To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 1313
- compare with another revision
- download diff
- download tarball
- view history from revision 1313
- Committer: Teddy Hogeborn
- Date: 2024-11-22 20:28:54 UTC
- Revision ID: teddy@recompile.se-20241122202854-dycuf117byxhxl32
mandos-monitor: Avoid debug messages from urwid
Avoid debug messages from urwid. Any logging output before the screen
has been set up will mangle the screen.
* mandos-monitor: When setting up logging, set urwid to only show log
messages of level INFO or above.
(Thanks to an anonymous contributor for reporting this.)
Avoid debug messages from urwid. Any logging output before the screen
has been set up will mangle the screen.
* mandos-monitor: When setting up logging, set urwid to only show log
messages of level INFO or above.
(Thanks to an anonymous contributor for reporting this.)
- files added:
- DBUS-API
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=1 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://www.kernel.org/doc/man-pages/online/pages/man7/feature_test_macros.7.html>
12
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
13
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
14
LINK_FORTIFY_LD=-z relro -z now
15
LINK_FORTIFY=
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-fstack-protector-all -fPIC
33
CPPFLAGS+=-D_FORTIFY_SOURCE=3
34
LINK_FORTIFY_LD:=-z relro -z now
35
LINK_FORTIFY:=
16
36
17
37
# If BROKEN_PIE is set, do not build with -pie
18
38
ifndef BROKEN_PIE
20
40
LINK_FORTIFY += -pie
21
41
endif
22
42
#COVERAGE=--coverage
23
OPTIMIZE=-Os
24
LANGUAGE=-std=gnu99
25
htmldir=man
26
version=1.0.14
27
SED=sed
43
OPTIMIZE:=-Os -fno-strict-aliasing
44
LANGUAGE:=-std=gnu11
45
CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64
46
htmldir:=man
47
version:=1.8.17
48
SED:=sed
49
PKG_CONFIG?=pkg-config
50
51
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
52
|| getent passwd nobody || echo 65534)))
53
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
54
|| getent group nogroup || echo 65534)))
55
56
LINUXVERSION:=$(shell uname --kernel-release)
28
57
29
58
## Use these settings for a traditional /usr/local install
30
# PREFIX=$(DESTDIR)/usr/local
31
# CONFDIR=$(DESTDIR)/etc/mandos
32
# KEYDIR=$(DESTDIR)/etc/mandos/keys
33
# MANDIR=$(PREFIX)/man
34
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
59
# PREFIX:=$(DESTDIR)/usr/local
60
# BINDIR:=$(PREFIX)/sbin
61
# CONFDIR:=$(DESTDIR)/etc/mandos
62
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
63
# MANDIR:=$(PREFIX)/man
64
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
65
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
66
# STATEDIR:=$(DESTDIR)/var/lib/mandos
67
# LIBDIR:=$(PREFIX)/lib
68
# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d
35
69
##
36
70
37
71
## These settings are for a package-type install
38
PREFIX=$(DESTDIR)/usr
39
CONFDIR=$(DESTDIR)/etc/mandos
40
KEYDIR=$(DESTDIR)/etc/keys/mandos
41
MANDIR=$(PREFIX)/share/man
42
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
72
PREFIX:=$(DESTDIR)/usr
73
BINDIR:=$(PREFIX)/sbin
74
CONFDIR:=$(DESTDIR)/etc/mandos
75
KEYDIR:=$(DESTDIR)/etc/keys/mandos
76
MANDIR:=$(PREFIX)/share/man
77
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
78
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
79
STATEDIR:=$(DESTDIR)/var/lib/mandos
80
LIBDIR:=$(shell \
81
for d in \
82
"/usr/lib/`dpkg-architecture \
83
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
84
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
85
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
86
echo "$(DESTDIR)$$d"; \
87
break; \
88
fi; \
89
done)
90
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
43
91
##
44
92
45
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
46
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
47
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
48
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
49
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
50
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
93
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
--variable=systemdsystemunitdir)
95
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
--variable=tmpfilesdir)
97
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
98
--variable=sysusersdir)
99
100
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
101
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
102
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
103
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
104
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
105
|| gpgme-config --cflags; getconf LFS_CFLAGS)
106
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
107
|| gpgme-config --libs; getconf LFS_LIBS; \
51
108
getconf LFS_LDFLAGS)
109
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
110
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
111
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
