To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 541
- compare with another revision
- download diff
- download tarball
- view history from revision 541
- Committer: Teddy Hogeborn
- Date: 2011-12-31 20:07:11 UTC
- mfrom: (535.1.9 wireless-network-hook)
- Revision ID: teddy@recompile.se-20111231200711-6dli3r8drftem57r
Merge new wireless network hook. Fix bridge network hook to use
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
- files added:
- initramfs-tools-hook-conf
- files removed:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- plugin-helpers
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=1 -Wextra -Wfloat-equal -Wundef -Wshadow \
6
4
-Wunsafe-loop-optimizations -Wpointer-arith \
7
5
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-fstack-protector-all -fPIC
33
CPPFLAGS+=-D_FORTIFY_SOURCE=3
34
LINK_FORTIFY_LD:=-z relro -z now
35
LINK_FORTIFY:=
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://www.kernel.org/doc/man-pages/online/pages/man7/feature_test_macros.7.html>
12
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
13
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
14
LINK_FORTIFY_LD=-z relro -z now
15
LINK_FORTIFY=
36
16
37
17
# If BROKEN_PIE is set, do not build with -pie
38
18
ifndef BROKEN_PIE
40
20
LINK_FORTIFY += -pie
41
21
endif
42
22
#COVERAGE=--coverage
43
OPTIMIZE:=-Os -fno-strict-aliasing
44
LANGUAGE:=-std=gnu11
45
CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64
46
htmldir:=man
47
version:=1.8.17
48
SED:=sed
49
PKG_CONFIG?=pkg-config
50
51
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
52
|| getent passwd nobody || echo 65534)))
53
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
54
|| getent group nogroup || echo 65534)))
55
56
LINUXVERSION:=$(shell uname --kernel-release)
23
OPTIMIZE=-Os
24
LANGUAGE=-std=gnu99
25
htmldir=man
26
version=1.4.1
27
SED=sed
28
29
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
30
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nobody || echo 65534)))
57
31
58
32
## Use these settings for a traditional /usr/local install
59
# PREFIX:=$(DESTDIR)/usr/local
60
# BINDIR:=$(PREFIX)/sbin
61
# CONFDIR:=$(DESTDIR)/etc/mandos
62
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
63
# MANDIR:=$(PREFIX)/man
64
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
65
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
66
# STATEDIR:=$(DESTDIR)/var/lib/mandos
67
# LIBDIR:=$(PREFIX)/lib
68
# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d
33
# PREFIX=$(DESTDIR)/usr/local
34
# CONFDIR=$(DESTDIR)/etc/mandos
35
# KEYDIR=$(DESTDIR)/etc/mandos/keys
36
# MANDIR=$(PREFIX)/man
37
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
38
# STATEDIR=$(DESTDIR)/var/lib/mandos
69
39
##
70
40
71
41
## These settings are for a package-type install
72
PREFIX:=$(DESTDIR)/usr
73
BINDIR:=$(PREFIX)/sbin
74
CONFDIR:=$(DESTDIR)/etc/mandos
75
KEYDIR:=$(DESTDIR)/etc/keys/mandos
76
MANDIR:=$(PREFIX)/share/man
77
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
78
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
79
STATEDIR:=$(DESTDIR)/var/lib/mandos
80
LIBDIR:=$(shell \
81
for d in \
82
"/usr/lib/`dpkg-architecture \
83
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
84
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
85
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
86
echo "$(DESTDIR)$$d"; \
87
break; \
88
fi; \
89
done)
90
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
42
PREFIX=$(DESTDIR)/usr
43
CONFDIR=$(DESTDIR)/etc/mandos
44
KEYDIR=$(DESTDIR)/etc/keys/mandos
45
MANDIR=$(PREFIX)/share/man
46
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
47
STATEDIR=$(DESTDIR)/var/lib/mandos
91
48
##
92
49
93
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
--variable=systemdsystemunitdir)
95
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
--variable=tmpfilesdir)
97
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
98
--variable=sysusersdir)
99
100
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
101
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
102
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
103
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
104
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
105
|| gpgme-config --cflags; getconf LFS_CFLAGS)
106
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
107
|| gpgme-config --libs; getconf LFS_LIBS; \
50
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
51
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
52
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
53
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
54
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
55
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
108
56
getconf LFS_LDFLAGS)
109
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
