To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 1237
- compare with another revision
- download diff
- download tarball
- view history from revision 1237
- Committer: Teddy Hogeborn
- Date: 2021-02-03 23:10:42 UTC
- Revision ID: teddy@recompile.se-20210203231042-2z3egrvpo1zt7nej
mandos-ctl: Fix bad test for command.Remove and related minor issues
The test for command.Remove removes all clients from the spy server,
and then loops over all clients, looking for the corresponding Remove
command as recorded by the spy server. But since since there aren't
any clients left after they were removed, no assertions are made, and
the test therefore does nothing. Fix this.
In tests for command.Approve and command.Deny, add checks that clients
were not somehow removed by the command (in which case, likewise, no
assertions are made).
Add related checks to TestPropertySetterCmd.runTest; i.e. test that a
sequence is not empty before looping over it and making assertions.
* mandos-ctl (TestBaseCommands.test_Remove): Save a copy of the
original "clients" dict, and loop over those instead. Add assertion
that all clients were indeed removed. Also fix the code which looks
for the Remove command, which now needs to actually work.
(TestBaseCommands.test_Approve, TestBaseCommands.test_Deny): Add
assertion that there are still clients before looping over them.
(TestPropertySetterCmd.runTest): Add assertion that the list of
values to get is not empty before looping over them. Also add check
that there are still clients before looping over clients.
The test for command.Remove removes all clients from the spy server,
and then loops over all clients, looking for the corresponding Remove
command as recorded by the spy server. But since since there aren't
any clients left after they were removed, no assertions are made, and
the test therefore does nothing. Fix this.
In tests for command.Approve and command.Deny, add checks that clients
were not somehow removed by the command (in which case, likewise, no
assertions are made).
Add related checks to TestPropertySetterCmd.runTest; i.e. test that a
sequence is not empty before looping over it and making assertions.
* mandos-ctl (TestBaseCommands.test_Remove): Save a copy of the
original "clients" dict, and loop over those instead. Add assertion
that all clients were indeed removed. Also fix the code which looks
for the Remove command, which now needs to actually work.
(TestBaseCommands.test_Approve, TestBaseCommands.test_Deny): Add
assertion that there are still clients before looping over them.
(TestPropertySetterCmd.runTest): Add assertion that the list of
values to get is not empty before looping over them. Also add check
that there are still clients before looping over clients.
- files added:
- bugs.xml
- debian/tests
- dracut-module
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
10
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
12
-Wvolatile-register-var -Woverlength-strings
13
#DEBUG=-ggdb3
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
14
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
15
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
16
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
17
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
18
# The sanitizing options are available in GCC 4.9 and above.
19
ifeq ($(shell test $(shell $(CC) -dumpversion) \> 4.9-; echo $$?),0)
20
SANITIZE:=-fsanitize=address -fsanitize=undefined -fsanitize=shift \
21
-fsanitize=integer-divide-by-zero -fsanitize=unreachable \
22
-fsanitize=vla-bound -fsanitize=null -fsanitize=return \
23
-fsanitize=signed-integer-overflow
24
# GCC 5.3 has some more sanitizing options
25
ifeq ($(shell test $(shell $(CC) -dumpversion) \> 5.3-; echo $$?),0)
26
SANITIZE+=-fsanitize=bounds -fsanitize=alignment \
27
-fsanitize=object-size -fsanitize=float-divide-by-zero \
28
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
29
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
30
-fsanitize=enum
31
endif
32
else
33
SANITIZE:=
34
endif
35
LINK_FORTIFY_LD=-z relro -z now
36
LINK_FORTIFY=
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
37
35
38
36
# If BROKEN_PIE is set, do not build with -pie
39
37
ifndef BROKEN_PIE
41
39
LINK_FORTIFY += -pie
42
40
endif
43
41
#COVERAGE=--coverage
44
OPTIMIZE=-Os -fno-strict-aliasing
45
LANGUAGE=-std=gnu11
46
htmldir=man
47
version=1.7.2
48
SED=sed
49
50
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
51
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nobody || echo 65534)))
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
FEATURES:=-D_FILE_OFFSET_BITS=64
45
htmldir:=man
46
version:=1.8.14
47
SED:=sed
48
PKG_CONFIG?=pkg-config
49
50