112
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
52
113
53
114
# Do not change these two
54
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
55
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
56
-DVERSION='"$(version)"'
57
LDFLAGS=$(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
115
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
116
$(LANGUAGE) -DVERSION='"$(version)"'
117
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
118
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
58
119
59
120
# Commands to format a DocBook <refentry> document into a manual page
60
121
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
63
124
--param make.single.year.ranges 1 \
64
125
--param man.output.quietly 1 \
65
126
--param man.authors.section.enabled 0 \
66
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
127
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
67
128
$(notdir $<); \
68
$(MANPOST) $(notdir $@))
69
# DocBook-to-man post-processing to fix a '\n' escape bug
70
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
129
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
130
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
131
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
132
$(notdir $@); fi >/dev/null)
71
133
72
134
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
73
135
--param make.year.ranges 1 \
79
141
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
80
142
$<; $(HTMLPOST) $@)
81
143
# Fix citerefentry links
82
HTMLPOST=$(SED) --in-place \
144
HTMLPOST:=$(SED) --in-place \
83
145
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
84
146
85
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
86
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo
87
CPROGS=plugin-runner $(PLUGINS)
88
PROGS=mandos mandos-keygen mandos-ctl $(CPROGS)
89
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
147
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
148
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
149
plugins.d/plymouth
150
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
151
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
152
$(PLUGIN_HELPERS)
153
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
154
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
155
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
156
dracut-module/password-agent.8mandos \
90
157
plugins.d/mandos-client.8mandos \
91
plugins.d/password-prompt.8mandos mandos.conf.5 \
92
plugins.d/usplash.8mandos plugins.d/splashy.8mandos \
93
plugins.d/askpass-fifo.8mandos mandos-clients.conf.5
94
95
htmldocs=$(addsuffix .xhtml,$(DOCS))
96
97
objects=$(addsuffix .o,$(CPROGS))
98
158
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
159
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
160
plugins.d/plymouth.8mandos intro.8mandos
161
162
htmldocs:=$(addsuffix .xhtml,$(DOCS))
163
164
objects:=$(addsuffix .o,$(CPROGS))
165
166
.PHONY: all
99
167
all: $(PROGS) mandos.lsm
100
168
169
.PHONY: doc
101
170
doc: $(DOCS)
102
171
172
.PHONY: html
103
173
html: $(htmldocs)
104
174
105
175
%.5: %.xml common.ent legalnotice.xml
117
187
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
118
188
$(DOCBOOKTOHTML)
119
189
190
intro.8mandos: intro.xml common.ent legalnotice.xml
191
$(DOCBOOKTOMAN)
192
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
193
$(DOCBOOKTOHTML)
194
120
195
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
121
196
legalnotice.xml
122
197
$(DOCBOOKTOMAN)
131
206
legalnotice.xml
132
207
$(DOCBOOKTOHTML)
133
208
209
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
210
legalnotice.xml
211
$(DOCBOOKTOMAN)
212
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
213
legalnotice.xml
214
$(DOCBOOKTOHTML)
215
216
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
217
legalnotice.xml
218
$(DOCBOOKTOMAN)
219
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
220
legalnotice.xml
221
$(DOCBOOKTOHTML)
222
134
223
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
135
224
legalnotice.xml
136
225
$(DOCBOOKTOMAN)
145
234
overview.xml legalnotice.xml
146
235
$(DOCBOOKTOHTML)
147
236
237
dracut-module/password-agent.8mandos: \
238
dracut-module/password-agent.xml common.ent \
239
overview.xml legalnotice.xml
240
$(DOCBOOKTOMAN)
241
dracut-module/password-agent.8mandos.xhtml: \
242
dracut-module/password-agent.xml common.ent \
243
overview.xml legalnotice.xml
244
$(DOCBOOKTOHTML)
245
148
246
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
149
247
common.ent \
150
248
mandos-options.xml \
177
275
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
178
276
$@)
179
277
278
mandos-monitor: Makefile
279
$(strip $(SED) --in-place \
280
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
281
$@)
282
180
283
mandos.lsm: Makefile
181
284
$(strip $(SED) --in-place \
182
285
--expression='s/^\(Version:\).*/\1\t$(version)/' \
188
291
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
189
292
$@)