110
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
111
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
112
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
113
57
114
58
# Do not change these two
115
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
116
$(LANGUAGE) -DVERSION='"$(version)"'
117
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
118
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
59
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
60
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
61
-DVERSION='"$(version)"'
62
LDFLAGS=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
119
63
120
64
# Commands to format a DocBook <refentry> document into a manual page
121
65
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
124
68
--param make.single.year.ranges 1 \
125
69
--param man.output.quietly 1 \
126
70
--param man.authors.section.enabled 0 \
127
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
71
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
128
72
$(notdir $<); \
129
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
130
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
131
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
132
$(notdir $@); fi >/dev/null)
73
$(MANPOST) $(notdir $@);\
74
LANG=en_US.UTF-8 MANWIDTH=80 man --warnings --encoding=UTF-8 \
75
--local-file $(notdir $@) >/dev/null)
76
# DocBook-to-man post-processing to fix a '\n' escape bug
77
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
133
78
134
79
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
135
80
--param make.year.ranges 1 \
141
86
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
142
87
$<; $(HTMLPOST) $@)
143
88
# Fix citerefentry links
144
HTMLPOST:=$(SED) --in-place \
89
HTMLPOST=$(SED) --in-place \
145
90
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
146
91
147
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
92
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
148
93
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
149
94
plugins.d/plymouth
150
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
151
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
152
$(PLUGIN_HELPERS)
153
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
154
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
95
CPROGS=plugin-runner $(PLUGINS)
96
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
97
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
155
98
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
156
dracut-module/password-agent.8mandos \
157
99
plugins.d/mandos-client.8mandos \
158
100
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
159
101
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
160
102
plugins.d/plymouth.8mandos intro.8mandos
161
103
162
htmldocs:=$(addsuffix .xhtml,$(DOCS))
163
164
objects:=$(addsuffix .o,$(CPROGS))
165
166
.PHONY: all
104
htmldocs=$(addsuffix .xhtml,$(DOCS))
105
106
objects=$(addsuffix .o,$(CPROGS))
107
167
108
all: $(PROGS) mandos.lsm
168
109
169
.PHONY: doc
170
110
doc: $(DOCS)
171
111
172
.PHONY: html
173
112
html: $(htmldocs)
174
113
175
114
%.5: %.xml common.ent legalnotice.xml
234
173
overview.xml legalnotice.xml
235
174
$(DOCBOOKTOHTML)
236
175
237
dracut-module/password-agent.8mandos: \
238
dracut-module/password-agent.xml common.ent \
239
overview.xml legalnotice.xml
240
$(DOCBOOKTOMAN)
241
dracut-module/password-agent.8mandos.xhtml: \
242
dracut-module/password-agent.xml common.ent \
243
overview.xml legalnotice.xml
244
$(DOCBOOKTOHTML)
245
246
176
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
247
177
common.ent \
248
178
mandos-options.xml \
291
221
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
292
222
$@)
293
223
294
# Does the linker support the --no-warn-execstack option?
295
ifeq ($(shell echo 'int main(){}'|$(CC) --language=c /dev/stdin -o /dev/null -Xlinker --no-warn-execstack >/dev/null 2>&1 && echo yes),yes)
296
# These programs use nested functions, which uses an executable stack
297
plugin-runner: LDFLAGS += -Xlinker --no-warn-execstack
298
dracut-module/password-agent: LDFLAGS += -Xlinker --no-warn-execstack
299
plugins.d/password-prompt: LDFLAGS += -Xlinker --no-warn-execstack
300
plugins.d/mandos-client: LDFLAGS += -Xlinker --no-warn-execstack
301
plugins.d/plymouth: LDFLAGS += -Xlinker --no-warn-execstack
302
endif
303
304
# Need to add the GnuTLS, Avahi and GPGME libraries
305
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
306
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
307
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
308
) $(AVAHI_LIBS) $(GPGME_LIBS)
309
310
# Need to add the libnl-route library
311
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
312
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
