/mandos/trunk : revision 1272

29

30

# For info about _FORTIFY_SOURCE, see feature_test_macros(7)

31

# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.

32

FORTIFY:=-fstack-protector-all -fPIC

33

CPPFLAGS+=-D_FORTIFY_SOURCE=3

32

FORTIFY:=-D_FORTIFY_SOURCE=3 -fstack-protector-all -fPIC

34

33

LINK_FORTIFY_LD:=-z relro -z now

35

34

LINK_FORTIFY:=

36

35

42

41

#COVERAGE=--coverage

43

42

OPTIMIZE:=-Os -fno-strict-aliasing

44

43

LANGUAGE:=-std=gnu11

45

CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64

44

FEATURES:=-D_FILE_OFFSET_BITS=64

46

45

htmldir:=man

47

version:=1.8.17

46

version:=1.8.16

48

47

SED:=sed

49

48

PKG_CONFIG?=pkg-config

50

49

57

56

58

57

## Use these settings for a traditional /usr/local install

59

58

# PREFIX:=$(DESTDIR)/usr/local

60

# BINDIR:=$(PREFIX)/sbin

61

59

# CONFDIR:=$(DESTDIR)/etc/mandos

62

60

# KEYDIR:=$(DESTDIR)/etc/mandos/keys

63

61

# MANDIR:=$(PREFIX)/man

65

63

# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos

66

64

# STATEDIR:=$(DESTDIR)/var/lib/mandos

67

65

# LIBDIR:=$(PREFIX)/lib

68

# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d

69

66

##

70

67

71

68

## These settings are for a package-type install

72

69

PREFIX:=$(DESTDIR)/usr

73

BINDIR:=$(PREFIX)/sbin

74

70

CONFDIR:=$(DESTDIR)/etc/mandos

75

71

KEYDIR:=$(DESTDIR)/etc/keys/mandos

76

72

MANDIR:=$(PREFIX)/share/man

87

83

break; \

88

84

fi; \

89

85

done)

90

DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d

91

86

##

92

87

93

88

SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \

113

108

114

109

# Do not change these two

115

110

CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \

116

$(LANGUAGE) -DVERSION='"$(version)"'

111

$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'

117

112

LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \

118

113

) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))

119

114

291

286

--expression='s/$mandos_$[0-9.]\+$\.orig\.tar\.gz$/\1$(version)\2/' \

292

287

$@)

293

288

294

# Does the linker support the --no-warn-execstack option?

295

ifeq ($(shell echo 'int main(){}'|$(CC) --language=c /dev/stdin -o /dev/null -Xlinker --no-warn-execstack >/dev/null 2>&1 && echo yes),yes)

296

# These programs use nested functions, which uses an executable stack

297

plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack

298

dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack

299

plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack

300

plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack

301

plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack

302

endif

303

304

289

# Need to add the GnuTLS, Avahi and GPGME libraries

305

290

plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \

306

291

) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)

387

372

388

373

# Used by run-server

389

374

confdir/mandos.conf: mandos.conf

390

install -D --mode=u=rw,go=r $^ $@

375

install --directory confdir

376

install --mode=u=rw,go=r $^ $@

391

377

confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem

392

install -D --mode=u=rw $< $@

378

install --directory confdir

379

install --mode=u=rw $< $@

393

380

# Add a client password

394

381

./mandos-keygen --dir keydir --password --no-ssh >> $@

395

382

statedir:

400

387

401

388

.PHONY: install-html

402

389

install-html: html

403

install -D --mode=u=rw,go=r --target-directory=$(htmldir) \

390

install --directory $(htmldir)

391

install --mode=u=rw,go=r --target-directory=$(htmldir) \

404

392

$(htmldocs)

405

393

406

394

.PHONY: install-server

407

395

install-server: doc

396

install --directory $(CONFDIR)