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
|| getent passwd nobody || echo 65534)))
52
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
|| getent group nogroup || echo 65534)))
54
55
LINUXVERSION:=$(shell uname --kernel-release)
52
56
53
57
## Use these settings for a traditional /usr/local install
54
# PREFIX=$(DESTDIR)/usr/local
55
# CONFDIR=$(DESTDIR)/etc/mandos
56
# KEYDIR=$(DESTDIR)/etc/mandos/keys
57
# MANDIR=$(PREFIX)/man
58
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
59
# STATEDIR=$(DESTDIR)/var/lib/mandos
60
# LIBDIR=$(PREFIX)/lib
58
# PREFIX:=$(DESTDIR)/usr/local
59
# CONFDIR:=$(DESTDIR)/etc/mandos
60
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
# MANDIR:=$(PREFIX)/man
62
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
# LIBDIR:=$(PREFIX)/lib
61
66
##
62
67
63
68
## These settings are for a package-type install
64
PREFIX=$(DESTDIR)/usr
65
CONFDIR=$(DESTDIR)/etc/mandos
66
KEYDIR=$(DESTDIR)/etc/keys/mandos
67
MANDIR=$(PREFIX)/share/man
68
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
69
STATEDIR=$(DESTDIR)/var/lib/mandos
70
LIBDIR=$(shell \
69
PREFIX:=$(DESTDIR)/usr
70
CONFDIR:=$(DESTDIR)/etc/mandos
71
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
MANDIR:=$(PREFIX)/share/man
73
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
LIBDIR:=$(shell \
71
77
for d in \
72
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
78
"/usr/lib/`dpkg-architecture \
79
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
73
80
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
74
81
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
75
82
echo "$(DESTDIR)$$d"; \
78
85
done)
79
86
##
80
87
81
SYSTEMD=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
--variable=systemdsystemunitdir)
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
--variable=tmpfilesdir)
92
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
93
--variable=sysusersdir)
82
94
83
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
84
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
85
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
86
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
87
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
88
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
95
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
96
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
97
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
98
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
99
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
100
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
89
101
getconf LFS_LDFLAGS)
90
LIBNL3_CFLAGS=$(shell pkg-config --cflags-only-I libnl-route-3.0)
91
LIBNL3_LIBS=$(shell pkg-config --libs libnl-route-3.0)
102
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
103
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
104
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
105
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
92
106
93
107
# Do not change these two
94
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(SANITIZE) $(COVERAGE) \
95
$(OPTIMIZE) $(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) \
96
$(GPGME_CFLAGS) -DVERSION='"$(version)"'
97
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
108
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
109
$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
110
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
111
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
98
112
99
113
# Commands to format a DocBook <refentry> document into a manual page
100
114
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
106
120
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
107
121
$(notdir $<); \
108
122
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
109
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
110
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
111
fi >/dev/null)
123
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
124
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
125
$(notdir $@); fi >/dev/null)
112
126
113
127
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
114
128
--param make.year.ranges 1 \
120
134
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
121
135
$<; $(HTMLPOST) $@)
122
136
# Fix citerefentry links
123
HTMLPOST=$(SED) --in-place \
137
HTMLPOST:=$(SED) --in-place \
124
138
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
125
139
126
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
140
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
127
141
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
128
142
plugins.d/plymouth
129