190
293
191
plugins.d/mandos-client: plugins.d/mandos-client.c
192
$(LINK.c) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) $(strip\
193
) $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
194
195
.PHONY : all doc html clean distclean run-client run-server install \
196
install-server install-client uninstall uninstall-server \
197
uninstall-client purge purge-server purge-client
198
294
# Does the linker support the --no-warn-execstack option?
295
ifeq ($(shell echo 'int main(){}'|$(CC) --language=c /dev/stdin -o /dev/null -Xlinker --no-warn-execstack >/dev/null 2>&1 && echo yes),yes)
296
# These programs use nested functions, which uses an executable stack
297
plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack
298
dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack
299
plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack
300
plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack
301
plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack
302
endif
303
304
# Need to add the GnuTLS, Avahi and GPGME libraries
305
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
306
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
307
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
308
) $(AVAHI_LIBS) $(GPGME_LIBS)
309
310
# Need to add the libnl-route library
311
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
312
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
313
314
# Need to add the GLib and pthread libraries
315
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
316
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
317
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
318
319
.PHONY: clean
199
320
clean:
200
321
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
201
322
323
.PHONY: distclean
202
324
distclean: clean
325
.PHONY: mostlyclean
203
326
mostlyclean: clean
327
.PHONY: maintainer-clean
204
328
maintainer-clean: clean
205
-rm --force --recursive keydir confdir
329
-rm --force --recursive keydir confdir statedir
206
330
207
check: all
331
.PHONY: check
332
check: all
208
333
./mandos --check
334
./mandos-ctl --check
335
./mandos-keygen --version
336
./plugin-runner --version
337
./plugin-helpers/mandos-client-iprouteadddel --version
338
./dracut-module/password-agent --test
209
339
210
340
# Run the client with a local config and key
211
run-client: all keydir/seckey.txt keydir/pubkey.txt
212
@echo "###################################################################"
213
@echo "# The following error messages are harmless and can be safely #"
214
@echo "# ignored. The messages are caused by not running as root, but #"
215
@echo "# you should NOT run \"make run-client\" as root unless you also #"
216
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
217
@echo "# From plugin-runner: setuid: Operation not permitted #"
218
@echo "# From askpass-fifo: mkfifo: Permission denied #"
219
@echo "# From mandos-client: setuid: Operation not permitted #"
220
@echo "# seteuid: Operation not permitted #"
221
@echo "# klogctl: Operation not permitted #"
222
@echo "###################################################################"
341
.PHONY: run-client
342
run-client: all keydir/seckey.txt keydir/pubkey.txt \
343
keydir/tls-privkey.pem keydir/tls-pubkey.pem
344
@echo '######################################################'
345
@echo '# The following error messages are harmless and can #'
346
@echo '# be safely ignored: #'
347
@echo '## From plugin-runner: #'
348
@echo '# setgid: Operation not permitted #'
349
@echo '# setuid: Operation not permitted #'
350
@echo '## From askpass-fifo: #'
351
@echo '# mkfifo: Permission denied #'
352
@echo '## From mandos-client: #'
353
@echo '# Failed to raise privileges: Operation not permi... #'
354
@echo '# Warning: network hook "*" exited with status * #'
355
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
356
@echo '# Failed to bring up interface "*": Operation not... #'
357
@echo '# #'
358
@echo '# (The messages are caused by not running as root, #'
359
@echo '# but you should NOT run "make run-client" as root #'
360
@echo '# unless you also unpacked and compiled Mandos as #'
361
@echo '# root, which is also NOT recommended.) #'
362
@echo '######################################################'
363
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
223
364
./plugin-runner --plugin-dir=plugins.d \
365
--plugin-helper-dir=plugin-helpers \
224
366
--config-file=plugin-runner.conf \
225
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt \
367
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
368
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
226
369
$(CLIENTARGS)
227
370
228
371
# Used by run-client
229
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
372
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
230
373
install --directory keydir
231
374
./mandos-keygen --dir keydir --force
375
if ! [ -e keydir/tls-privkey.pem ]; then \
376
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
