/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to Makefile

  • Committer: Björn Påhlsson
  • Date: 2008-07-20 02:52:20 UTC
  • Revision ID: belorn@braxen-20080720025220-r5u0388uy9iu23h6
Added following support:
Pluginbased client handler
rewritten Mandos client
       Avahi instead of udp server discovery
       openpgp encrypted key support
Passprompt stand alone application for direct console input
Added logging for Mandos server

Show diffs side-by-side

added added

removed removed

Lines of Context:
Makefile
1
 
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
 
        -Wswitch-default -Wswitch-enum -Wunused-parameter \
3
 
        -Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
4
 
        -Wunsafe-loop-optimizations -Wpointer-arith \
5
 
        -Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
 
        -Wconversion -Wstrict-prototypes -Wold-style-definition \
7
 
        -Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
 
#       -Wunreachable-code 
9
 
#DEBUG=-ggdb3
10
 
# For info about _FORTIFY_SOURCE, see
11
 
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
 
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
13
 
#COVERAGE=--coverage
14
 
OPTIMIZE=-Os
15
 
LANGUAGE=-std=gnu99
16
 
 
17
 
## Use these settings for a traditional /usr/local install
18
 
# PREFIX=$(DESTDIR)/usr/local
19
 
# CONFDIR=$(DESTDIR)/etc/mandos
20
 
# KEYDIR=$(DESTDIR)/etc/mandos/keys
21
 
# MANDIR=$(PREFIX)/man
22
 
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
23
 
##
24
 
 
25
 
## These settings are for a package-type install
26
 
PREFIX=$(DESTDIR)/usr
27
 
CONFDIR=$(DESTDIR)/etc/mandos
28
 
KEYDIR=$(DESTDIR)/etc/keys/mandos
29
 
MANDIR=$(PREFIX)/share/man
30
 
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
31
 
##
32
 
 
33
 
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
34
 
GNUTLS_LIBS=$(shell libgnutls-config --libs)
35
 
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
36
 
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
37
 
GPGME_CFLAGS=$(shell gpgme-config --cflags)
38
 
GPGME_LIBS=$(shell gpgme-config --libs)
39
 
 
40
 
# Do not change these two
41
 
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
42
 
        $(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
43
 
LDFLAGS=$(COVERAGE)
44
 
 
45
 
# Commands to format a DocBook <refentry> document into a manual page
46
 
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
47
 
        --param man.charmap.use.subset          0 \
48
 
        --param make.year.ranges                1 \
49
 
        --param make.single.year.ranges         1 \
50
 
        --param man.output.quietly              1 \
51
 
        --param man.authors.section.enabled     0 \
52
 
         /usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
53
 
        $(notdir $<); \
54
 
        $(MANPOST) $(notdir $@)
55
 
# DocBook-to-man post-processing to fix a '\n' escape bug
56
 
MANPOST=sed --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
57
 
 
58
 
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
59
 
        plugins.d/usplash plugins.d/splashy
60
 
PROGS=plugin-runner $(PLUGINS)
61
 
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
62
 
        plugins.d/mandos-client.8mandos \
63
 
        plugins.d/password-prompt.8mandos mandos.conf.5 \
64
 
        mandos-clients.conf.5
65
 
 
66
 
objects=$(addsuffix .o,$(PROGS))
67
 
 
68
 
all: $(PROGS)
69
 
 
70
 
doc: $(DOCS)
71
 
 
72
 
%.5: %.xml legalnotice.xml
73
 
        $(DOCBOOKTOMAN)
74
 
 
75
 
%.8: %.xml legalnotice.xml
76
 
        $(DOCBOOKTOMAN)
77
 
 
78
 
%.8mandos: %.xml legalnotice.xml
79
 
        $(DOCBOOKTOMAN)
80
 
 
81
 
mandos.8: mandos.xml mandos-options.xml overview.xml legalnotice.xml
82
 
        $(DOCBOOKTOMAN)
83
 
 
84
 
mandos-keygen.8: mandos-keygen.xml overview.xml legalnotice.xml
85
 
        $(DOCBOOKTOMAN)
86
 
 
87
 
mandos.conf.5: mandos.conf.xml mandos-options.xml legalnotice.xml
88
 
        $(DOCBOOKTOMAN)
89
 
 
90
 
plugin-runner.8mandos: plugin-runner.xml overview.xml legalnotice.xml
91
 
        $(DOCBOOKTOMAN)
92
 
 
93
 