PLUGIN_HELPERS=plugin-helpers/mandos-client-iprouteadddel
130
CPROGS=plugin-runner $(PLUGINS) $(PLUGIN_HELPERS)
131
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
132
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
143
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
144
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
145
$(PLUGIN_HELPERS)
146
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
147
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
133
148
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
149
dracut-module/password-agent.8mandos \
134
150
plugins.d/mandos-client.8mandos \
135
151
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
136
152
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
137
153
plugins.d/plymouth.8mandos intro.8mandos
138
154
139
htmldocs=$(addsuffix .xhtml,$(DOCS))
140
141
objects=$(addsuffix .o,$(CPROGS))
142
155
htmldocs:=$(addsuffix .xhtml,$(DOCS))
156
157
objects:=$(addsuffix .o,$(CPROGS))
158
159
.PHONY: all
143
160
all: $(PROGS) mandos.lsm
144
161
162
.PHONY: doc
145
163
doc: $(DOCS)
146
164
165
.PHONY: html
147
166
html: $(htmldocs)
148
167
149
168
%.5: %.xml common.ent legalnotice.xml
208
227
overview.xml legalnotice.xml
209
228
$(DOCBOOKTOHTML)
210
229
230
dracut-module/password-agent.8mandos: \
231
dracut-module/password-agent.xml common.ent \
232
overview.xml legalnotice.xml
233
$(DOCBOOKTOMAN)
234
dracut-module/password-agent.8mandos.xhtml: \
235
dracut-module/password-agent.xml common.ent \
236
overview.xml legalnotice.xml
237
$(DOCBOOKTOHTML)
238
211
239
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
212
240
common.ent \
213
241
mandos-options.xml \
256
284
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
257
285
$@)
258
286
259
plugins.d/mandos-client: plugins.d/mandos-client.c
260
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
261
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
262
263
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
264
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
265
) $(LOADLIBES) $(LDLIBS) -o $@
266
267
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
268
check run-client run-server install install-html \
269
install-server install-client-nokey install-client uninstall \
270
uninstall-server uninstall-client purge purge-server \
271
purge-client
272
287
# Need to add the GnuTLS, Avahi and GPGME libraries
288
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
289
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
290
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
291
) $(AVAHI_LIBS) $(GPGME_LIBS)
292
293
# Need to add the libnl-route library
294
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
295
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
296
297
# Need to add the GLib and pthread libraries
298
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
299
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
300
301
.PHONY: clean
273
302
clean:
274
303
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
275
304
305
.PHONY: distclean
276
306
distclean: clean
307
.PHONY: mostlyclean
277
308
mostlyclean: clean
309
.PHONY: maintainer-clean
278
310
maintainer-clean: clean
279
311
-rm --force --recursive keydir confdir statedir
280
312
281
check: all
313
.PHONY: check
314
check: all
282
315
./mandos --check
283
316
./mandos-ctl --check
317
./mandos-keygen --version
318
./plugin-runner --version
319
./plugin-helpers/mandos-client-iprouteadddel --version
320
./dracut-module/password-agent --test
284
321
285
322
# Run the client with a local config and key
286
run-client: all keydir/seckey.txt keydir/pubkey.txt
287
@echo "###################################################################"
288
@echo "# The following error messages are harmless and can be safely #"
289
@echo "# ignored. The messages are caused by not running as root, but #"
290
@echo "# you should NOT run \"make run-client\" as root unless you also #"
291
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
292
@echo "# From plugin-runner: setgid: Operation not permitted #"
293
@echo "# setuid: Operation not permitted #"
294
@echo "# From askpass-fifo: mkfifo: Permission denied #"
295
@echo "# From mandos-client: #"
296
@echo "# Failed to raise privileges: Operation not permitted #"
297
@echo "# Warning: network hook \"*\" exited with status * #"
298
@echo "###################################################################"
323
.PHONY: run-client
324
run-client: all keydir/seckey.txt keydir/pubkey.txt \
325
keydir/tls-privkey.pem keydir/tls-pubkey.pem
326
@echo '######################################################'
327
@echo '# The following error messages are harmless and can #'
328
@echo '# be safely ignored: #'
