90
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
93
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
89
--variable=systemdsystemunitdir)
95
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
91
--variable=tmpfilesdir)
97
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
98
--variable=sysusersdir)
100
93
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
101
94
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
102
95
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
103
96
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
104
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
105
|| gpgme-config --cflags; getconf LFS_CFLAGS)
106
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
107
|| gpgme-config --libs; getconf LFS_LIBS; \
97
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
98
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
108
99
getconf LFS_LDFLAGS)
109
100
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
110
101
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
291
279
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
294
# Does the linker support the --no-warn-execstack option?
295
ifeq ($(shell echo 'int main(){}'|$(CC) --language=c /dev/stdin -o /dev/null -Xlinker --no-warn-execstack >/dev/null 2>&1 && echo yes),yes)
296
# These programs use nested functions, which uses an executable stack
297
plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack
298
dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack
299
plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack
300
plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack
301
plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack
304
282
# Need to add the GnuTLS, Avahi and GPGME libraries
305
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
306
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
307
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
308
) $(AVAHI_LIBS) $(GPGME_LIBS)
283
plugins.d/mandos-client: plugins.d/mandos-client.c
284
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
285
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
286
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
310
289
# Need to add the libnl-route library
311
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
312
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
290
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
291
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
292
) $(LOADLIBES) $(LDLIBS) -o $@
314
294
# Need to add the GLib and pthread libraries
315
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
316
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
317
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
295
dracut-module/password-agent: dracut-module/password-agent.c
296
$(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
297
) $(LOADLIBES) $(LDLIBS) -o $@
299
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
300
check run-client run-server install install-html \
301
install-server install-client-nokey install-client uninstall \
302
uninstall-server uninstall-client purge purge-server \
321
306
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
326
309
mostlyclean: clean
327
.PHONY: maintainer-clean
328
310
maintainer-clean: clean
329
311
-rm --force --recursive keydir confdir statedir
334
315
./mandos-ctl --check
372
352
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
373
353
install --directory keydir
374
354
./mandos-keygen --dir keydir --force
375
if ! [ -e keydir/tls-privkey.pem ]; then \
376
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
378
if ! [ -e keydir/tls-pubkey.pem ]; then \
379
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
382
356
# Run the server with a local config
384
357
run-server: confdir/mandos.conf confdir/clients.conf statedir
385
358
./mandos --debug --no-dbus --configdir=confdir \
386
359
--statedir=statedir $(SERVERARGS)
388
361
# Used by run-server
389
362
confdir/mandos.conf: mandos.conf
390
install -D --mode=u=rw,go=r $^ $@
363
install --directory confdir
364
install --mode=u=rw,go=r $^ $@
391
365
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
392
install -D --mode=u=rw $< $@
366
install --directory confdir
367
install --mode=u=rw $< $@
393
368
# Add a client password
394
369
./mandos-keygen --dir keydir --password --no-ssh >> $@
396
371
install --directory statedir
399
373
install: install-server install-client-nokey
402
375
install-html: html
403
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
376
install --directory $(htmldir)
377
install --mode=u=rw,go=r --target-directory=$(htmldir) \
406
.PHONY: install-server
407
380
install-server: doc
381
install --directory $(CONFDIR)
408
382
if install --directory --mode=u=rwx --owner=$(USER) \
409
383
--group=$(GROUP) $(STATEDIR); then \
411
385
elif install --directory --mode=u=rwx $(STATEDIR); then \
412
386
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
414
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
415