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
94
 
                                        mandos-options.xml \
95
 
                                        overview.xml legalnotice.xml
96
 
        $(DOCBOOKTOMAN)
97
 
 
98
 
plugins.d/mandos-client: plugins.d/mandos-client.o
99
 
        $(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
100
 
                $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
101
 
 
102
 
.PHONY : all doc clean distclean run-client run-server install \
103
 
        install-server install-client uninstall uninstall-server \
104
 
        uninstall-client purge purge-server purge-client
 
1
CFLAGS="-Wall -std=gnu99"
 
2
LDFLAGS=-lgnutls
 
3
 
 
4
all: plugbasedclient
105
5
 
106
6
clean:
107
 
        -rm --force $(PROGS) $(objects) $(DOCS) core
108
 
 
109
 
distclean: clean
110
 
mostlyclean: clean
111
 
maintainer-clean: clean
112
 
        -rm --force --recursive keydir confdir
113
 
 
114
 
check:
115
 
        ./mandos --check
116
 
 
117
 
# Run the client with a local config and key
118
 
run-client: all keydir/seckey.txt keydir/pubkey.txt
119
 
        ./plugin-runner --plugin-dir=plugins.d \
120
 
                --config-file=plugin-runner.conf \
121
 
                --options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
122
 
 
123
 
# Used by run-client
124
 
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
125
 
        install --directory keydir
126
 
        ./mandos-keygen --dir keydir --force
127
 
 
128
 
# Run the server with a local config
129
 
run-server: confdir/mandos.conf confdir/clients.conf
130
 
        ./mandos --debug --configdir=confdir
131
 
 
132
 
# Used by run-server
133
 
confdir/mandos.conf: mandos.conf
134
 
        install --directory confdir
135
 
        install --mode=u=rw,go=r $^ $@
136
 
confdir/clients.conf: clients.conf keydir/seckey.txt
137
 
        install --directory confdir
138
 
        install --mode=u=rw $< $@
139
 
# Add a client password
140
 
        ./mandos-keygen --dir keydir --password >> $@
141
 
 
142
 
install: install-server install-client-nokey
143
 
 
144
 
install-server: doc
145
 
        install --directory $(CONFDIR)
146
 
        install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
147
 
        install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
148
 
                mandos.conf
149
 
        install --mode=u=rw --target-directory=$(CONFDIR) \
150
 
                clients.conf
151
 
        install --mode=u=rwx,go=rx init.d-mandos \
152
 
                $(DESTDIR)/etc/init.d/mandos
153
 
        install --mode=u=rw,go=r default-mandos \
154
 
                $(DESTDIR)/etc/default/mandos
155
 
        if [ -z $(DESTDIR) ]; then \
156
 
                update-rc.d mandos defaults 25 15;\
157
 
        fi
158
 
        gzip --best --to-stdout mandos.8 \
159
 
                > $(MANDIR)/man8/mandos.8.gz
160
 
        gzip --best --to-stdout mandos.conf.5 \
161
 
                > $(MANDIR)/man5/mandos.conf.5.gz
162
 
        gzip --best --to-stdout mandos-clients.conf.5 \
163
 
                > $(MANDIR)/man5/mandos-clients.conf.5.gz
164
 
 
165
 
install-client-nokey: all doc
166
 
        install --directory $(PREFIX)/lib/mandos $(CONFDIR)
167
 
        install --directory --mode=u=rwx $(KEYDIR) \
168
 
                $(PREFIX)/lib/mandos/plugins.d
169
 
        if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
170
 
                install --mode=u=rwx \
171
 
                        --directory "$(CONFDIR)/plugins.d"; \
172
 
        fi
173
 
        install --mode=u=rwx,go=rx \
174
 
                --target-directory=$(PREFIX)/lib/mandos plugin-runner
175
 
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
176
 
                mandos-keygen
177
 
        install --mode=u=rwx,go=rx \
178
 
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
179
 
                plugins.d/password-prompt
180
 
        install --mode=u=rwxs,go=rx \
181
 
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
182
 
                plugins.d/mandos-client
183
 
        install --mode=u=rwxs,go=rx \
184
 