329
@echo '## From plugin-runner: #'
330
@echo '# setgid: Operation not permitted #'
331
@echo '# setuid: Operation not permitted #'
332
@echo '## From askpass-fifo: #'
333
@echo '# mkfifo: Permission denied #'
334
@echo '## From mandos-client: #'
335
@echo '# Failed to raise privileges: Operation not permi... #'
336
@echo '# Warning: network hook "*" exited with status * #'
337
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
338
@echo '# Failed to bring up interface "*": Operation not... #'
339
@echo '# #'
340
@echo '# (The messages are caused by not running as root, #'
341
@echo '# but you should NOT run "make run-client" as root #'
342
@echo '# unless you also unpacked and compiled Mandos as #'
343
@echo '# root, which is also NOT recommended.) #'
344
@echo '######################################################'
299
345
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
300
346
./plugin-runner --plugin-dir=plugins.d \
301
347
--plugin-helper-dir=plugin-helpers \
302
348
--config-file=plugin-runner.conf \
303
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
349
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
304
350
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
305
351
$(CLIENTARGS)
306
352
307
353
# Used by run-client
308
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
354
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
309
355
install --directory keydir
310
356
./mandos-keygen --dir keydir --force
357
if ! [ -e keydir/tls-privkey.pem ]; then \
358
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
359
fi
360
if ! [ -e keydir/tls-pubkey.pem ]; then \
361
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
362
fi
311
363
312
364
# Run the server with a local config
365
.PHONY: run-server
313
366
run-server: confdir/mandos.conf confdir/clients.conf statedir
314
367
./mandos --debug --no-dbus --configdir=confdir \
315
368
--statedir=statedir $(SERVERARGS)
318
371
confdir/mandos.conf: mandos.conf
319
372
install --directory confdir
320
373
install --mode=u=rw,go=r $^ $@
321
confdir/clients.conf: clients.conf keydir/seckey.txt
374
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
322
375
install --directory confdir
323
376
install --mode=u=rw $< $@
324
377
# Add a client password
326
379
statedir:
327
380
install --directory statedir
328
381
382
.PHONY: install
329
383
install: install-server install-client-nokey
330
384
385
.PHONY: install-html
331
386
install-html: html
332
387
install --directory $(htmldir)
333
388
install --mode=u=rw,go=r --target-directory=$(htmldir) \
334
389
$(htmldocs)
335
390
391
.PHONY: install-server
336
392
install-server: doc
337
393
install --directory $(CONFDIR)
338
394
if install --directory --mode=u=rwx --owner=$(USER) \
341
397
elif install --directory --mode=u=rwx $(STATEDIR); then \
342
398
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
343
399
fi
400
if [ "$(TMPFILES)" != "$(DESTDIR)" \
401
-a -d "$(TMPFILES)" ]; then \
402
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
403
$(TMPFILES)/mandos.conf; \
404
fi
405
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
406
-a -d "$(SYSUSERS)" ]; then \
407
install --mode=u=rw,go=r sysusers.d-mandos.conf \
408
$(SYSUSERS)/mandos.conf; \
409
fi
344
410
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
345
411
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
346
412
mandos-ctl
375
441
gzip --best --to-stdout intro.8mandos \
376
442
> $(MANDIR)/man8/intro.8mandos.gz
377
443
444
.PHONY: install-client-nokey
378
445
install-client-nokey: all doc
379
446
install --directory $(LIBDIR)/mandos $(CONFDIR)
380
447
install --directory --mode=u=rwx $(KEYDIR) \
381
448
$(LIBDIR)/mandos/plugins.d \
382
449
$(LIBDIR)/mandos/plugin-helpers
450
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
451
-a -d "$(SYSUSERS)" ]; then \
452
install --mode=u=rw,go=r sysusers.d-mandos.conf \
453
$(SYSUSERS)/mandos-client.conf; \
454
fi
383
455
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
384
456
install --mode=u=rwx \
385
--directory "$(CONFDIR)/plugins.d"; \
386
install --directory "$(CONFDIR)/plugin-helpers"; \
457
--directory "$(CONFDIR)/plugins.d" \
458
"$(CONFDIR)/plugin-helpers"; \
387
459
fi
388
460
install --mode=u=rwx,go=rx --directory \
389
461
"$(CONFDIR)/network-hooks.d"
390
462
install --mode=u=rwx,go=rx \
391
463
--target-directory=$(LIBDIR)/mandos plugin-runner
464
install --mode=u=rwx,go=rx \
465
--target-directory=$(LIBDIR)/mandos \
466
mandos-to-cryptroot-unlock
392
467
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
393
468
mandos-keygen
394
469
install --mode=u=rwx,go=rx \
409
484
install --mode=u=rwxs,go=rx \
410
485
--target-directory=$(LIBDIR)/mandos/plugins.d \
