/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to Makefile

  • Committer: Teddy Hogeborn
  • Date: 2008-12-10 01:26:02 UTC
  • mfrom: (237.1.2 mandos)
  • Revision ID: teddy@fukt.bsnet.se-20081210012602-vhz3h75xkj24t340
First version of a somewhat complete D-Bus server interface.  Also
change user/group name to "_mandos".

* debian/mandos.postinst: Rename old "mandos" user and group to
                          "_mandos"; create "_mandos" user and group
                          if none exist.
* debian/mandos-client.postinst: - '' -

* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
                        group name.

* mandos (_datetime_to_dbus_struct): New; was previously local.
  (Client.started): Renamed to "last_started".  All users changed.
  (Client.started): New; boolean.
  (Client.dbus_object_path): New.
  (Client.check_command): Renamed to "checker_command".  All users
                          changed.
  (Client.__init__): Set and use "self.dbus_object_path".  Set
                     "self.started".
  (Client.start): Update "self.started".  Emit "self.PropertyChanged"
                  signals for both "started" and "last_started".
  (Client.stop): Update "self.started".  Emit "self.PropertyChanged"
                 signal for "started".
  (Client.checker_callback): Take additional "command" argument.  All
                             callers changed. Emit
                             "self.PropertyChanged" signal.
  (Client.bump_timeout): Emit "self.PropertyChanged" signal for
                         "last_checked_ok".
  (Client.start_checker): Emit "self.PropertyChanged" signal for
                          "checker_running".
  (Client.stop_checker): Emit "self.PropertyChanged" signal for
                         "checker_running".
  (Client.still_valid): Bug fix: use "getattr(self, started, False)"
                        instead of "self.started" in case this client
                        object is so new that the "started" attribute
                        has not been created yet.
  (Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
  Client.GetCreated, Client.GetFingerprint, Client.GetHost,
  Client.GetInterval, Client.GetName, Client.GetStarted,
  Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
  Removed; all callers changed.
  (Client.CheckerCompleted): Add "condition" and "command" arguments.
                             All callers changed.
  (Client.GetAllProperties, Client.PropertyChanged): New.
  (Client.StillValid): Renamed to "IsStillValid".
  (Client.StartChecker): Changed to its own function to avoid the
                         return value from "Client.start_checker()".
  (Client.Stop): Changed to its own function to avoid the return value
                 from "Client.stop()".
  (main): Try "_mandos" before "mandos" as user and group name.
          Removed inner function "remove_from_clients".  New inner
          class "MandosServer".

Show diffs side-by-side

added added

removed removed

Lines of Context:
Makefile
1
 
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
 
        -Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
 
        -Wunused -Wuninitialized -Wstrict-overflow=5 \
4
 
        -Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
 
        -Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
 
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
 
2
        -Wswitch-default -Wswitch-enum -Wunused-parameter \
 
3
        -Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
6
4
        -Wunsafe-loop-optimizations -Wpointer-arith \
7
5
        -Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
 
