To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 35
- compare with another revision
- download diff
- download tarball
- view history from revision 35
- Committer: Teddy Hogeborn
- Date: 2008-08-02 10:48:24 UTC
- Revision ID: teddy@fukt.bsnet.se-20080802104824-fx0miwp9o4g9r31e
* plugbasedclient.c (struct process): New fields "eof", "completed",
and "status".
(handle_sigchld): New function.
(main): Initialize "dir" to NULL to only closedir() it if necessary.
Move "process_list" to be a global variable to be accessible
by "handle_sigchld". Make "handle_sigchld" handle SIGCHLD.
Remove redundant check for NULL "dir". Free "filename" when
no longer used. Block SIGCHLD around fork()/exec().
Restore normal signals in child. Only loop while running
processes exist. Print process buffer when the process is
done and it has emitted EOF, not when it only emits EOF.
Remove processes from list which exit non-cleanly. In
cleaning up, closedir() if necessary. Bug fix: set next
pointer correctly when freeing process list.
* plugins.d/passprompt.c (main): Do not ignore SIGQUIT.
and "status".
(handle_sigchld): New function.
(main): Initialize "dir" to NULL to only closedir() it if necessary.
Move "process_list" to be a global variable to be accessible
by "handle_sigchld". Make "handle_sigchld" handle SIGCHLD.
Remove redundant check for NULL "dir". Free "filename" when
no longer used. Block SIGCHLD around fork()/exec().
Restore normal signals in child. Only loop while running
processes exist. Print process buffer when the process is
done and it has emitted EOF, not when it only emits EOF.
Remove processes from list which exit non-cleanly. In
cleaning up, closedir() if necessary. Bug fix: set next
pointer correctly when freeing process list.
* plugins.d/passprompt.c (main): Do not ignore SIGQUIT.
- files added:
- ca.pem
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/tests
- debian/upstream
- network-hooks.d
- plugin-helpers
- files renamed:
- plugin-runner.c => plugbasedclient.c
- plugins.d/mandos-client.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos.conf => server.conf
- mandos => server.py
- files modified:
- Makefile
added
removed
Makefile
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
6
-Wunsafe-loop-optimizations -Wpointer-arith \
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
35
36
# If BROKEN_PIE is set, do not build with -pie
37
ifndef BROKEN_PIE
38
FORTIFY += -fPIE
39
LINK_FORTIFY += -pie
40
endif
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs -Wswitch-default -Wswitch-enum -Wunused-parameter -Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow -Wunsafe-loop-optimizations -Wpointer-arith -Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings -Wconversion -Wstrict-prototypes -Wold-style-definition -Wpacked -Wnested-externs -Wunreachable-code -Winline -Wvolatile-register-var
2
DEBUG=-ggdb3
3
# For info about _FORTIFY_SOURCE, see
4
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
5
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
41
6
#COVERAGE=--coverage
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
htmldir:=man
45
version:=1.8.4
46
SED:=sed
47
48
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
49
|| getent passwd nobody || echo 65534)))
50
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
51
|| getent group nogroup || echo 65534)))
52
53
## Use these settings for a traditional /usr/local install
54
# PREFIX:=$(DESTDIR)/usr/local
55
# CONFDIR:=$(DESTDIR)/etc/mandos
56
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
57
# MANDIR:=$(PREFIX)/man
58
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
59
# STATEDIR:=$(DESTDIR)/var/lib/mandos
60
# LIBDIR:=$(PREFIX)/lib
61
##
62
63
## These settings are for a package-type install
64
PREFIX:=$(DESTDIR)/usr
65
CONFDIR:=$(DESTDIR)/etc/mandos
66
KEYDIR:=$(DESTDIR)/etc/keys/mandos
67
MANDIR:=$(PREFIX)/share/man
68
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
69
STATEDIR:=$(DESTDIR)/var/lib/mandos
70
LIBDIR:=$(shell \
71
for d in \
72
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
73
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
74
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
75
echo "$(DESTDIR)$$d"; \
76
break; \
77
fi; \
78
done)
79
##
80
81
SYSTEMD:=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
