To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 1237
- compare with another revision
- download diff
- download tarball
- view history from revision 1237
- Committer: Teddy Hogeborn
- Date: 2021-02-03 23:10:42 UTC
- Revision ID: teddy@recompile.se-20210203231042-2z3egrvpo1zt7nej
mandos-ctl: Fix bad test for command.Remove and related minor issues
The test for command.Remove removes all clients from the spy server,
and then loops over all clients, looking for the corresponding Remove
command as recorded by the spy server. But since since there aren't
any clients left after they were removed, no assertions are made, and
the test therefore does nothing. Fix this.
In tests for command.Approve and command.Deny, add checks that clients
were not somehow removed by the command (in which case, likewise, no
assertions are made).
Add related checks to TestPropertySetterCmd.runTest; i.e. test that a
sequence is not empty before looping over it and making assertions.
* mandos-ctl (TestBaseCommands.test_Remove): Save a copy of the
original "clients" dict, and loop over those instead. Add assertion
that all clients were indeed removed. Also fix the code which looks
for the Remove command, which now needs to actually work.
(TestBaseCommands.test_Approve, TestBaseCommands.test_Deny): Add
assertion that there are still clients before looping over them.
(TestPropertySetterCmd.runTest): Add assertion that the list of
values to get is not empty before looping over them. Also add check
that there are still clients before looping over clients.
The test for command.Remove removes all clients from the spy server,
and then loops over all clients, looking for the corresponding Remove
command as recorded by the spy server. But since since there aren't
any clients left after they were removed, no assertions are made, and
the test therefore does nothing. Fix this.
In tests for command.Approve and command.Deny, add checks that clients
were not somehow removed by the command (in which case, likewise, no
assertions are made).
Add related checks to TestPropertySetterCmd.runTest; i.e. test that a
sequence is not empty before looping over it and making assertions.
* mandos-ctl (TestBaseCommands.test_Remove): Save a copy of the
original "clients" dict, and loop over those instead. Add assertion
that all clients were indeed removed. Also fix the code which looks
for the Remove command, which now needs to actually work.
(TestBaseCommands.test_Approve, TestBaseCommands.test_Deny): Add
assertion that there are still clients before looping over them.
(TestPropertySetterCmd.runTest): Add assertion that the list of
values to get is not empty before looping over them. Also add check
that there are still clients before looping over clients.
- files added:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=1 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://www.kernel.org/doc/man-pages/online/pages/man7/feature_test_macros.7.html>
12
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
13
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
14
LINK_FORTIFY_LD=-z relro -z now
15
LINK_FORTIFY=
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
16
35
17
36
# If BROKEN_PIE is set, do not build with -pie
18
37
ifndef BROKEN_PIE
20
39
LINK_FORTIFY += -pie
21
40
endif
22
41
#COVERAGE=--coverage
23
OPTIMIZE=-Os
24
LANGUAGE=-std=gnu99
25
htmldir=man
26
version=1.6.3
27
SED=sed
28
29
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
30
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nobody || echo 65534)))
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
FEATURES:=-D_FILE_OFFSET_BITS=64
45
htmldir:=man
46
version:=1.8.14
47
SED:=sed
48
PKG_CONFIG?=pkg-config
49
50
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
|| getent passwd nobody || echo 65534)))
52
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
|| getent group nogroup || echo 65534)))
54
55
LINUXVERSION:=$(shell uname --kernel-release)
31
56
32
57
## Use these settings for a traditional /usr/local install
33
# PREFIX=$(DESTDIR)/usr/local
34
# CONFDIR=$(DESTDIR)/etc/mandos
35
# KEYDIR=$(DESTDIR)/etc/mandos/keys
36
# MANDIR=$(PREFIX)/man
37
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
38
# STATEDIR=$(DESTDIR)/var/lib/mandos
39
# LIBDIR=$(PREFIX)/lib
58
# PREFIX:=$(DESTDIR)/usr/local
59
# CONFDIR:=$(DESTDIR)/etc/mandos
60
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
# MANDIR:=$(PREFIX)/man
62
