
if command -v update-initramfs >/dev/null; then \
510
update-initramfs -k all -u; \
511
elif command -v dracut >/dev/null; then \
512
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
513
if [ -w "$$initrd" ]; then \
514
chmod go-r "$$initrd"; \
515
dracut --force "$$initrd"; \
516
fi; \
517
done; \
518
fi
519
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
183
520
184
521
uninstall: uninstall-server uninstall-client
185
522
186
uninstall-server: $(PREFIX)/sbin/mandos
523
uninstall-server:
187
524
-rm --force $(PREFIX)/sbin/mandos \
525
$(PREFIX)/sbin/mandos-ctl \
526
$(PREFIX)/sbin/mandos-monitor \
188
527
$(MANDIR)/man8/mandos.8.gz \
528
$(MANDIR)/man8/mandos-monitor.8.gz \
529
$(MANDIR)/man8/mandos-ctl.8.gz \
189
530
$(MANDIR)/man5/mandos.conf.5.gz \
190
531
$(MANDIR)/man5/mandos-clients.conf.5.gz
532
update-rc.d -f mandos remove
191
533
-rmdir $(CONFDIR)
192
534
193
535
uninstall-client:
194
536
# Refuse to uninstall client if /etc/crypttab is explicitly configured
195
537
# to use it.
196
538
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
197
/etc/crypttab
539
$(DESTDIR)/etc/crypttab
198
540
-rm --force $(PREFIX)/sbin/mandos-keygen \
199
$(PREFIX)/lib/mandos/plugin-runner \
200
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
201
$(PREFIX)/lib/mandos/plugins.d/password-request \
202
/usr/share/initramfs-tools/hooks/mandos \
203
/usr/share/initramfs-tools/conf-hooks.d/mandos \
541
$(LIBDIR)/mandos/plugin-runner \
542
$(LIBDIR)/mandos/plugins.d/password-prompt \
543
$(LIBDIR)/mandos/plugins.d/mandos-client \
544
$(LIBDIR)/mandos/plugins.d/usplash \
545
$(LIBDIR)/mandos/plugins.d/splashy \
546
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
547
$(LIBDIR)/mandos/plugins.d/plymouth \
548
$(INITRAMFSTOOLS)/hooks/mandos \
549
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
550
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
551
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
552
$(DRACUTMODULE)/ask-password-mandos.path \
553
$(DRACUTMODULE)/ask-password-mandos.service \
554
$(DRACUTMODULE)/module-setup.sh \
555
$(DRACUTMODULE)/cmdline-mandos.sh \
556
$(DRACUTMODULE)/password-agent \
557
$(MANDIR)/man8/mandos-keygen.8.gz \
204
558
$(MANDIR)/man8/plugin-runner.8mandos.gz \
205
$(MANDIR)/man8/mandos-keygen.8.gz \
559
$(MANDIR)/man8/mandos-client.8mandos.gz
206
560
$(MANDIR)/man8/password-prompt.8mandos.gz \
207
$(MANDIR)/man8/password-request.8mandos.gz
208
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
209
$(PREFIX)/lib/mandos $(CONFDIR)
210
update-initramfs -k all -u
561
$(MANDIR)/man8/usplash.8mandos.gz \
562
$(MANDIR)/man8/splashy.8mandos.gz \
563
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
564
$(MANDIR)/man8/plymouth.8mandos.gz \
565
$(MANDIR)/man8/password-agent.8mandos.gz \
566
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
567
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
568
if command -v update-initramfs >/dev/null; then \
569
update-initramfs -k all -u; \
570
elif command -v dracut >/dev/null; then \
571
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
572
test -w "$$initrd" && dracut --force "$$initrd"; \
573
done; \
574
fi
211
575
212
576
purge: purge-server purge-client
213
577
214
578
purge-server: uninstall-server
215
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf
579
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
580
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
581
$(DESTDIR)/etc/default/mandos \
582
$(DESTDIR)/etc/init.d/mandos \
583
$(SYSTEMD)/mandos.service \
584
$(DESTDIR)/run/mandos.pid \
585
$(DESTDIR)/var/run/mandos.pid
216
586
-rmdir $(CONFDIR)
217
587
218
588
purge-client: uninstall-client
219
-rm --force $(CONFDIR)/seckey.txt $(CONFDIR)/pubkey.txt
220
-rmdir $(CONFDIR) $(CONFDIR)/plugins.d
589
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
590
-rm --force $(CONFDIR)/plugin-runner.conf \
591
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
592
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
593
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0