82
TMPFILES:=$(DESTDIR)$(shell pkg-config systemd --variable=tmpfilesdir)
83
84
GNUTLS_CFLAGS:=$(shell pkg-config --cflags-only-I gnutls)
85
GNUTLS_LIBS:=$(shell pkg-config --libs gnutls)
86
AVAHI_CFLAGS:=$(shell pkg-config --cflags-only-I avahi-core)
87
AVAHI_LIBS:=$(shell pkg-config --libs avahi-core)
88
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
89
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
90
getconf LFS_LDFLAGS)
91
LIBNL3_CFLAGS:=$(shell pkg-config --cflags-only-I libnl-route-3.0)
92
LIBNL3_LIBS:=$(shell pkg-config --libs libnl-route-3.0)
7
OPTIMIZE=-Os
8
LANGUAGE=-std=gnu99
93
9
94
10
# Do not change these two
95
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) \
96
$(OPTIMIZE) $(LANGUAGE) -DVERSION='"$(version)"'
97
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
98
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
99
100
# Commands to format a DocBook <refentry> document into a manual page
101
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
102
--param man.charmap.use.subset 0 \
103
--param make.year.ranges 1 \
104
--param make.single.year.ranges 1 \
105
--param man.output.quietly 1 \
106
--param man.authors.section.enabled 0 \
107
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
108
$(notdir $<); \
109
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
110
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
111
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
112
fi >/dev/null)
113
114
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
115
--param make.year.ranges 1 \
116
--param make.single.year.ranges 1 \
117
--param man.output.quietly 1 \
118
--param man.authors.section.enabled 0 \
119
--param citerefentry.link 1 \
120
--output $@ \
121
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
122
$<; $(HTMLPOST) $@)
123
# Fix citerefentry links
124
HTMLPOST:=$(SED) --in-place \
125
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
126
127
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
128
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
129
plugins.d/plymouth
130
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
131
CPROGS:=plugin-runner $(PLUGINS) $(PLUGIN_HELPERS)
132
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
133
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
134
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
135
plugins.d/mandos-client.8mandos \
136
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
137
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
138
plugins.d/plymouth.8mandos intro.8mandos
139
140
htmldocs:=$(addsuffix .xhtml,$(DOCS))
141
142
objects:=$(addsuffix .o,$(CPROGS))
143
144
all: $(PROGS) mandos.lsm
145
146
doc: $(DOCS)
147
148
html: $(htmldocs)
149
150
%.5: %.xml common.ent legalnotice.xml
151
$(DOCBOOKTOMAN)
152
%.5.xhtml: %.xml common.ent legalnotice.xml
153
$(DOCBOOKTOHTML)
154
155
%.8: %.xml common.ent legalnotice.xml
156
$(DOCBOOKTOMAN)
157
%.8.xhtml: %.xml common.ent legalnotice.xml
158
$(DOCBOOKTOHTML)
159
160
%.8mandos: %.xml common.ent legalnotice.xml
161
$(DOCBOOKTOMAN)
162
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
163
$(DOCBOOKTOHTML)
164
165
intro.8mandos: intro.xml common.ent legalnotice.xml
166
$(DOCBOOKTOMAN)
167
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
168
$(DOCBOOKTOHTML)
169
170
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
171
legalnotice.xml
172
$(DOCBOOKTOMAN)
173
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
174
overview.xml legalnotice.xml
175
$(DOCBOOKTOHTML)
176
177
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
178
legalnotice.xml
179
$(DOCBOOKTOMAN)
180
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
181
legalnotice.xml
182
$(DOCBOOKTOHTML)
183
184
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
185
legalnotice.xml
186
$(DOCBOOKTOMAN)
187
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
188
legalnotice.xml
189
$(DOCBOOKTOHTML)
190
191
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
192
legalnotice.xml
193
$(DOCBOOKTOMAN)
194
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
195
legalnotice.xml
196
$(DOCBOOKTOHTML)
197
198
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
199
legalnotice.xml
200
$(DOCBOOKTOMAN)
201
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