        -Wconversion -Wlogical-op -Waggregate-return \
9
 
        -Wstrict-prototypes -Wold-style-definition \
10
 
        -Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
 
        -Wredundant-decls -Wnested-externs -Winline -Wvla \
12
 
        -Wvolatile-register-var -Woverlength-strings
13
 
 
14
 
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
 
## Check which sanitizing options can be used
16
 
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
 
#       echo 'int main(){}' | $(CC) --language=c $(option) \
18
 
#       /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
 
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
 
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
 
        -fsanitize=shift -fsanitize=integer-divide-by-zero \
22
 
        -fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
 
        -fsanitize=return -fsanitize=signed-integer-overflow \
24
 
        -fsanitize=bounds -fsanitize=alignment \
25
 
        -fsanitize=object-size -fsanitize=float-divide-by-zero \
26
 
        -fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
 
        -fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
 
        -fsanitize=enum -fsanitize-address-use-after-scope
29
 
 
30
 
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
 
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
 
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
 
LINK_FORTIFY_LD:=-z relro -z now
34
 
LINK_FORTIFY:=
35
 
 
36
 
# If BROKEN_PIE is set, do not build with -pie
37
 
ifndef BROKEN_PIE
38
 
FORTIFY += -fPIE
39
 
LINK_FORTIFY += -pie
40
 
endif
 
6
        -Wconversion -Wstrict-prototypes -Wold-style-definition \
 
7
        -Wpacked -Wnested-externs -Winline -Wvolatile-register-var
 
8
#       -Wunreachable-code 
 
9
#DEBUG=-ggdb3
 
10
# For info about _FORTIFY_SOURCE, see
 
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
 
12
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIE -pie
 
13
LINK_FORTIFY=-z relro -pie
41
14
#COVERAGE=--coverage
42
 
OPTIMIZE:=-Os -fno-strict-aliasing
43
 
LANGUAGE:=-std=gnu11
44
 
FEATURES:=-D_FILE_OFFSET_BITS=64
45
 
htmldir:=man
46
 
version:=1.8.9
47
 
SED:=sed
48
 
PKG_CONFIG?=pkg-config
49
 
 
50
 
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
 
        || getent passwd nobody || echo 65534)))
52
 
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
 
        || getent group nogroup || echo 65534)))
54
 
 
55
 
LINUXVERSION:=$(shell uname --kernel-release)
 
15
OPTIMIZE=-Os
 
16
LANGUAGE=-std=gnu99
 
17
htmldir=man
 
18
version=1.0.2
 
19
SED=sed
56
20
 
57
21
## Use these settings for a traditional /usr/local install
58
 
# PREFIX:=$(DESTDIR)/usr/local
59
 
# CONFDIR:=$(DESTDIR)/etc/mandos
60
 
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
 
# MANDIR:=$(PREFIX)/man
62
 
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
 
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
 
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
 
# LIBDIR:=$(PREFIX)/lib
 
22
# PREFIX=$(DESTDIR)/usr/local
 
23
# CONFDIR=$(DESTDIR)/etc/mandos
 
24
# KEYDIR=$(DESTDIR)/etc/mandos/keys
 
25
# MANDIR=$(PREFIX)/man
 
26
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
66
27
##
67
28
 
68
29
## These settings are for a package-type install
69
 
PREFIX:=$(DESTDIR)/usr
70
 
CONFDIR:=$(DESTDIR)/etc/mandos
71
 
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
 
MANDIR:=$(PREFIX)/share/man
73
 
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
 
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
 
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
 
LIBDIR:=$(shell \
77
 
        for d in \
78
 
        "/usr/lib/`dpkg-architecture \
79
 
                        -qDEB_HOST_MULTIARCH 2>/dev/null`" \
80
 
        "`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
81
 
                if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
82
 
                        echo "$(DESTDIR)$$d"; \
83
 
                        break; \
84
 
                fi; \
85
 
        done)
 
30
PREFIX=$(DESTDIR)/usr
 
31
CONFDIR=$(DESTDIR)/etc/mandos
 
32
KEYDIR=$(DESTDIR)/etc/keys/mandos
 
33
MANDIR=$(PREFIX)/share/man
 
34
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
86
35
##
87
36
 
88
 
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
 
                        --variable=systemdsystemunitdir)
90
 
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
 
                        --variable=tmpfilesdir)
92
 
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
93
 
                        --variable=sysusersdir)
94
 
 
95
 
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
96
 
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
97
 
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
98
 
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
99
 
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
100
 
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
101
 
        getconf LFS_LDFLAGS)
102
 
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
103
 
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
104
 
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
105
 
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
 
37
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
 
38
GNUTLS_LIBS=$(shell libgnutls-config --libs)
 
39
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
 
40
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
 
41
GPGME_CFLAGS=$(shell gpgme-config --cflags)
 
42
GPGME_LIBS=$(shell gpgme-config --libs)
106
43
 
107
44
# Do not change these two
108
 
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
109
 
        $(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
110
 
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
111
 
        ) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
 
45
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
 
46
        $(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
 
47
        -DVERSION='"$(version)"'
 