408

397

if install --directory --mode=u=rwx --owner=$(USER) \

409

398

--group=$(GROUP) $(STATEDIR); then \

410

399

:; \

411

400

elif install --directory --mode=u=rwx $(STATEDIR); then \

412

401

chown -- $(USER):$(GROUP) $(STATEDIR) || :; \

413

402

fi

414

if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \

415

install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \

403

if [ "$(TMPFILES)" != "$(DESTDIR)" \

404

-a -d "$(TMPFILES)" ]; then \

405

install --mode=u=rw,go=r tmpfiles.d-mandos.conf \

416

406

$(TMPFILES)/mandos.conf; \

417

407

fi

418

if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \

419

install -D --mode=u=rw,go=r sysusers.d-mandos.conf \

408

if [ "$(SYSUSERS)" != "$(DESTDIR)" \

409

-a -d "$(SYSUSERS)" ]; then \

410

install --mode=u=rw,go=r sysusers.d-mandos.conf \

420

411

$(SYSUSERS)/mandos.conf; \

421

412

fi

422

install --directory $(BINDIR)

423

install --mode=u=rwx,go=rx --target-directory=$(BINDIR) mandos

424

install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \

413

install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos

414

install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \

425

415

mandos-ctl

426

install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \

416

install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \

427

417

mandos-monitor

428

install --directory $(CONFDIR)

429

418

install --mode=u=rw,go=r --target-directory=$(CONFDIR) \

430

419

mandos.conf

431

420

install --mode=u=rw --target-directory=$(CONFDIR) \

432

421

clients.conf

433

install -D --mode=u=rw,go=r dbus-mandos.conf \

434

$(DBUSPOLICYDIR)/mandos.conf

435

install -D --mode=u=rwx,go=rx init.d-mandos \

422

install --mode=u=rw,go=r dbus-mandos.conf \

423

$(DESTDIR)/etc/dbus-1/system.d/mandos.conf

424

install --mode=u=rwx,go=rx init.d-mandos \

436

425

$(DESTDIR)/etc/init.d/mandos

437

if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \

438

install -D --mode=u=rw,go=r mandos.service \

439

$(SYSTEMD); \

426

if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \

427

install --mode=u=rw,go=r mandos.service $(SYSTEMD); \

440

428

fi

441

install -D --mode=u=rw,go=r default-mandos \

429

install --mode=u=rw,go=r default-mandos \

442

430

$(DESTDIR)/etc/default/mandos

443

431

if [ -z $(DESTDIR) ]; then \

444

432

update-rc.d mandos defaults 25 15;\

445

433

fi

446

install --directory $(MANDIR)/man8 $(MANDIR)/man5

447

434

gzip --best --to-stdout mandos.8 \

448

435

> $(MANDIR)/man8/mandos.8.gz

449

436

gzip --best --to-stdout mandos-monitor.8 \

459

446

460

447

.PHONY: install-client-nokey

461

448

install-client-nokey: all doc

449

install --directory $(LIBDIR)/mandos $(CONFDIR)

462

450

install --directory --mode=u=rwx $(KEYDIR) \

463

451

$(LIBDIR)/mandos/plugins.d \

464

452

$(LIBDIR)/mandos/plugin-helpers

465

if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \

466

install -D --mode=u=rw,go=r sysusers.d-mandos.conf \

453

if [ "$(SYSUSERS)" != "$(DESTDIR)" \

454

-a -d "$(SYSUSERS)" ]; then \

455

install --mode=u=rw,go=r sysusers.d-mandos.conf \

467

456

$(SYSUSERS)/mandos-client.conf; \

468

457

fi

469

458

if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \

470

install --directory \

471

--mode=u=rwx "$(CONFDIR)/plugins.d" \

459

install --mode=u=rwx \

460

--directory "$(CONFDIR)/plugins.d" \

472

461

"$(CONFDIR)/plugin-helpers"; \

473

462

fi

474

install --directory --mode=u=rwx,go=rx \

463

install --mode=u=rwx,go=rx --directory \

475

464

"$(CONFDIR)/network-hooks.d"

476

465

install --mode=u=rwx,go=rx \

477

466

--target-directory=$(LIBDIR)/mandos plugin-runner

478

467

install --mode=u=rwx,go=rx \

479

468

--target-directory=$(LIBDIR)/mandos \

480

469

mandos-to-cryptroot-unlock

481

install --directory $(BINDIR)