202
legalnotice.xml
203
$(DOCBOOKTOHTML)
204
205
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
206
legalnotice.xml
207
$(DOCBOOKTOMAN)
208
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
209
overview.xml legalnotice.xml
210
$(DOCBOOKTOHTML)
211
212
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
213
common.ent \
214
mandos-options.xml \
215
overview.xml legalnotice.xml
216
$(DOCBOOKTOMAN)
217
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
218
common.ent \
219
mandos-options.xml \
220
overview.xml legalnotice.xml
221
$(DOCBOOKTOHTML)
222
223
# Update all these files with version number $(version)
224
common.ent: Makefile
225
$(strip $(SED) --in-place \
226
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
227
$@)
228
229
mandos: Makefile
230
$(strip $(SED) --in-place \
231
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
232
$@)
233
234
mandos-keygen: Makefile
235
$(strip $(SED) --in-place \
236
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
237
$@)
238
239
mandos-ctl: Makefile
240
$(strip $(SED) --in-place \
241
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
242
$@)
243
244
mandos-monitor: Makefile
245
$(strip $(SED) --in-place \
246
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
247
$@)
248
249
mandos.lsm: Makefile
250
$(strip $(SED) --in-place \
251
--expression='s/^\(Version:\).*/\1\t$(version)/' \
252
$@)
253
$(strip $(SED) --in-place \
254
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
255
$@)
256
$(strip $(SED) --in-place \
257
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
258
$@)
259
260
# Need to add the GnuTLS, Avahi and GPGME libraries
261
plugins.d/mandos-client: plugins.d/mandos-client.c
262
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
263
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
264
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
265
) $(LDLIBS) -o $@
266
267
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
268
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
269
) $(LOADLIBES) $(LDLIBS) -o $@
270
271
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
272
check run-client run-server install install-html \
273
install-server install-client-nokey install-client uninstall \
274
uninstall-server uninstall-client purge purge-server \
275
purge-client
276
11
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) $(LANGUAGE)
12
LDFLAGS=$(COVERAGE)
13
14
PROGS=plugbasedclient plugins.d/mandosclient plugins.d/passprompt
15
16
objects=$(shell for p in $(PROGS); do echo $${p}.o; done)
17
18
all: $(PROGS)
19
20
plugbasedclient: plugbasedclient.o
21
$(LINK.o) -lgnutls $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
22
23
plugins.d/mandosclient: plugins.d/mandosclient.o
24
$(LINK.o) -lgnutls -lavahi-core -lgpgme $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
25
26
plugins.d/passprompt: plugins.d/passprompt.o
27
$(LINK.o) $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
28
29
.PHONY : clean
277
30
clean:
278
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
279
280
distclean: clean
281
mostlyclean: clean
282
maintainer-clean: clean
283
-rm --force --recursive keydir confdir statedir
284
285
check: all
286
./mandos --check
287
./mandos-ctl --check
288
./mandos-keygen --version
289
./plugin-runner --version
290
./plugin-helpers/mandos-client-iprouteadddel --version
291
292
# Run the client with a local config and key
293
run-client: all keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem
294
@echo "###################################################################"
295
@echo "# The following error messages are harmless and can be safely #"
296
@echo "# ignored: #"
297
@echo "# From plugin-runner: setgid: Operation not permitted #"
298
@echo "# setuid: Operation not permitted #"
299
@echo "# From askpass-fifo: mkfifo: Permission denied #"
300
@echo "# From mandos-client: #"
301
@echo "# Failed to raise privileges: Operation not permitted #"
302
@echo "# Warning: network hook \"*\" exited with status * #"
303
@echo "# #"
304
@echo "# (The messages are caused by not running as root, but you should #"
305
@echo "# NOT run \"make run-client\" as root unless you also unpacked and #"
306
@echo "# compiled Mandos as root, which is also NOT recommended.) #"
307