48
LDFLAGS=$(COVERAGE) $(LINK_FORTIFY)
112
49
 
113
50
# Commands to format a DocBook <refentry> document into a manual page
114
 
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
 
51
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
115
52
        --param man.charmap.use.subset          0 \
116
53
        --param make.year.ranges                1 \
117
54
        --param make.single.year.ranges         1 \
118
55
        --param man.output.quietly              1 \
119
56
        --param man.authors.section.enabled     0 \
120
 
        /usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
 
57
         /usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
121
58
        $(notdir $<); \
122
 
        if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
123
 
        && command -v man >/dev/null; then LANG=en_US.UTF-8 \
124
 
        MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
125
 
        $(notdir $@); fi >/dev/null)
 
59
        $(MANPOST) $(notdir $@)
 
60
# DocBook-to-man post-processing to fix a '\n' escape bug
 
61
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
126
62
 
127
 
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
 
63
DOCBOOKTOHTML=xsltproc --nonet --xinclude \
128
64
        --param make.year.ranges                1 \
129
65
        --param make.single.year.ranges         1 \
130
66
        --param man.output.quietly              1 \
132
68
        --param citerefentry.link               1 \
133
69
        --output $@ \
134
70
        /usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
135
 
        $<; $(HTMLPOST) $@)
 
71
        $<; $(HTMLPOST) $@
136
72
# Fix citerefentry links
137
 
HTMLPOST:=$(SED) --in-place \
 
73
HTMLPOST=$(SED) --in-place \
138
74
        --expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
139
75
 
140
 
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
141
 
        plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
142
 
        plugins.d/plymouth
143
 
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
144
 
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
145
 
        $(PLUGIN_HELPERS)
146
 
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
147
 
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
148
 
        mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
149
 
        dracut-module/password-agent.8mandos \
 
76
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
 
77
        plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo
 
78
CPROGS=plugin-runner $(PLUGINS)
 
79
PROGS=mandos mandos-keygen $(CPROGS)
 
80
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
150
81
        plugins.d/mandos-client.8mandos \
151
 
        plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
152
 
        plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
153
 
        plugins.d/plymouth.8mandos intro.8mandos
154
 
 
155
 
htmldocs:=$(addsuffix .xhtml,$(DOCS))
156
 
 
157
 
objects:=$(addsuffix .o,$(CPROGS))
 
82
        plugins.d/password-prompt.8mandos mandos.conf.5 \
 
83
        plugins.d/usplash.8mandos plugins.d/splashy.8mandos \
 
84
        plugins.d/askpass-fifo.8mandos mandos-clients.conf.5
 
85
 
 
86
htmldocs=$(addsuffix .xhtml,$(DOCS))
 
87
 
 
88
objects=$(addsuffix .o,$(CPROGS))
158
89
 
159
90
all: $(PROGS) mandos.lsm
160
91
 
177
108
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
178
109
        $(DOCBOOKTOHTML)
179
110
 
180
 
intro.8mandos: intro.xml common.ent legalnotice.xml
181
 
        $(DOCBOOKTOMAN)
182
 
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
183
 
        $(DOCBOOKTOHTML)
184
 
 
185
111
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
186
112
                legalnotice.xml
187
113
        $(DOCBOOKTOMAN)
196
122
                 legalnotice.xml
197
123
        $(DOCBOOKTOHTML)
198
124
 
199
 
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
200
 
                legalnotice.xml
201
 
        $(DOCBOOKTOMAN)
202
 
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
203
 
                 legalnotice.xml
204
 
        $(DOCBOOKTOHTML)
205
 
 
206
 
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
207
 
                legalnotice.xml
208
 
        $(DOCBOOKTOMAN)
209
 
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
210
 
                 legalnotice.xml
211
 
        $(DOCBOOKTOHTML)
212
 
 
213
125
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
214
126
                legalnotice.xml
215
127
        $(DOCBOOKTOMAN)
224
136
                overview.xml legalnotice.xml
225
137
        $(DOCBOOKTOHTML)
226
138
 