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
388
if [ "$(TMPFILES)" != "$(DESTDIR)" \
389
-a -d "$(TMPFILES)" ]; then \
390
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
416
391
$(TMPFILES)/mandos.conf; \
418
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
419
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
420
$(SYSUSERS)/mandos.conf; \
422
install --directory $(BINDIR)
423
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) mandos
424
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
393
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
394
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
426
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
396
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
428
install --directory $(CONFDIR)
429
398
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
431
400
install --mode=u=rw --target-directory=$(CONFDIR) \
433
install -D --mode=u=rw,go=r dbus-mandos.conf \
434
$(DBUSPOLICYDIR)/mandos.conf
435
install -D --mode=u=rwx,go=rx init.d-mandos \
402
install --mode=u=rw,go=r dbus-mandos.conf \
403
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
404
install --mode=u=rwx,go=rx init.d-mandos \
436
405
$(DESTDIR)/etc/init.d/mandos
437
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
438
install -D --mode=u=rw,go=r mandos.service \
406
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
407
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
441
install -D --mode=u=rw,go=r default-mandos \
409
install --mode=u=rw,go=r default-mandos \
442
410
$(DESTDIR)/etc/default/mandos
443
411
if [ -z $(DESTDIR) ]; then \
444
412
update-rc.d mandos defaults 25 15;\
446
install --directory $(MANDIR)/man8 $(MANDIR)/man5
447
414
gzip --best --to-stdout mandos.8 \
448
415
> $(MANDIR)/man8/mandos.8.gz
449
416
gzip --best --to-stdout mandos-monitor.8 \
457
424
gzip --best --to-stdout intro.8mandos \
458
425
> $(MANDIR)/man8/intro.8mandos.gz
460
.PHONY: install-client-nokey
461
427
install-client-nokey: all doc
428
install --directory $(LIBDIR)/mandos $(CONFDIR)
462
429
install --directory --mode=u=rwx $(KEYDIR) \
463
430
$(LIBDIR)/mandos/plugins.d \
464
431
$(LIBDIR)/mandos/plugin-helpers
465
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
466
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
467
$(SYSUSERS)/mandos-client.conf; \
469
432
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
470
install --directory \
471
--mode=u=rwx "$(CONFDIR)/plugins.d" \
433
install --mode=u=rwx \
434
--directory "$(CONFDIR)/plugins.d" \
472
435
"$(CONFDIR)/plugin-helpers"; \
474
install --directory --mode=u=rwx,go=rx \
437
install --mode=u=rwx,go=rx --directory \
475
438
"$(CONFDIR)/network-hooks.d"
476
439
install --mode=u=rwx,go=rx \
477
440
--target-directory=$(LIBDIR)/mandos plugin-runner
478
441
install --mode=u=rwx,go=rx \
479
442
--target-directory=$(LIBDIR)/mandos \
480
443
mandos-to-cryptroot-unlock
481
install --directory $(BINDIR)
482
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
444
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
484
446
install --mode=u=rwx,go=rx \
485
447
--target-directory=$(LIBDIR)/mandos/plugins.d \
502
464
install --mode=u=rwx,go=rx \
503
465
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
504
466
plugin-helpers/mandos-client-iprouteadddel
505
install -D initramfs-tools-hook \
467
install initramfs-tools-hook \
506
468
$(INITRAMFSTOOLS)/hooks/mandos
507
install -D --mode=u=rw,go=r initramfs-tools-conf \
469
install --mode=u=rw,go=r initramfs-tools-conf \
508
470
$(INITRAMFSTOOLS)/conf.d/mandos-conf
509
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
471
install --mode=u=rw,go=r initramfs-tools-conf-hook \
510
472
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
511
install -D initramfs-tools-script \
473
install initramfs-tools-script \
512
474
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
513
install -D initramfs-tools-script-stop \
475
install initramfs-tools-script-stop \
514
476
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
515
install -D --mode=u=rw,go=r \
516
--target-directory=$(DRACUTMODULE) \
477
install --directory $(DRACUTMODULE)
478
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
517
479
dracut-module/ask-password-mandos.path \
518
480
dracut-module/ask-password-mandos.service
519
481
install --mode=u=rwxs,go=rx \
620
576
purge: purge-server purge-client
623
578
purge-server: uninstall-server
624
579
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
625
580
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
626
581
$(DESTDIR)/etc/default/mandos \
627
582
$(DESTDIR)/etc/init.d/mandos \
583
$(SYSTEMD)/mandos.service \
628
584
$(DESTDIR)/run/mandos.pid \
629
585
$(DESTDIR)/var/run/mandos.pid
630
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
631
-rm --force -- $(SYSTEMD)/mandos.service; \
633
586
-rmdir $(CONFDIR)
636
588
purge-client: uninstall-client
637
589
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
638
590
-rm --force $(CONFDIR)/plugin-runner.conf \