@echo "###################################################################"
308
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
309
./plugin-runner --plugin-dir=plugins.d \
310
--plugin-helper-dir=plugin-helpers \
311
--config-file=plugin-runner.conf \
312
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
313
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
314
$(CLIENTARGS)
315
316
# Used by run-client
317
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
318
install --directory keydir
319
./mandos-keygen --dir keydir --force
320
321
# Run the server with a local config
322
run-server: confdir/mandos.conf confdir/clients.conf statedir
323
./mandos --debug --no-dbus --configdir=confdir \
324
--statedir=statedir $(SERVERARGS)
325
326
# Used by run-server
327
confdir/mandos.conf: mandos.conf
328
install --directory confdir
329
install --mode=u=rw,go=r $^ $@
330
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
331
install --directory confdir
332
install --mode=u=rw $< $@
333
# Add a client password
334
./mandos-keygen --dir keydir --password --no-ssh >> $@
335
statedir:
336
install --directory statedir
337
338
install: install-server install-client-nokey
339
340
install-html: html
341
install --directory $(htmldir)
342
install --mode=u=rw,go=r --target-directory=$(htmldir) \
343
$(htmldocs)
344
345
install-server: doc
346
install --directory $(CONFDIR)
347
if install --directory --mode=u=rwx --owner=$(USER) \
348
--group=$(GROUP) $(STATEDIR); then \
349
:; \
350
elif install --directory --mode=u=rwx $(STATEDIR); then \
351
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
352
fi
353
if [ "$(TMPFILES)" != "$(DESTDIR)" -a -d "$(TMPFILES)" ]; then \
354
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
355
$(TMPFILES)/mandos.conf; \
356
fi
357
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
358
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
359
mandos-ctl
360
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
361
mandos-monitor
362
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
363
mandos.conf
364
install --mode=u=rw --target-directory=$(CONFDIR) \
365
clients.conf
366
install --mode=u=rw,go=r dbus-mandos.conf \
367
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
368
install --mode=u=rwx,go=rx init.d-mandos \
369
$(DESTDIR)/etc/init.d/mandos
370
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
371
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
372
fi
373
install --mode=u=rw,go=r default-mandos \
374
$(DESTDIR)/etc/default/mandos
375
if [ -z $(DESTDIR) ]; then \
376
update-rc.d mandos defaults 25 15;\
377
fi
378
gzip --best --to-stdout mandos.8 \
379
> $(MANDIR)/man8/mandos.8.gz
380
gzip --best --to-stdout mandos-monitor.8 \
381
> $(MANDIR)/man8/mandos-monitor.8.gz
382
gzip --best --to-stdout mandos-ctl.8 \
383
> $(MANDIR)/man8/mandos-ctl.8.gz
384
gzip --best --to-stdout mandos.conf.5 \
385
> $(MANDIR)/man5/mandos.conf.5.gz
386
gzip --best --to-stdout mandos-clients.conf.5 \
387
> $(MANDIR)/man5/mandos-clients.conf.5.gz
388
gzip --best --to-stdout intro.8mandos \
389
> $(MANDIR)/man8/intro.8mandos.gz
390
391
install-client-nokey: all doc
392
install --directory $(LIBDIR)/mandos $(CONFDIR)
393
install --directory --mode=u=rwx $(KEYDIR) \
394
$(LIBDIR)/mandos/plugins.d \
395
$(LIBDIR)/mandos/plugin-helpers
396
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
397
install --mode=u=rwx \
398
--directory "$(CONFDIR)/plugins.d" \
399
"$(CONFDIR)/plugin-helpers"; \
400
fi
401
install --mode=u=rwx,go=rx --directory \
402
"$(CONFDIR)/network-hooks.d"
403
install --mode=u=rwx,go=rx \
404
--target-directory=$(LIBDIR)/mandos plugin-runner
405
install --mode=u=rwx,go=rx \
406
--target-directory=$(LIBDIR)/mandos mandos-to-cryptroot-unlock
407
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
408
mandos-keygen
409
install --mode=u=rwx,go=rx \
410
--target-directory=$(LIBDIR)/mandos/plugins.d \
411
plugins.d/password-prompt
412
install --mode=u=rwxs,go=rx \
413
--target-directory=$(LIBDIR)/mandos/plugins.d \
414
plugins.d/mandos-client
415
install --mode=u=rwxs,go=rx \
416
--target-directory=$(LIBDIR)/mandos/plugins.d \
417
plugins.d/usplash
418
install --mode=u=rwxs,go=rx \
419
--target-directory=$(LIBDIR)/mandos/plugins.d \
420
plugins.d/splashy
421
install --mode=u=rwxs,go=rx \
422