227
 
dracut-module/password-agent.8mandos: \
228
 
                dracut-module/password-agent.xml common.ent \
229
 
                overview.xml legalnotice.xml
230
 
        $(DOCBOOKTOMAN)
231
 
dracut-module/password-agent.8mandos.xhtml: \
232
 
                dracut-module/password-agent.xml common.ent \
233
 
                overview.xml legalnotice.xml
234
 
        $(DOCBOOKTOHTML)
235
 
 
236
139
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
237
140
                                        common.ent \
238
141
                                        mandos-options.xml \
246
149
 
247
150
# Update all these files with version number $(version)
248
151
common.ent: Makefile
249
 
        $(strip $(SED) --in-place \
250
 
                --expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
251
 
                $@)
 
152
        $(SED) --in-place \
 
153
                --expression='s/^\(<ENTITY VERSION "\)[^"]*">$$/\1$(version)"/' \
 
154
                $@
252
155
 
253
156
mandos: Makefile
254
 
        $(strip $(SED) --in-place \
 
157
        $(SED) --in-place \
255
158
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
256
 
                $@)
 
159
                $@
257
160
 
258
161
mandos-keygen: Makefile
259
 
        $(strip $(SED) --in-place \
 
162
        $(SED) --in-place \
260
163
                --expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
261
 
                $@)
262
 
 
263
 
mandos-ctl: Makefile
264
 
        $(strip $(SED) --in-place \
265
 
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
266
 
                $@)
267
 
 
268
 
mandos-monitor: Makefile
269
 
        $(strip $(SED) --in-place \
270
 
                --expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
271
 
                $@)
 
164
                $@
272
165
 
273
166
mandos.lsm: Makefile
274
 
        $(strip $(SED) --in-place \
 
167
        $(SED) --in-place \
275
168
                --expression='s/^\(Version:\).*/\1\t$(version)/' \
276
 
                $@)
277
 
        $(strip $(SED) --in-place \
 
169
                $@
 
170
        $(SED) --in-place \
278
171
                --expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
279
 
                $@)
280
 
        $(strip $(SED) --in-place \
281
 
                --expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
282
 
                $@)
283
 
 
284
 
# Need to add the GnuTLS, Avahi and GPGME libraries
285
 
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
286
 
        ) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
287
 
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
288
 
        ) $(AVAHI_LIBS) $(GPGME_LIBS)
289
 
 
290
 
# Need to add the libnl-route library
291
 
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
292
 
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
293
 
 
294
 
# Need to add the GLib and pthread libraries
295
 
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
296
 
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
297
 
 
298
 
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
299
 
        check run-client run-server install install-html \
300
 
        install-server install-client-nokey install-client uninstall \
301
 
        uninstall-server uninstall-client purge purge-server \
302
 
        purge-client
 
172
                $@
 
173
 
 
174
plugins.d/mandos-client: plugins.d/mandos-client.o
 
175
        $(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
 
176
                $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
 
177
 
 
178
.PHONY : all doc html clean distclean run-client run-server install \
 
179
        install-server install-client uninstall uninstall-server \
 
180
        uninstall-client purge purge-server purge-client
303
181
 
304
182
clean:
305
183
        -rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
307
185
distclean: clean
308
186
mostlyclean: clean
309
187
maintainer-clean: clean
310
 