377
fi
378
if ! [ -e keydir/tls-pubkey.pem ]; then \
379
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
380
fi
232
381
233
382
# Run the server with a local config
234
run-server: confdir/mandos.conf confdir/clients.conf
235
@echo "#################################################################"
236
@echo "# NOTE: Please IGNORE errors about \"No permission to bind to #"
237
@echo "# interface\" or \"Could not open file u'/var/run/mandos.pid'\" - #"
238
@echo "# they are harmless and are caused by the server not running as #"
239
@echo "# root. Do NOT run \"make run-server\" server as root if you did #"
240
@echo "# not also unpack and compile it as root. #"
241
@echo "#################################################################"
242
./mandos --debug --no-dbus --configdir=confdir $(SERVERARGS)
383
.PHONY: run-server
384
run-server: confdir/mandos.conf confdir/clients.conf statedir
385
./mandos --debug --no-dbus --configdir=confdir \
386
--statedir=statedir $(SERVERARGS)
243
387
244
388
# Used by run-server
245
389
confdir/mandos.conf: mandos.conf
246
install --directory confdir
247
install --mode=u=rw,go=r $^ $@
248
confdir/clients.conf: clients.conf keydir/seckey.txt
249
install --directory confdir
250
install --mode=u=rw $< $@
390
install -D --mode=u=rw,go=r $^ $@
391
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
392
install -D --mode=u=rw $< $@
251
393
# Add a client password
252
./mandos-keygen --dir keydir --password >> $@
394
./mandos-keygen --dir keydir --password --no-ssh >> $@
395
statedir:
396
install --directory statedir
253
397
398
.PHONY: install
254
399
install: install-server install-client-nokey
255
400
401
.PHONY: install-html
256
402
install-html: html
257
install --directory $(htmldir)
258
install --mode=u=rw,go=r --target-directory=$(htmldir) \
403
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
259
404
$(htmldocs)
260
405
406
.PHONY: install-server
261
407
install-server: doc
408
if install --directory --mode=u=rwx --owner=$(USER) \
409
--group=$(GROUP) $(STATEDIR); then \
410
:; \
411
elif install --directory --mode=u=rwx $(STATEDIR); then \
412
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
413
fi
414
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
415
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
416
$(TMPFILES)/mandos.conf; \
417
fi
418
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
419
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
420
$(SYSUSERS)/mandos.conf; \
421
fi
422
install --directory $(BINDIR)
423
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) mandos
424
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
425
mandos-ctl
426
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
427
mandos-monitor
262
428
install --directory $(CONFDIR)
263
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
264
429
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
265
430
mandos.conf
266
431
install --mode=u=rw --target-directory=$(CONFDIR) \
267
432
clients.conf
268
install --mode=u=rwx,go=rx init.d-mandos \
433
install -D --mode=u=rw,go=r dbus-mandos.conf \
434
$(DBUSPOLICYDIR)/mandos.conf
435
install -D --mode=u=rwx,go=rx init.d-mandos \
269
436
$(DESTDIR)/etc/init.d/mandos
270
install --mode=u=rw,go=r default-mandos \
437
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
438
install -D --mode=u=rw,go=r mandos.service \
439
$(SYSTEMD); \
440
fi
441
install -D --mode=u=rw,go=r default-mandos \
271
442
$(DESTDIR)/etc/default/mandos
272
443
if [ -z $(DESTDIR) ]; then \
273
444
update-rc.d mandos defaults 25 15;\
274
445
fi
446
install --directory $(MANDIR)/man8 $(MANDIR)/man5
275
447
gzip --best --to-stdout mandos.8 \
276
448
> $(MANDIR)/man8/mandos.8.gz
449
gzip --best --to-stdout mandos-monitor.8 \
450
> $(MANDIR)/man8/mandos-monitor.8.gz
451
gzip --best --to-stdout mandos-ctl.8 \
452
> $(MANDIR)/man8/mandos-ctl.8.gz
277
453
gzip --best --to-stdout mandos.conf.5 \
278
454
> $(MANDIR)/man5/mandos.conf.5.gz
279
455
gzip --best --to-stdout mandos-clients.conf.5 \
280
456
> $(MANDIR)/man5/mandos-clients.conf.5.gz
457
gzip --best --to-stdout intro.8mandos \
458
> $(MANDIR)/man8/intro.8mandos.gz
281
459
460
.PHONY: install-client-nokey
282
461
install-client-nokey: all doc
283
install --directory $(PREFIX)/lib/mandos $(CONFDIR)
284
462
install --directory --mode=u=rwx $(KEYDIR) \
285
$(PREFIX)/lib/mandos/plugins.d
286
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
287
install --mode=u=rwx \
288
--directory "$(CONFDIR)/plugins.d"; \
289
fi
290
install --mode=u=rwx,go=rx \
291
--target-directory=$(PREFIX)/lib/mandos plugin-runner
292
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
463
$(LIBDIR)/mandos/plugins.d \
464
$(LIBDIR)/mandos/plugin-helpers
465
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
466
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
467
$(SYSUSERS)/mandos-client.conf; \
468
fi
469
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
470
install --directory \
471
--mode=u=rwx "$(CONFDIR)/plugins.d" \