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
# LIBDIR:=$(PREFIX)/lib
40
66
##
41
67
42
68
## These settings are for a package-type install
43
PREFIX=$(DESTDIR)/usr
44
CONFDIR=$(DESTDIR)/etc/mandos
45
KEYDIR=$(DESTDIR)/etc/keys/mandos
46
MANDIR=$(PREFIX)/share/man
47
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
48
STATEDIR=$(DESTDIR)/var/lib/mandos
49
LIBDIR=$(shell \
69
PREFIX:=$(DESTDIR)/usr
70
CONFDIR:=$(DESTDIR)/etc/mandos
71
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
MANDIR:=$(PREFIX)/share/man
73
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
LIBDIR:=$(shell \
50
77
for d in \
51
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
78
"/usr/lib/`dpkg-architecture \
79
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
52
80
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
53
81
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
54
82
echo "$(DESTDIR)$$d"; \
57
85
done)
58
86
##
59
87
60
SYSTEMD=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
--variable=systemdsystemunitdir)
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
--variable=tmpfilesdir)
92
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
93
--variable=sysusersdir)
61
94
62
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
63
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
64
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
65
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
66
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
67
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
95
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
96
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
97
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
98
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
99
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
100
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
68
101
getconf LFS_LDFLAGS)
102
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
103
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
104
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
105
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
69
106
70
107
# Do not change these two
71
108
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
72
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
73
-DVERSION='"$(version)"'
74
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
109
$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
110
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
111
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
75
112
76
113
# Commands to format a DocBook <refentry> document into a manual page
77
114
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
82
119
--param man.authors.section.enabled 0 \
83
120
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
84
121
$(notdir $<); \
85
$(MANPOST) $(notdir $@);\
86
122
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
87
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
88
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
89
fi >/dev/null)
90
# DocBook-to-man post-processing to fix a '\n' escape bug
91
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
123
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
124
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
125
$(notdir $@); fi >/dev/null)
92
126
93
127
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
94
128
--param make.year.ranges 1 \
100
134
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
101
135
$<; $(HTMLPOST) $@)
102
136
# Fix citerefentry links
103
HTMLPOST=$(SED) --in-place \
137
HTMLPOST:=$(SED) --in-place \
104
138
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
105
139
106
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
140
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
107
141
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
108
142
plugins.d/plymouth
109
CPROGS=plugin-runner $(PLUGINS)
110
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
111
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
143
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
144
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
145
$(PLUGIN_HELPERS)
146
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
147
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
112
148
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
149
dracut-module/password-agent.8mandos \
113
150