        -rm --force --recursive keydir confdir statedir
 
188
        -rm --force --recursive keydir confdir
311
189
 
312
 
check: all
 
190
check:  all
313
191
        ./mandos --check
314
 
        ./mandos-ctl --check
315
 
        ./mandos-keygen --version
316
 
        ./plugin-runner --version
317
 
        ./plugin-helpers/mandos-client-iprouteadddel --version
318
 
        ./dracut-module/password-agent --test
319
192
 
320
193
# Run the client with a local config and key
321
 
run-client: all keydir/seckey.txt keydir/pubkey.txt \
322
 
                        keydir/tls-privkey.pem keydir/tls-pubkey.pem
323
 
        @echo '######################################################'
324
 
        @echo '# The following error messages are harmless and can  #'
325
 
        @echo '#  be safely ignored:                                #'
326
 
        @echo '## From plugin-runner:                               #'
327
 
        @echo '# setgid: Operation not permitted                    #'
328
 
        @echo '# setuid: Operation not permitted                    #'
329
 
        @echo '## From askpass-fifo:                                #'
330
 
        @echo '# mkfifo: Permission denied                          #'
331
 
        @echo '## From mandos-client:                               #'
332
 
        @echo '# Failed to raise privileges: Operation not permi... #'
333
 
        @echo '# Warning: network hook "*" exited with status *     #'
334
 
        @echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
335
 
        @echo '# Failed to bring up interface "*": Operation not... #'
336
 
        @echo '#                                                    #'
337
 
        @echo '# (The messages are caused by not running as root,   #'
338
 
        @echo '# but you should NOT run "make run-client" as root   #'
339
 
        @echo '# unless you also unpacked and compiled Mandos as    #'
340
 
        @echo '# root, which is also NOT recommended.)              #'
341
 
        @echo '######################################################'
342
 
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
 
194
run-client: all keydir/seckey.txt keydir/pubkey.txt
343
195
        ./plugin-runner --plugin-dir=plugins.d \
344
 
                --plugin-helper-dir=plugin-helpers \
345
196
                --config-file=plugin-runner.conf \
346
 
                --options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
347
 
                --env-for=mandos-client:GNOME_KEYRING_CONTROL= \
348
 
                $(CLIENTARGS)
 
197
                --options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
349
198
 
350
199
# Used by run-client
351
 
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
 
200
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
352
201
        install --directory keydir
353
202
        ./mandos-keygen --dir keydir --force
354
203
 
355
204
# Run the server with a local config
356
 
run-server: confdir/mandos.conf confdir/clients.conf statedir
357
 
        ./mandos --debug --no-dbus --configdir=confdir \
358
 
                --statedir=statedir $(SERVERARGS)
 
205
run-server: confdir/mandos.conf confdir/clients.conf
 
206
        ./mandos --debug --configdir=confdir
359
207
 
360
208
# Used by run-server
361
209
confdir/mandos.conf: mandos.conf
362
210
        install --directory confdir
363
211
        install --mode=u=rw,go=r $^ $@
364
 
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
 
212
confdir/clients.conf: clients.conf keydir/seckey.txt
365
213
        install --directory confdir
366
214
        install --mode=u=rw $< $@
367
215
# Add a client password
368
 
        ./mandos-keygen --dir keydir --password --no-ssh >> $@
369
 
statedir:
370
 
        install --directory statedir
 
216
        ./mandos-keygen --dir keydir --password >> $@
371
217
 
372
218
install: install-server install-client-nokey
373
219
 
378
224
 
379
225
install-server: doc
380
226
        install --directory $(CONFDIR)
381
 
        if install --directory --mode=u=rwx --owner=$(USER) \
382
 
                --group=$(GROUP) $(STATEDIR); then \
383
 
                :; \
384
 
        elif install --directory --mode=u=rwx $(STATEDIR); then \
385
 
                chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
386
 
        fi
387
 
        if [ "$(TMPFILES)" != "$(DESTDIR)" \
388
 
                        -a -d "$(TMPFILES)" ]; then \
389
 
                install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
390
 
                        $(TMPFILES)/mandos.conf; \
391
 
        fi
392
 
        if [ "$(SYSUSERS)" != "$(DESTDIR)" \
393
 
                        -a -d "$(SYSUSERS)" ]; then \
394
 
                install --mode=u=rw,go=r sysusers.d-mandos.conf \
395
 
                        $(SYSUSERS)/mandos.conf; \
396
 
        fi
397
227
        install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
398
 
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
399
 
                mandos-ctl
400
 
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
401
 
                mandos-monitor
402
228
        install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
403
229
                mandos.conf
404
230
        install --mode=u=rw --target-directory=$(CONFDIR) \
405
231
                clients.conf
406
 
        install --mode=u=rw,go=r dbus-mandos.conf \
407
 
                $(DESTDIR)/etc/dbus-1/system.d/mandos.conf
408
232
        install --mode=u=rwx,go=rx init.d-mandos \
409
233
                $(DESTDIR)/etc/init.d/mandos
410
 