472
"$(CONFDIR)/plugin-helpers"; \
473
fi
474
install --directory --mode=u=rwx,go=rx \
475
"$(CONFDIR)/network-hooks.d"
476
install --mode=u=rwx,go=rx \
477
--target-directory=$(LIBDIR)/mandos plugin-runner
478
install --mode=u=rwx,go=rx \
479
--target-directory=$(LIBDIR)/mandos \
480
mandos-to-cryptroot-unlock
481
install --directory $(BINDIR)
482
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
293
483
mandos-keygen
294
484
install --mode=u=rwx,go=rx \
295
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
485
--target-directory=$(LIBDIR)/mandos/plugins.d \
296
486
plugins.d/password-prompt
297
487
install --mode=u=rwxs,go=rx \
298
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
488
--target-directory=$(LIBDIR)/mandos/plugins.d \
299
489
plugins.d/mandos-client
300
490
install --mode=u=rwxs,go=rx \
301
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
491
--target-directory=$(LIBDIR)/mandos/plugins.d \
302
492
plugins.d/usplash
303
493
install --mode=u=rwxs,go=rx \
304
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
494
--target-directory=$(LIBDIR)/mandos/plugins.d \
305
495
plugins.d/splashy
306
496
install --mode=u=rwxs,go=rx \
307
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
497
--target-directory=$(LIBDIR)/mandos/plugins.d \
308
498
plugins.d/askpass-fifo
309
install initramfs-tools-hook \
499
install --mode=u=rwxs,go=rx \
500
--target-directory=$(LIBDIR)/mandos/plugins.d \
501
plugins.d/plymouth
502
install --mode=u=rwx,go=rx \
503
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
504
plugin-helpers/mandos-client-iprouteadddel
505
install -D initramfs-tools-hook \
310
506
$(INITRAMFSTOOLS)/hooks/mandos
311
install --mode=u=rw,go=r initramfs-tools-hook-conf \
312
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
313
install initramfs-tools-script \
507
install -D --mode=u=rw,go=r initramfs-tools-conf \
508
$(INITRAMFSTOOLS)/conf.d/mandos-conf
509
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
510
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
511
install -D initramfs-tools-script \
314
512
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
513
install -D initramfs-tools-script-stop \
514
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
515
install -D --mode=u=rw,go=r \
516
--target-directory=$(DRACUTMODULE) \
517
dracut-module/ask-password-mandos.path \
518
dracut-module/ask-password-mandos.service
519
install --mode=u=rwxs,go=rx \
520
--target-directory=$(DRACUTMODULE) \
521
dracut-module/module-setup.sh \
522
dracut-module/cmdline-mandos.sh \
523
dracut-module/password-agent
315
524
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
525
install --directory $(MANDIR)/man8
316
526
gzip --best --to-stdout mandos-keygen.8 \
317
527
> $(MANDIR)/man8/mandos-keygen.8.gz
318
528
gzip --best --to-stdout plugin-runner.8mandos \
319
529
> $(MANDIR)/man8/plugin-runner.8mandos.gz
530
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
531
> $(MANDIR)/man8/mandos-client.8mandos.gz
320
532
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
321
533
> $(MANDIR)/man8/password-prompt.8mandos.gz
322
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
323
> $(MANDIR)/man8/mandos-client.8mandos.gz
324
534
gzip --best --to-stdout plugins.d/usplash.8mandos \
325
535
> $(MANDIR)/man8/usplash.8mandos.gz
326
536
gzip --best --to-stdout plugins.d/splashy.8mandos \
327
537
> $(MANDIR)/man8/splashy.8mandos.gz
328
538
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
329
539
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
540
gzip --best --to-stdout plugins.d/plymouth.8mandos \
541
> $(MANDIR)/man8/plymouth.8mandos.gz
542
gzip --best --to-stdout dracut-module/password-agent.8mandos \
543
> $(MANDIR)/man8/password-agent.8mandos.gz
330
544
545
.PHONY: install-client
331
546
install-client: install-client-nokey
332
547
# Post-installation stuff
333
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
334
update-initramfs -k all -u
548
-$(BINDIR)/mandos-keygen --dir "$(KEYDIR)"
549
if command -v update-initramfs >/dev/null; then \
550
update-initramfs -k all -u; \
551
elif command -v dracut >/dev/null; then \
552
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
553
if [ -w "$$initrd" ]; then \
554
chmod go-r "$$initrd"; \
555
dracut --force "$$initrd"; \
556
fi; \
557
done; \
558
fi
335
559
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
336
560
561
.PHONY: uninstall
337
562
uninstall: uninstall-server uninstall-client
338
563
564
.PHONY: uninstall-server
339
565
uninstall-server:
340
-rm --force $(PREFIX)/sbin/mandos \
566
-rm --force $(BINDIR)/mandos \
567
$(BINDIR)/mandos-ctl \
568
$(BINDIR)/mandos-monitor \
341
569
$(MANDIR)/man8/mandos.8.gz \
570
$(MANDIR)/man8/mandos-monitor.8.gz \
571
$(MANDIR)/man8/mandos-ctl.8.gz \
342
572
$(MANDIR)/man5/mandos.conf.5.gz \
343
573
$(MANDIR)/man5/mandos-clients.conf.5.gz
344
574
update-rc.d -f mandos remove
345
575
-rmdir $(CONFDIR)
346
576
577
.PHONY: uninstall-client
347
578
uninstall-client:
348
579
# Refuse to uninstall client if /etc/crypttab is explicitly configured
349
580
# to use it.
350
581
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
351
582
$(DESTDIR)/etc/crypttab
352
-rm --force $(PREFIX)/sbin/mandos-keygen \
353
$(PREFIX)/lib/mandos/plugin-runner \
354
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
355
$(PREFIX)/lib/mandos/plugins.d/mandos-client \
356
$(PREFIX)/lib/mandos/plugins.d/usplash \
357
$(PREFIX)/lib/mandos/plugins.d/splashy \
358
$(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
583
-rm --force $(BINDIR)/mandos-keygen \
584
$(LIBDIR)/mandos/plugin-runner \
585
$(LIBDIR)/mandos/plugins.d/password-prompt \
586
$(LIBDIR)/mandos/plugins.d/mandos-client \
587
$(LIBDIR)/mandos/plugins.d/usplash \
588
$(LIBDIR)/mandos/plugins.d/splashy \
589
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
590
$(LIBDIR)/mandos/plugins.d/plymouth \
359
591
$(INITRAMFSTOOLS)/hooks/mandos \
360
592
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
361
593
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
594
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
595
$(DRACUTMODULE)/ask-password-mandos.path \
596
$(DRACUTMODULE)/ask-password-mandos.service \
597
$(DRACUTMODULE)/module-setup.sh \
598
$(DRACUTMODULE)/cmdline-mandos.sh \
599
$(DRACUTMODULE)/password-agent \
600
$(MANDIR)/man8/mandos-keygen.8.gz \
362
601
$(MANDIR)/man8/plugin-runner.8mandos.gz \
363
$(MANDIR)/man8/mandos-keygen.8.gz \
602
$(MANDIR)/man8/mandos-client.8mandos.gz
364
603
$(MANDIR)/man8/password-prompt.8mandos.gz \
365
604
$(MANDIR)/man8/usplash.8mandos.gz \
366
605
$(MANDIR)/man8/splashy.8mandos.gz \
367
606
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
368
$(MANDIR)/man8/mandos-client.8mandos.gz
369
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
370
$(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
371
update-initramfs -k all -u
607
$(MANDIR)/man8/plymouth.8mandos.gz \
608
$(MANDIR)/man8/password-agent.8mandos.gz \
609
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
610
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
611
if command -v update-initramfs >/dev/null; then \
612
update-initramfs -k all -u; \
613
elif command -v dracut >/dev/null; then \
614
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
615
test -w "$$initrd" && dracut --force "$$initrd"; \
616
done; \
617
fi
372
618
619
.PHONY: purge
373
620
purge: purge-server purge-client
374
621
622
.PHONY: purge-server
375
623
purge-server: uninstall-server
376
624
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
625
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
377
626
$(DESTDIR)/etc/default/mandos \
378
627
$(DESTDIR)/etc/init.d/mandos \
628
$(DESTDIR)/run/mandos.pid \
379
629
$(DESTDIR)/var/run/mandos.pid
630
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
631
-rm --force -- $(SYSTEMD)/mandos.service; \
632
fi
380
633
-rmdir $(CONFDIR)
381
634
635
.PHONY: purge-client
382
636
purge-client: uninstall-client
383
-shred --remove $(KEYDIR)/seckey.txt
637
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
384
638
-rm --force $(CONFDIR)/plugin-runner.conf \
385
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
639
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
640
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
386
641
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0