30
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
32
FORTIFY:=-D_FORTIFY_SOURCE=3 -fstack-protector-all -fPIC
33
33
LINK_FORTIFY_LD:=-z relro -z now
89
89
--variable=systemdsystemunitdir)
90
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
91
--variable=tmpfilesdir)
92
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
93
--variable=sysusersdir)
93
95
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
94
96
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
95
97
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
96
98
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
97
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
98
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
99
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
100
|| gpgme-config --cflags; getconf LFS_CFLAGS)
101
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
102
|| gpgme-config --libs; getconf LFS_LIBS; \
99
103
getconf LFS_LDFLAGS)
100
104
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
101
105
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
282
289
# Need to add the GnuTLS, Avahi and GPGME libraries
283
plugins.d/mandos-client: plugins.d/mandos-client.c
284
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
285
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
286
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
290
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
291
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
292
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
293
) $(AVAHI_LIBS) $(GPGME_LIBS)
289
295
# Need to add the libnl-route library
290
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
291
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
292
) $(LOADLIBES) $(LDLIBS) -o $@
296
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
297
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
294
299
# Need to add the GLib and pthread libraries
295
dracut-module/password-agent: dracut-module/password-agent.c
296
$(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
297
) $(LOADLIBES) $(LDLIBS) -o $@
299
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
300
check run-client run-server install install-html \
301
install-server install-client-nokey install-client uninstall \
302
uninstall-server uninstall-client purge purge-server \
300
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
301
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
302
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
306
306
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
309
311
mostlyclean: clean
312
.PHONY: maintainer-clean
310
313
maintainer-clean: clean
311
314
-rm --force --recursive keydir confdir statedir
315
319
./mandos-ctl --check
319
323
./dracut-module/password-agent --test
321
325
# Run the client with a local config and key
322
327
run-client: all keydir/seckey.txt keydir/pubkey.txt \
323
328
keydir/tls-privkey.pem keydir/tls-pubkey.pem
324
329
@echo '######################################################'
352
357
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
353
358
install --directory keydir
354
359
./mandos-keygen --dir keydir --force
360
if ! [ -e keydir/tls-privkey.pem ]; then \
361
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
363
if ! [ -e keydir/tls-pubkey.pem ]; then \
364
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
356
367
# Run the server with a local config
357
369
run-server: confdir/mandos.conf confdir/clients.conf statedir
358
370
./mandos --debug --no-dbus --configdir=confdir \
359
371
--statedir=statedir $(SERVERARGS)
371
383
install --directory statedir
373
386
install: install-server install-client-nokey
375
389
install-html: html
376
390
install --directory $(htmldir)
377
391
install --mode=u=rw,go=r --target-directory=$(htmldir) \
394
.PHONY: install-server
380
395
install-server: doc
381
396
install --directory $(CONFDIR)
382
397
if install --directory --mode=u=rwx --owner=$(USER) \
390
405
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
391
406
$(TMPFILES)/mandos.conf; \
408
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
409
-a -d "$(SYSUSERS)" ]; then \
410
install --mode=u=rw,go=r sysusers.d-mandos.conf \
411
$(SYSUSERS)/mandos.conf; \
393
413
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
394
414
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
424
444
gzip --best --to-stdout intro.8mandos \
425
445
> $(MANDIR)/man8/intro.8mandos.gz
447
.PHONY: install-client-nokey
427
448
install-client-nokey: all doc
428
449
install --directory $(LIBDIR)/mandos $(CONFDIR)
429
450
install --directory --mode=u=rwx $(KEYDIR) \
430
451
$(LIBDIR)/mandos/plugins.d \
431
452
$(LIBDIR)/mandos/plugin-helpers
453
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
454
-a -d "$(SYSUSERS)" ]; then \
455
install --mode=u=rw,go=r sysusers.d-mandos.conf \
456
$(SYSUSERS)/mandos-client.conf; \
432
458
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
433
459
install --mode=u=rwx \
434
460
--directory "$(CONFDIR)/plugins.d" \
503
529
gzip --best --to-stdout dracut-module/password-agent.8mandos \
504
530
> $(MANDIR)/man8/password-agent.8mandos.gz
532
.PHONY: install-client
506
533
install-client: install-client-nokey
507
534
# Post-installation stuff
508
535
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"