        if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
411
 
                install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
412
 
        fi
413
234
        install --mode=u=rw,go=r default-mandos \
414
235
                $(DESTDIR)/etc/default/mandos
415
236
        if [ -z $(DESTDIR) ]; then \
417
238
        fi
418
239
        gzip --best --to-stdout mandos.8 \
419
240
                > $(MANDIR)/man8/mandos.8.gz
420
 
        gzip --best --to-stdout mandos-monitor.8 \
421
 
                > $(MANDIR)/man8/mandos-monitor.8.gz
422
 
        gzip --best --to-stdout mandos-ctl.8 \
423
 
                > $(MANDIR)/man8/mandos-ctl.8.gz
424
241
        gzip --best --to-stdout mandos.conf.5 \
425
242
                > $(MANDIR)/man5/mandos.conf.5.gz
426
243
        gzip --best --to-stdout mandos-clients.conf.5 \
427
244
                > $(MANDIR)/man5/mandos-clients.conf.5.gz
428
 
        gzip --best --to-stdout intro.8mandos \
429
 
                > $(MANDIR)/man8/intro.8mandos.gz
430
245
 
431
246
install-client-nokey: all doc
432
 
        install --directory $(LIBDIR)/mandos $(CONFDIR)
 
247
        install --directory $(PREFIX)/lib/mandos $(CONFDIR)
433
248
        install --directory --mode=u=rwx $(KEYDIR) \
434
 
                $(LIBDIR)/mandos/plugins.d \
435
 
                $(LIBDIR)/mandos/plugin-helpers
436
 
        if [ "$(SYSUSERS)" != "$(DESTDIR)" \
437
 
                        -a -d "$(SYSUSERS)" ]; then \
438
 
                install --mode=u=rw,go=r sysusers.d-mandos.conf \
439
 
                        $(SYSUSERS)/mandos-client.conf; \
440
 
        fi
441
 
        if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
 
249
                $(PREFIX)/lib/mandos/plugins.d
 
250
        if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
442
251
                install --mode=u=rwx \
443
 
                        --directory "$(CONFDIR)/plugins.d" \
444
 
                        "$(CONFDIR)/plugin-helpers"; \
 
252
                        --directory "$(CONFDIR)/plugins.d"; \
445
253
        fi
446
 
        install --mode=u=rwx,go=rx --directory \
447
 
                "$(CONFDIR)/network-hooks.d"
448
 
        install --mode=u=rwx,go=rx \
449
 
                --target-directory=$(LIBDIR)/mandos plugin-runner
450
 
        install --mode=u=rwx,go=rx \
451
 
                --target-directory=$(LIBDIR)/mandos \
452
 
                mandos-to-cryptroot-unlock
 
254
        install --mode=u=rwx,go=rx \
 
255
                --target-directory=$(PREFIX)/lib/mandos plugin-runner
453
256
        install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
454
257
                mandos-keygen
455
258
        install --mode=u=rwx,go=rx \
456
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
259
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
457
260
                plugins.d/password-prompt
458
261
        install --mode=u=rwxs,go=rx \
459
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
262
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
460
263
                plugins.d/mandos-client
461
264
        install --mode=u=rwxs,go=rx \
462
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
265
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
463
266
                plugins.d/usplash
464
267
        install --mode=u=rwxs,go=rx \
465
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
268
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
466
269
                plugins.d/splashy
467
270
        install --mode=u=rwxs,go=rx \
468
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
 
271
                --target-directory=$(PREFIX)/lib/mandos/plugins.d \
469
272
                plugins.d/askpass-fifo
470
 
        install --mode=u=rwxs,go=rx \
471
 
                --target-directory=$(LIBDIR)/mandos/plugins.d \
472
 
                plugins.d/plymouth
473
 
        install --mode=u=rwx,go=rx \
474
 
                --target-directory=$(LIBDIR)/mandos/plugin-helpers \
475
 
                plugin-helpers/mandos-client-iprouteadddel
476
273
        install initramfs-tools-hook \
477
274
                $(INITRAMFSTOOLS)/hooks/mandos
478
 
        install --mode=u=rw,go=r initramfs-tools-conf \
479
 
                $(INITRAMFSTOOLS)/conf.d/mandos-conf
480
 
        install --mode=u=rw,go=r initramfs-tools-conf-hook \
481
 
                $(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
 
275
        install --mode=u=rw,go=r initramfs-tools-hook-conf \
 
276
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos
482
277
        install initramfs-tools-script \
483
 