plugins.d/mandos-client.8mandos \
114
151
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
115
152
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
116
153
plugins.d/plymouth.8mandos intro.8mandos
117
154
118
htmldocs=$(addsuffix .xhtml,$(DOCS))
119
120
objects=$(addsuffix .o,$(CPROGS))
121
155
htmldocs:=$(addsuffix .xhtml,$(DOCS))
156
157
objects:=$(addsuffix .o,$(CPROGS))
158
159
.PHONY: all
122
160
all: $(PROGS) mandos.lsm
123
161
162
.PHONY: doc
124
163
doc: $(DOCS)
125
164
165
.PHONY: html
126
166
html: $(htmldocs)
127
167
128
168
%.5: %.xml common.ent legalnotice.xml
187
227
overview.xml legalnotice.xml
188
228
$(DOCBOOKTOHTML)
189
229
230
dracut-module/password-agent.8mandos: \
231
dracut-module/password-agent.xml common.ent \
232
overview.xml legalnotice.xml
233
$(DOCBOOKTOMAN)
234
dracut-module/password-agent.8mandos.xhtml: \
235
dracut-module/password-agent.xml common.ent \
236
overview.xml legalnotice.xml
237
$(DOCBOOKTOHTML)
238
190
239
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
191
240
common.ent \
192
241
mandos-options.xml \
235
284
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
236
285
$@)
237
286
238
plugins.d/mandos-client: plugins.d/mandos-client.c
239
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
240
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
241
242
.PHONY : all doc html clean distclean run-client run-server install \
243
install-server install-client uninstall uninstall-server \
244
uninstall-client purge purge-server purge-client
245
287
# Need to add the GnuTLS, Avahi and GPGME libraries
288
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
289
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
290
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
291
) $(AVAHI_LIBS) $(GPGME_LIBS)
292
293
# Need to add the libnl-route library
294
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
295
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
296
297
# Need to add the GLib and pthread libraries
298
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
299
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
300
301
.PHONY: clean
246
302
clean:
247
303
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
248
304
305
.PHONY: distclean
249
306
distclean: clean
307
.PHONY: mostlyclean
250
308
mostlyclean: clean
309
.PHONY: maintainer-clean
251
310
maintainer-clean: clean
252
311
-rm --force --recursive keydir confdir statedir
253
312
254
check: all
313
.PHONY: check
314
check: all
255
315
./mandos --check
256
316
./mandos-ctl --check
317
./mandos-keygen --version
318
./plugin-runner --version
319
./plugin-helpers/mandos-client-iprouteadddel --version
320
./dracut-module/password-agent --test
257
321
258
322
# Run the client with a local config and key
259
run-client: all keydir/seckey.txt keydir/pubkey.txt
260
@echo "###################################################################"
261
@echo "# The following error messages are harmless and can be safely #"
262
@echo "# ignored. The messages are caused by not running as root, but #"
263
@echo "# you should NOT run \"make run-client\" as root unless you also #"
264
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
265
@echo "# From plugin-runner: setuid: Operation not permitted #"
266
@echo "# From askpass-fifo: mkfifo: Permission denied #"
267
@echo "# From mandos-client: setuid: Operation not permitted #"
268
@echo "# seteuid: Operation not permitted #"
269
@echo "# klogctl: Operation not permitted #"
270
@echo "###################################################################"
323
.PHONY: run-client
324
run-client: all keydir/seckey.txt keydir/pubkey.txt \
325
keydir/tls-privkey.pem keydir/tls-pubkey.pem
326
@echo '######################################################'
327
@echo '# The following error messages are harmless and can #'
328
@echo '# be safely ignored: #'
329
@echo '## From plugin-runner: #'
330
@echo '# setgid: Operation not permitted #'
331
@echo '# setuid: Operation not permitted #'
332
@echo '## From askpass-fifo: #'
333
@echo '# mkfifo: Permission denied #'
334
@echo '## From mandos-client: #'
335
@echo '# Failed to raise privileges: Operation not permi... #'
336
@echo '# Warning: network hook "*" exited with status * #'
337
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
338
@echo '# Failed to bring up interface "*": Operation not... #'
339
@echo '# #'
340
@echo '# (The messages are caused by not running as root, #'