482

install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \

470

install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \

483

471

mandos-keygen

484

472

install --mode=u=rwx,go=rx \

485

473

--target-directory=$(LIBDIR)/mandos/plugins.d \

502

490

install --mode=u=rwx,go=rx \

503

491

--target-directory=$(LIBDIR)/mandos/plugin-helpers \

504

492

plugin-helpers/mandos-client-iprouteadddel

505

install -D initramfs-tools-hook \

493

install initramfs-tools-hook \

506

494

$(INITRAMFSTOOLS)/hooks/mandos

507

install -D --mode=u=rw,go=r initramfs-tools-conf \

495

install --mode=u=rw,go=r initramfs-tools-conf \

508

496

$(INITRAMFSTOOLS)/conf.d/mandos-conf

509

install -D --mode=u=rw,go=r initramfs-tools-conf-hook \

497

install --mode=u=rw,go=r initramfs-tools-conf-hook \

510

498

$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos

511

install -D initramfs-tools-script \

499

install initramfs-tools-script \

512

500

$(INITRAMFSTOOLS)/scripts/init-premount/mandos

513

install -D initramfs-tools-script-stop \

501

install initramfs-tools-script-stop \

514

502

$(INITRAMFSTOOLS)/scripts/local-premount/mandos

515

install -D --mode=u=rw,go=r \

516

--target-directory=$(DRACUTMODULE) \

503

install --directory $(DRACUTMODULE)

504

install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \

517

505

dracut-module/ask-password-mandos.path \

518

506

dracut-module/ask-password-mandos.service

519

507

install --mode=u=rwxs,go=rx \

522

510

dracut-module/cmdline-mandos.sh \

523

511

dracut-module/password-agent

524

512

install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)

525

install --directory $(MANDIR)/man8

526

513

gzip --best --to-stdout mandos-keygen.8 \

527

514

> $(MANDIR)/man8/mandos-keygen.8.gz

528

515

gzip --best --to-stdout plugin-runner.8mandos \

545

532

.PHONY: install-client

546

533

install-client: install-client-nokey

547

534

# Post-installation stuff

548

-$(BINDIR)/mandos-keygen --dir "$(KEYDIR)"

535

-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"

549

536

if command -v update-initramfs >/dev/null; then \

550

537

update-initramfs -k all -u; \

551

538

elif command -v dracut >/dev/null; then \

563

550

564

551

.PHONY: uninstall-server

565

552

uninstall-server:

566

-rm --force $(BINDIR)/mandos \

567

$(BINDIR)/mandos-ctl \

568

$(BINDIR)/mandos-monitor \

553

-rm --force $(PREFIX)/sbin/mandos \

554

$(PREFIX)/sbin/mandos-ctl \

555

$(PREFIX)/sbin/mandos-monitor \

569

556

$(MANDIR)/man8/mandos.8.gz \

570

557

$(MANDIR)/man8/mandos-monitor.8.gz \

571

558

$(MANDIR)/man8/mandos-ctl.8.gz \

580

567

# to use it.

581

568

! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \

582

569

$(DESTDIR)/etc/crypttab

583

-rm --force $(BINDIR)/mandos-keygen \

570

-rm --force $(PREFIX)/sbin/mandos-keygen \

584

571

$(LIBDIR)/mandos/plugin-runner \

585

572

$(LIBDIR)/mandos/plugins.d/password-prompt \

586

573

$(LIBDIR)/mandos/plugins.d/mandos-client \

625

612

$(DESTDIR)/etc/dbus-1/system.d/mandos.conf

626

613

$(DESTDIR)/etc/default/mandos \

627

614

$(DESTDIR)/etc/init.d/mandos \

615

$(SYSTEMD)/mandos.service \

628

616

$(DESTDIR)/run/mandos.pid \

629

617

$(DESTDIR)/var/run/mandos.pid

630

if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \

631

-rm --force -- $(SYSTEMD)/mandos.service; \

632

fi

633

618

-rmdir $(CONFDIR)

634

619

635

620

.PHONY: purge-client