--target-directory=$(LIBDIR)/mandos/plugins.d \
423
plugins.d/askpass-fifo
424
install --mode=u=rwxs,go=rx \
425
--target-directory=$(LIBDIR)/mandos/plugins.d \
426
plugins.d/plymouth
427
install --mode=u=rwx,go=rx \
428
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
429
plugin-helpers/mandos-client-iprouteadddel
430
install initramfs-tools-hook \
431
$(INITRAMFSTOOLS)/hooks/mandos
432
install --mode=u=rw,go=r initramfs-tools-conf \
433
$(INITRAMFSTOOLS)/conf.d/mandos-conf
434
install --mode=u=rw,go=r initramfs-tools-conf-hook \
435
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
436
install initramfs-tools-script \
437
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
438
install initramfs-tools-script-stop \
439
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
440
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
441
gzip --best --to-stdout mandos-keygen.8 \
442
> $(MANDIR)/man8/mandos-keygen.8.gz
443
gzip --best --to-stdout plugin-runner.8mandos \
444
> $(MANDIR)/man8/plugin-runner.8mandos.gz
445
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
446
> $(MANDIR)/man8/mandos-client.8mandos.gz
447
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
448
> $(MANDIR)/man8/password-prompt.8mandos.gz
449
gzip --best --to-stdout plugins.d/usplash.8mandos \
450
> $(MANDIR)/man8/usplash.8mandos.gz
451
gzip --best --to-stdout plugins.d/splashy.8mandos \
452
> $(MANDIR)/man8/splashy.8mandos.gz
453
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
454
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
455
gzip --best --to-stdout plugins.d/plymouth.8mandos \
456
> $(MANDIR)/man8/plymouth.8mandos.gz
457
458
install-client: install-client-nokey
459
# Post-installation stuff
460
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
461
update-initramfs -k all -u
462
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
463
464
uninstall: uninstall-server uninstall-client
465
466
uninstall-server:
467
-rm --force $(PREFIX)/sbin/mandos \
468
$(PREFIX)/sbin/mandos-ctl \
469
$(PREFIX)/sbin/mandos-monitor \
470
$(MANDIR)/man8/mandos.8.gz \
471
$(MANDIR)/man8/mandos-monitor.8.gz \
472
$(MANDIR)/man8/mandos-ctl.8.gz \
473
$(MANDIR)/man5/mandos.conf.5.gz \
474
$(MANDIR)/man5/mandos-clients.conf.5.gz
475
update-rc.d -f mandos remove
476
-rmdir $(CONFDIR)
477
478
uninstall-client:
479
# Refuse to uninstall client if /etc/crypttab is explicitly configured
480
# to use it.
481
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
482
$(DESTDIR)/etc/crypttab
483
-rm --force $(PREFIX)/sbin/mandos-keygen \
484
$(LIBDIR)/mandos/plugin-runner \
485
$(LIBDIR)/mandos/plugins.d/password-prompt \
486
$(LIBDIR)/mandos/plugins.d/mandos-client \
487
$(LIBDIR)/mandos/plugins.d/usplash \
488
$(LIBDIR)/mandos/plugins.d/splashy \
489
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
490
$(LIBDIR)/mandos/plugins.d/plymouth \
491
$(INITRAMFSTOOLS)/hooks/mandos \
492
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
493
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
494
$(MANDIR)/man8/mandos-keygen.8.gz \
495
$(MANDIR)/man8/plugin-runner.8mandos.gz \
496
$(MANDIR)/man8/mandos-client.8mandos.gz
497
$(MANDIR)/man8/password-prompt.8mandos.gz \
498
$(MANDIR)/man8/usplash.8mandos.gz \
499
$(MANDIR)/man8/splashy.8mandos.gz \
500
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
501
$(MANDIR)/man8/plymouth.8mandos.gz \
502
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
503
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
504
update-initramfs -k all -u
505
506
purge: purge-server purge-client
507
508
purge-server: uninstall-server
509
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
510
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
511
$(DESTDIR)/etc/default/mandos \
512
$(DESTDIR)/etc/init.d/mandos \
513
$(SYSTEMD)/mandos.service \
514
$(DESTDIR)/run/mandos.pid \
515
$(DESTDIR)/var/run/mandos.pid
516
-rmdir $(CONFDIR)
517
518
purge-client: uninstall-client
519
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
520
-rm --force $(CONFDIR)/plugin-runner.conf \
521
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
522
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
523
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
31
-rm -f $(PROGS) $(objects) core
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0