341
@echo '# but you should NOT run "make run-client" as root #'
342
@echo '# unless you also unpacked and compiled Mandos as #'
343
@echo '# root, which is also NOT recommended.) #'
344
@echo '######################################################'
345
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
271
346
./plugin-runner --plugin-dir=plugins.d \
347
--plugin-helper-dir=plugin-helpers \
272
348
--config-file=plugin-runner.conf \
273
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
349
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
350
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
274
351
$(CLIENTARGS)
275
352
276
353
# Used by run-client
277
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
354
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
278
355
install --directory keydir
279
356
./mandos-keygen --dir keydir --force
357
if ! [ -e keydir/tls-privkey.pem ]; then \
358
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
359
fi
360
if ! [ -e keydir/tls-pubkey.pem ]; then \
361
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
362
fi
280
363
281
364
# Run the server with a local config
365
.PHONY: run-server
282
366
run-server: confdir/mandos.conf confdir/clients.conf statedir
283
367
./mandos --debug --no-dbus --configdir=confdir \
284
368
--statedir=statedir $(SERVERARGS)
287
371
confdir/mandos.conf: mandos.conf
288
372
install --directory confdir
289
373
install --mode=u=rw,go=r $^ $@
290
confdir/clients.conf: clients.conf keydir/seckey.txt
374
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
291
375
install --directory confdir
292
376
install --mode=u=rw $< $@
293
377
# Add a client password
294
./mandos-keygen --dir keydir --password >> $@
378
./mandos-keygen --dir keydir --password --no-ssh >> $@
295
379
statedir:
296
380
install --directory statedir
297
381
382
.PHONY: install
298
383
install: install-server install-client-nokey
299
384
385
.PHONY: install-html
300
386
install-html: html
301
387
install --directory $(htmldir)
302
388
install --mode=u=rw,go=r --target-directory=$(htmldir) \
303
389
$(htmldocs)
304
390
391
.PHONY: install-server
305
392
install-server: doc
306
393
install --directory $(CONFDIR)
307
394
if install --directory --mode=u=rwx --owner=$(USER) \
310
397
elif install --directory --mode=u=rwx $(STATEDIR); then \
311
398
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
312
399
fi
400
if [ "$(TMPFILES)" != "$(DESTDIR)" \
401
-a -d "$(TMPFILES)" ]; then \
402
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
403
$(TMPFILES)/mandos.conf; \
404
fi
405
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
406
-a -d "$(SYSUSERS)" ]; then \
407
install --mode=u=rw,go=r sysusers.d-mandos.conf \
408
$(SYSUSERS)/mandos.conf; \
409
fi
313
410
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
314
411
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
315
412
mandos-ctl
344
441
gzip --best --to-stdout intro.8mandos \
345
442
> $(MANDIR)/man8/intro.8mandos.gz
346
443
444
.PHONY: install-client-nokey
347
445
install-client-nokey: all doc
348
446
install --directory $(LIBDIR)/mandos $(CONFDIR)
349
447
install --directory --mode=u=rwx $(KEYDIR) \
350
$(LIBDIR)/mandos/plugins.d
448
$(LIBDIR)/mandos/plugins.d \
449
$(LIBDIR)/mandos/plugin-helpers
450
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
451
-a -d "$(SYSUSERS)" ]; then \
452
install --mode=u=rw,go=r sysusers.d-mandos.conf \
453
$(SYSUSERS)/mandos-client.conf; \
454
fi
351
455
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
352
456
install --mode=u=rwx \
353
--directory "$(CONFDIR)/plugins.d"; \
457
--directory "$(CONFDIR)/plugins.d" \
458
"$(CONFDIR)/plugin-helpers"; \
354
459
fi
355
460
install --mode=u=rwx,go=rx --directory \
356
461
"$(CONFDIR)/network-hooks.d"
357
462
install --mode=u=rwx,go=rx \
358
463
--target-directory=$(LIBDIR)/mandos plugin-runner
464
install --mode=u=rwx,go=rx \
465
--target-directory=$(LIBDIR)/mandos \
466
mandos-to-cryptroot-unlock
359
467
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
360
468
mandos-keygen
361
469
install --mode=u=rwx,go=rx \
376
484
install --mode=u=rwxs,go=rx \
377
485
--target-directory=$(LIBDIR)/mandos/plugins.d \
378
486
plugins.d/plymouth
487
install --mode=u=rwx,go=rx \
488
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
489
plugin-helpers/mandos-client-iprouteadddel
379
490
install initramfs-tools-hook \
380
491