                $(INITRAMFSTOOLS)/scripts/init-premount/mandos
484
 
        install initramfs-tools-script-stop \
485
 
                $(INITRAMFSTOOLS)/scripts/local-premount/mandos
486
 
        install --directory $(DRACUTMODULE)
487
 
        install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
488
 
                dracut-module/ask-password-mandos.path \
489
 
                dracut-module/ask-password-mandos.service
490
 
        install --mode=u=rwxs,go=rx \
491
 
                --target-directory=$(DRACUTMODULE) \
492
 
                dracut-module/module-setup.sh \
493
 
                dracut-module/cmdline-mandos.sh \
494
 
                dracut-module/password-agent
 
278
                $(INITRAMFSTOOLS)/scripts/local-top/mandos
495
279
        install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
496
280
        gzip --best --to-stdout mandos-keygen.8 \
497
281
                > $(MANDIR)/man8/mandos-keygen.8.gz
498
282
        gzip --best --to-stdout plugin-runner.8mandos \
499
283
                > $(MANDIR)/man8/plugin-runner.8mandos.gz
 
284
        gzip --best --to-stdout plugins.d/password-prompt.8mandos \
 
285
                > $(MANDIR)/man8/password-prompt.8mandos.gz
500
286
        gzip --best --to-stdout plugins.d/mandos-client.8mandos \
501
287
                > $(MANDIR)/man8/mandos-client.8mandos.gz
502
 
        gzip --best --to-stdout plugins.d/password-prompt.8mandos \
503
 
                > $(MANDIR)/man8/password-prompt.8mandos.gz
504
288
        gzip --best --to-stdout plugins.d/usplash.8mandos \
505
289
                > $(MANDIR)/man8/usplash.8mandos.gz
506
290
        gzip --best --to-stdout plugins.d/splashy.8mandos \
507
291
                > $(MANDIR)/man8/splashy.8mandos.gz
508
292
        gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
509
293
                > $(MANDIR)/man8/askpass-fifo.8mandos.gz
510
 
        gzip --best --to-stdout plugins.d/plymouth.8mandos \
511
 
                > $(MANDIR)/man8/plymouth.8mandos.gz
512
 
        gzip --best --to-stdout dracut-module/password-agent.8mandos \
513
 
                > $(MANDIR)/man8/password-agent.8mandos.gz
514
294
 
515
295
install-client: install-client-nokey
516
296
# Post-installation stuff
517
297
        -$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
518
 
        if command -v update-initramfs >/dev/null; then \
519
 
            update-initramfs -k all -u; \
520
 
        elif command -v dracut >/dev/null; then \
521
 
            for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
522
 
                if [ -w "$$initrd" ]; then \
523
 
                    chmod go-r "$$initrd"; \
524
 
                    dracut --force "$$initrd"; \
525
 
                fi; \
526
 
            done; \
527
 
        fi
 
298
        update-initramfs -k all -u
528
299
        echo "Now run mandos-keygen --password --dir $(KEYDIR)"
529
300
 
530
301
uninstall: uninstall-server uninstall-client
531
302
 
532
303
uninstall-server:
533
304
        -rm --force $(PREFIX)/sbin/mandos \
534
 
                $(PREFIX)/sbin/mandos-ctl \
535
 
                $(PREFIX)/sbin/mandos-monitor \
536
305
                $(MANDIR)/man8/mandos.8.gz \
537
 
                $(MANDIR)/man8/mandos-monitor.8.gz \
538
 
                $(MANDIR)/man8/mandos-ctl.8.gz \
539
306
                $(MANDIR)/man5/mandos.conf.5.gz \
540
307
                $(MANDIR)/man5/mandos-clients.conf.5.gz
541
308
        update-rc.d -f mandos remove
547
314
        ! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
548
315
                $(DESTDIR)/etc/crypttab
549
316
        -rm --force $(PREFIX)/sbin/mandos-keygen \
550
 