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
185
 
                plugins.d/usplash
186
 
        install --mode=u=rwxs,go=rx \
187
 
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
188
 
                plugins.d/splashy
189
 
        install initramfs-tools-hook \
190
 
                $(INITRAMFSTOOLS)/hooks/mandos
191
 
        install --mode=u=rw,go=r initramfs-tools-hook-conf \
192
 
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos
193
 
        install initramfs-tools-script \
194
 
                $(INITRAMFSTOOLS)/scripts/local-top/mandos
195
 
        install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
196
 
        gzip --best --to-stdout mandos-keygen.8 \
197
 
                > $(MANDIR)/man8/mandos-keygen.8.gz
198
 
        gzip --best --to-stdout plugin-runner.8mandos \
199
 
                > $(MANDIR)/man8/plugin-runner.8mandos.gz
200
 
        gzip --best --to-stdout plugins.d/password-prompt.8mandos \
201
 
                > $(MANDIR)/man8/password-prompt.8mandos.gz
202
 
        gzip --best --to-stdout plugins.d/mandos-client.8mandos \
203
 
                > $(MANDIR)/man8/mandos-client.8mandos.gz
204
 
 
205
 
install-client: install-client-nokey
206
 
# Post-installation stuff
207
 
        -$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
208
 
        update-initramfs -k all -u
209
 
        echo "Now run mandos-keygen --password --dir $(KEYDIR)"
210
 
 
211
 
uninstall: uninstall-server uninstall-client
212
 
 
213
 
uninstall-server:
214
 
        -rm --force $(PREFIX)/sbin/mandos \
215
 
                $(MANDIR)/man8/mandos.8.gz \
216
 
                $(MANDIR)/man5/mandos.conf.5.gz \
217
 
                $(MANDIR)/man5/mandos-clients.conf.5.gz
218
 
        update-rc.d -f mandos remove
219
 
        -rmdir $(CONFDIR)
220
 
 
221
 
uninstall-client:
222
 
# Refuse to uninstall client if /etc/crypttab is explicitly configured
223
 
# to use it.
224
 
        ! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
225
 
                $(DESTDIR)/etc/crypttab
226
 
        -rm --force $(PREFIX)/sbin/mandos-keygen \
227
 
                $(PREFIX)/lib/mandos/plugin-runner \
228
 
                $(PREFIX)/lib/mandos/plugins.d/password-prompt \
229
 
                $(PREFIX)/lib/mandos/plugins.d/mandos-client \
230
 
                $(PREFIX)/lib/mandos/plugins.d/usplash \
231
 
                $(PREFIX)/lib/mandos/plugins.d/splashy \
232
 
                $(INITRAMFSTOOLS)/hooks/mandos \
233
 
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos \
234
 
                $(INITRAMFSTOOLS)/scripts/local-top/mandos \
235
 
                $(MANDIR)/man8/plugin-runner.8mandos.gz \
236
 
                $(MANDIR)/man8/mandos-keygen.8.gz \
237
 
                $(MANDIR)/man8/password-prompt.8mandos.gz \
238
 
                $(MANDIR)/man8/mandos-client.8mandos.gz
239
 
        if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
240
 
                rm --force $(CONFDIR)/plugins.d/README; \
241
 
        fi
242
 
        -rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
243
 
                 $(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
244
 
        update-initramfs -k all -u
245
 
 
246
 
purge: purge-server purge-client
247
 
 
248
 
purge-server: uninstall-server
249
 
        -rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
250
 
                $(DESTDIR)/etc/default/mandos \
251
 
                $(DESTDIR)/etc/init.d/mandos \
252
 
                $(DESTDIR)/var/run/mandos.pid
253
 
        -rmdir $(CONFDIR)
254
 
 
255
 
purge-client: uninstall-client
256
 
        -shred --remove $(KEYDIR)/seckey.txt
257
 
        -rm --force $(CONFDIR)/plugin-runner.conf \
258
 
                $(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
259
 
        -rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
 
7
        rm -f plugbasedclient
 
8
 
 
9
client_debug: client
 
10
        mv -f client client.tmp
 
11
        $(MAKE) client CXXFLAGS="$(CXXFLAGS) -DDEBUG -DCERT_ROOT=\\\"./\\\""
 
12
        mv client client_debug
 
13
        mv client.tmp client