313
314
# Need to add the GLib and pthread libraries
315
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
316
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
317
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
318
319
.PHONY: clean
224
plugins.d/mandos-client: plugins.d/mandos-client.c
225
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
226
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
227
228
.PHONY : all doc html clean distclean run-client run-server install \
229
install-server install-client uninstall uninstall-server \
230
uninstall-client purge purge-server purge-client
231
320
232
clean:
321
233
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
322
234
323
.PHONY: distclean
324
235
distclean: clean
325
.PHONY: mostlyclean
326
236
mostlyclean: clean
327
.PHONY: maintainer-clean
328
237
maintainer-clean: clean
329
238
-rm --force --recursive keydir confdir statedir
330
239
331
.PHONY: check
332
check: all
240
check: all
333
241
./mandos --check
334
./mandos-ctl --check
335
./mandos-keygen --version
336
./plugin-runner --version
337
./plugin-helpers/mandos-client-iprouteadddel --version
338
./dracut-module/password-agent --test
339
242
340
243
# Run the client with a local config and key
341
.PHONY: run-client
342
run-client: all keydir/seckey.txt keydir/pubkey.txt \
343
keydir/tls-privkey.pem keydir/tls-pubkey.pem
344
@echo '######################################################'
345
@echo '# The following error messages are harmless and can #'
346
@echo '# be safely ignored: #'
347
@echo '## From plugin-runner: #'
348
@echo '# setgid: Operation not permitted #'
349
@echo '# setuid: Operation not permitted #'
350
@echo '## From askpass-fifo: #'
351
@echo '# mkfifo: Permission denied #'
352
@echo '## From mandos-client: #'
353
@echo '# Failed to raise privileges: Operation not permi... #'
354
@echo '# Warning: network hook "*" exited with status * #'
355
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
356
@echo '# Failed to bring up interface "*": Operation not... #'
357
@echo '# #'
358
@echo '# (The messages are caused by not running as root, #'
359
@echo '# but you should NOT run "make run-client" as root #'
360
@echo '# unless you also unpacked and compiled Mandos as #'
361
@echo '# root, which is also NOT recommended.) #'
362
@echo '######################################################'
363
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
244
run-client: all keydir/seckey.txt keydir/pubkey.txt
245
@echo "###################################################################"
246
@echo "# The following error messages are harmless and can be safely #"
247
@echo "# ignored. The messages are caused by not running as root, but #"
248
@echo "# you should NOT run \"make run-client\" as root unless you also #"
249
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
250
@echo "# From plugin-runner: setuid: Operation not permitted #"
251
@echo "# From askpass-fifo: mkfifo: Permission denied #"
252
@echo "# From mandos-client: setuid: Operation not permitted #"
253
@echo "# seteuid: Operation not permitted #"
254
@echo "# klogctl: Operation not permitted #"
255
@echo "###################################################################"
364
256
./plugin-runner --plugin-dir=plugins.d \
365
--plugin-helper-dir=plugin-helpers \
366
257
--config-file=plugin-runner.conf \
367
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
368
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
258
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
369
259
$(CLIENTARGS)
370
260
371
261
# Used by run-client
372
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
262
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
373
263
install --directory keydir
374
264
./mandos-keygen --dir keydir --force
375
if ! [ -e keydir/tls-privkey.pem ]; then \
376
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
377
fi
378
if ! [ -e keydir/tls-pubkey.pem ]; then \
379
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
380
fi
381
265
382
266
# Run the server with a local config
383
.PHONY: run-server
384
run-server: confdir/mandos.conf confdir/clients.conf statedir
267
run-server: confdir/mandos.conf confdir/clients.conf
385
268
./mandos --debug --no-dbus --configdir=confdir \
386
269
--statedir=statedir $(SERVERARGS)
387
270
388
271
# Used by run-server
389
272
confdir/mandos.conf: mandos.conf
390
install -D --mode=u=rw,go=r $^ $@
391
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
392
install -D --mode=u=rw $< $@
273
install --directory confdir
274
install --mode=u=rw,go=r $^ $@
275
confdir/clients.conf: clients.conf keydir/seckey.txt
276
install --directory confdir
277
install --mode=u=rw $< $@
393
278
# Add a client password
394
./mandos-keygen --dir keydir --password --no-ssh >> $@
279