411
486
plugins.d/plymouth
412
install --mode=u=rwxs,go=rx \
487
install --mode=u=rwx,go=rx \
413
488
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
414
489
plugin-helpers/mandos-client-iprouteadddel
415
490
install initramfs-tools-hook \
416
491
$(INITRAMFSTOOLS)/hooks/mandos
417
install --mode=u=rw,go=r initramfs-tools-hook-conf \
418
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
492
install --mode=u=rw,go=r initramfs-tools-conf \
493
$(INITRAMFSTOOLS)/conf.d/mandos-conf
494
install --mode=u=rw,go=r initramfs-tools-conf-hook \
495
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
419
496
install initramfs-tools-script \
420
497
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
498
install initramfs-tools-script-stop \
499
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
500
install --directory $(DRACUTMODULE)
501
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
502
dracut-module/ask-password-mandos.path \
503
dracut-module/ask-password-mandos.service
504
install --mode=u=rwxs,go=rx \
505
--target-directory=$(DRACUTMODULE) \
506
dracut-module/module-setup.sh \
507
dracut-module/cmdline-mandos.sh \
508
dracut-module/password-agent
421
509
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
422
510
gzip --best --to-stdout mandos-keygen.8 \
423
511
> $(MANDIR)/man8/mandos-keygen.8.gz
435
523
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
436
524
gzip --best --to-stdout plugins.d/plymouth.8mandos \
437
525
> $(MANDIR)/man8/plymouth.8mandos.gz
526
gzip --best --to-stdout dracut-module/password-agent.8mandos \
527
> $(MANDIR)/man8/password-agent.8mandos.gz
438
528
529
.PHONY: install-client
439
530
install-client: install-client-nokey
440
531
# Post-installation stuff
441
532
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
442
update-initramfs -k all -u
533
if command -v update-initramfs >/dev/null; then \
534
update-initramfs -k all -u; \
535
elif command -v dracut >/dev/null; then \
536
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
537
if [ -w "$$initrd" ]; then \
538
chmod go-r "$$initrd"; \
539
dracut --force "$$initrd"; \
540
fi; \
541
done; \
542
fi
443
543
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
444
544
545
.PHONY: uninstall
445
546
uninstall: uninstall-server uninstall-client
446
547
548
.PHONY: uninstall-server
447
549
uninstall-server:
448
550
-rm --force $(PREFIX)/sbin/mandos \
449
551
$(PREFIX)/sbin/mandos-ctl \
456
558
update-rc.d -f mandos remove
457
559
-rmdir $(CONFDIR)
458
560
561
.PHONY: uninstall-client
459
562
uninstall-client:
460
563
# Refuse to uninstall client if /etc/crypttab is explicitly configured
461
564
# to use it.
472
575
$(INITRAMFSTOOLS)/hooks/mandos \
473
576
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
474
577
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
578
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
579
$(DRACUTMODULE)/ask-password-mandos.path \
580
$(DRACUTMODULE)/ask-password-mandos.service \
581
$(DRACUTMODULE)/module-setup.sh \
582
$(DRACUTMODULE)/cmdline-mandos.sh \
583
$(DRACUTMODULE)/password-agent \
475
584
$(MANDIR)/man8/mandos-keygen.8.gz \
476
585
$(MANDIR)/man8/plugin-runner.8mandos.gz \
477
586
$(MANDIR)/man8/mandos-client.8mandos.gz
480
589
$(MANDIR)/man8/splashy.8mandos.gz \
481
590
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
482
591
$(MANDIR)/man8/plymouth.8mandos.gz \
592
$(MANDIR)/man8/password-agent.8mandos.gz \
483
593
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
484
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
485
update-initramfs -k all -u
594
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
595
if command -v update-initramfs >/dev/null; then \
596
update-initramfs -k all -u; \
597
elif command -v dracut >/dev/null; then \
598
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
599
test -w "$$initrd" && dracut --force "$$initrd"; \
600
done; \
601
fi
486
602
603
.PHONY: purge
487
604
purge: purge-server purge-client
488
605
606
.PHONY: purge-server
489
607
purge-server: uninstall-server
490
608
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
491
609
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
496
614
$(DESTDIR)/var/run/mandos.pid
497
615
-rmdir $(CONFDIR)
498
616
617
.PHONY: purge-client
499
618
purge-client: uninstall-client
500
-shred --remove $(KEYDIR)/seckey.txt
619
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
501
620
-rm --force $(CONFDIR)/plugin-runner.conf \
502
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
621
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
622
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
503
623
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0