                $(LIBDIR)/mandos/plugin-runner \
551
 
                $(LIBDIR)/mandos/plugins.d/password-prompt \
552
 
                $(LIBDIR)/mandos/plugins.d/mandos-client \
553
 
                $(LIBDIR)/mandos/plugins.d/usplash \
554
 
                $(LIBDIR)/mandos/plugins.d/splashy \
555
 
                $(LIBDIR)/mandos/plugins.d/askpass-fifo \
556
 
                $(LIBDIR)/mandos/plugins.d/plymouth \
 
317
                $(PREFIX)/lib/mandos/plugin-runner \
 
318
                $(PREFIX)/lib/mandos/plugins.d/password-prompt \
 
319
                $(PREFIX)/lib/mandos/plugins.d/mandos-client \
 
320
                $(PREFIX)/lib/mandos/plugins.d/usplash \
 
321
                $(PREFIX)/lib/mandos/plugins.d/splashy \
 
322
                $(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
557
323
                $(INITRAMFSTOOLS)/hooks/mandos \
558
324
                $(INITRAMFSTOOLS)/conf-hooks.d/mandos \
559
 
                $(INITRAMFSTOOLS)/scripts/init-premount/mandos \
560
 
                $(INITRAMFSTOOLS)/scripts/local-premount/mandos \
561
 
                $(DRACUTMODULE)/ask-password-mandos.path \
562
 
                $(DRACUTMODULE)/ask-password-mandos.service \
563
 
                $(DRACUTMODULE)/module-setup.sh \
564
 
                $(DRACUTMODULE)/cmdline-mandos.sh \
565
 
                $(DRACUTMODULE)/password-agent \
 
325
                $(INITRAMFSTOOLS)/scripts/local-top/mandos \
 
326
                $(MANDIR)/man8/plugin-runner.8mandos.gz \
566
327
                $(MANDIR)/man8/mandos-keygen.8.gz \
567
 
                $(MANDIR)/man8/plugin-runner.8mandos.gz \
568
 
                $(MANDIR)/man8/mandos-client.8mandos.gz
569
328
                $(MANDIR)/man8/password-prompt.8mandos.gz \
570
329
                $(MANDIR)/man8/usplash.8mandos.gz \
571
330
                $(MANDIR)/man8/splashy.8mandos.gz \
572
331
                $(MANDIR)/man8/askpass-fifo.8mandos.gz \
573
 
                $(MANDIR)/man8/plymouth.8mandos.gz \
574
 
                $(MANDIR)/man8/password-agent.8mandos.gz \
575
 
        -rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
576
 
                 $(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
577
 
        if command -v update-initramfs >/dev/null; then \
578
 
            update-initramfs -k all -u; \
579
 
        elif command -v dracut >/dev/null; then \
580
 
            for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
581
 
                test -w "$$initrd" && dracut --force "$$initrd"; \
582
 
            done; \
583
 
        fi
 
332
                $(MANDIR)/man8/mandos-client.8mandos.gz
 
333
        -rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
 
334
                 $(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
 
335
        update-initramfs -k all -u
584
336
 
585
337
purge: purge-server purge-client
586
338
 
587
339
purge-server: uninstall-server
588
340
        -rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
589
 
                $(DESTDIR)/etc/dbus-1/system.d/mandos.conf
590
341
                $(DESTDIR)/etc/default/mandos \
591
342
                $(DESTDIR)/etc/init.d/mandos \
592
 
                $(SYSTEMD)/mandos.service \
593
 
                $(DESTDIR)/run/mandos.pid \
594
343
                $(DESTDIR)/var/run/mandos.pid
595
344
        -rmdir $(CONFDIR)
596
345
 
597
346
purge-client: uninstall-client
598
 
        -shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
 
347
        -shred --remove $(KEYDIR)/seckey.txt
599
348
        -rm --force $(CONFDIR)/plugin-runner.conf \
600
 
                $(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
601
 
                $(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
 
349
                $(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
602
350
        -rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)