$(INITRAMFSTOOLS)/hooks/mandos
381
install --mode=u=rw,go=r initramfs-tools-hook-conf \
382
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
492
install --mode=u=rw,go=r initramfs-tools-conf \
493
$(INITRAMFSTOOLS)/conf.d/mandos-conf
494
install --mode=u=rw,go=r initramfs-tools-conf-hook \
495
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
383
496
install initramfs-tools-script \
384
497
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
498
install initramfs-tools-script-stop \
499
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
500
install --directory $(DRACUTMODULE)
501
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
502
dracut-module/ask-password-mandos.path \
503
dracut-module/ask-password-mandos.service
504
install --mode=u=rwxs,go=rx \
505
--target-directory=$(DRACUTMODULE) \
506
dracut-module/module-setup.sh \
507
dracut-module/cmdline-mandos.sh \
508
dracut-module/password-agent
385
509
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
386
510
gzip --best --to-stdout mandos-keygen.8 \
387
511
> $(MANDIR)/man8/mandos-keygen.8.gz
399
523
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
400
524
gzip --best --to-stdout plugins.d/plymouth.8mandos \
401
525
> $(MANDIR)/man8/plymouth.8mandos.gz
526
gzip --best --to-stdout dracut-module/password-agent.8mandos \
527
> $(MANDIR)/man8/password-agent.8mandos.gz
402
528
529
.PHONY: install-client
403
530
install-client: install-client-nokey
404
531
# Post-installation stuff
405
532
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
406
update-initramfs -k all -u
533
if command -v update-initramfs >/dev/null; then \
534
update-initramfs -k all -u; \
535
elif command -v dracut >/dev/null; then \
536
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
537
if [ -w "$$initrd" ]; then \
538
chmod go-r "$$initrd"; \
539
dracut --force "$$initrd"; \
540
fi; \
541
done; \
542
fi
407
543
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
408
544
545
.PHONY: uninstall
409
546
uninstall: uninstall-server uninstall-client
410
547
548
.PHONY: uninstall-server
411
549
uninstall-server:
412
550
-rm --force $(PREFIX)/sbin/mandos \
413
551
$(PREFIX)/sbin/mandos-ctl \
420
558
update-rc.d -f mandos remove
421
559
-rmdir $(CONFDIR)
422
560
561
.PHONY: uninstall-client
423
562
uninstall-client:
424
563
# Refuse to uninstall client if /etc/crypttab is explicitly configured
425
564
# to use it.
436
575
$(INITRAMFSTOOLS)/hooks/mandos \
437
576
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
438
577
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
578
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
579
$(DRACUTMODULE)/ask-password-mandos.path \
580
$(DRACUTMODULE)/ask-password-mandos.service \
581
$(DRACUTMODULE)/module-setup.sh \
582
$(DRACUTMODULE)/cmdline-mandos.sh \
583
$(DRACUTMODULE)/password-agent \
439
584
$(MANDIR)/man8/mandos-keygen.8.gz \
440
585
$(MANDIR)/man8/plugin-runner.8mandos.gz \
441
586
$(MANDIR)/man8/mandos-client.8mandos.gz
444
589
$(MANDIR)/man8/splashy.8mandos.gz \
445
590
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
446
591
$(MANDIR)/man8/plymouth.8mandos.gz \
592
$(MANDIR)/man8/password-agent.8mandos.gz \
447
593
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
448
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
449
update-initramfs -k all -u
594
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
595
if command -v update-initramfs >/dev/null; then \
596
update-initramfs -k all -u; \
597
elif command -v dracut >/dev/null; then \
598
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
599
test -w "$$initrd" && dracut --force "$$initrd"; \
600
done; \
601
fi
450
602
603
.PHONY: purge
451
604
purge: purge-server purge-client
452
605
606
.PHONY: purge-server
453
607
purge-server: uninstall-server
454
608
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
455
609
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
460
614
$(DESTDIR)/var/run/mandos.pid
461
615
-rmdir $(CONFDIR)
462
616
617
.PHONY: purge-client
463
618
purge-client: uninstall-client
464
-shred --remove $(KEYDIR)/seckey.txt
619
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
465
620
-rm --force $(CONFDIR)/plugin-runner.conf \
466
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
621
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
622
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
467
623
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0