./mandos-keygen --dir keydir --password >> $@
395
280
statedir:
396
281
install --directory statedir
397
282
398
.PHONY: install
399
283
install: install-server install-client-nokey
400
284
401
.PHONY: install-html
402
285
install-html: html
403
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
286
install --directory $(htmldir)
287
install --mode=u=rw,go=r --target-directory=$(htmldir) \
404
288
$(htmldocs)
405
289
406
.PHONY: install-server
407
290
install-server: doc
408
if install --directory --mode=u=rwx --owner=$(USER) \
409
--group=$(GROUP) $(STATEDIR); then \
410
:; \
411
elif install --directory --mode=u=rwx $(STATEDIR); then \
412
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
413
fi
414
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
415
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
416
$(TMPFILES)/mandos.conf; \
417
fi
418
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
419
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
420
$(SYSUSERS)/mandos.conf; \
421
fi
422
install --directory $(BINDIR)
423
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) mandos
424
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
291
install --directory $(CONFDIR)
292
install --directory --mode=u=rwx --owner=$(USER) \
293
--group=$(GROUP) $(STATEDIR)
294
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
295
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
425
296
mandos-ctl
426
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
297
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
427
298
mandos-monitor
428
install --directory $(CONFDIR)
429
299
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
430
300
mandos.conf
431
301
install --mode=u=rw --target-directory=$(CONFDIR) \
432
302
clients.conf
433
install -D --mode=u=rw,go=r dbus-mandos.conf \
434
$(DBUSPOLICYDIR)/mandos.conf
435
install -D --mode=u=rwx,go=rx init.d-mandos \
303
install --mode=u=rw,go=r dbus-mandos.conf \
304
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
305
install --mode=u=rwx,go=rx init.d-mandos \
436
306
$(DESTDIR)/etc/init.d/mandos
437
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
438
install -D --mode=u=rw,go=r mandos.service \
439
$(SYSTEMD); \
440
fi
441
install -D --mode=u=rw,go=r default-mandos \
307
install --mode=u=rw,go=r default-mandos \
442
308
$(DESTDIR)/etc/default/mandos
443
309
if [ -z $(DESTDIR) ]; then \
444
310
update-rc.d mandos defaults 25 15;\
445
311
fi
446
install --directory $(MANDIR)/man8 $(MANDIR)/man5
447
312
gzip --best --to-stdout mandos.8 \
448
313
> $(MANDIR)/man8/mandos.8.gz
449
314
gzip --best --to-stdout mandos-monitor.8 \
454
319
> $(MANDIR)/man5/mandos.conf.5.gz
455
320
gzip --best --to-stdout mandos-clients.conf.5 \
456
321
> $(MANDIR)/man5/mandos-clients.conf.5.gz
457
gzip --best --to-stdout intro.8mandos \
458
> $(MANDIR)/man8/intro.8mandos.gz
459
322
460
.PHONY: install-client-nokey
461
323
install-client-nokey: all doc
324
install --directory $(PREFIX)/lib/mandos $(CONFDIR)
462
325
install --directory --mode=u=rwx $(KEYDIR) \
463
$(LIBDIR)/mandos/plugins.d \
464
$(LIBDIR)/mandos/plugin-helpers
465
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
466
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
467
$(SYSUSERS)/mandos-client.conf; \
468
fi
469
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
470
install --directory \
471
--mode=u=rwx "$(CONFDIR)/plugins.d" \
472
"$(CONFDIR)/plugin-helpers"; \
473
fi
474
install --directory --mode=u=rwx,go=rx \
326
$(PREFIX)/lib/mandos/plugins.d
327
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
328
install --mode=u=rwx \
329
--directory "$(CONFDIR)/plugins.d"; \
330
fi
331
install --mode=u=rwx,go=rx --directory \
475
332
"$(CONFDIR)/network-hooks.d"
476
333
install --mode=u=rwx,go=rx \
477
--target-directory=$(LIBDIR)/mandos plugin-runner
478
install --mode=u=rwx,go=rx \
479
--target-directory=$(LIBDIR)/mandos \
480
mandos-to-cryptroot-unlock
481
install --directory $(BINDIR)
482
install --mode=u=rwx,go=rx --target-directory=$(BINDIR) \
334
--target-directory=$(PREFIX)/lib/mandos plugin-runner
335
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
483
336
mandos-keygen
484
337
install --mode=u=rwx,go=rx \
485
--target-directory=$(LIBDIR)/mandos/plugins.d \
338
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
486
339
plugins.d/password-prompt
487
340
install --mode=u=rwxs,go=rx \
488
--target-directory=$(LIBDIR)/mandos/plugins.d \
341
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
489
342
plugins.d/mandos-client
490
343
install --mode=u=rwxs,go=rx \
491
--target-directory=$(LIBDIR)/mandos/plugins.d \
344
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
492
345
plugins.d/usplash
493
346
install --mode=u=rwxs,go=rx \
494
--target-directory=$(LIBDIR)/mandos/plugins.d \
347
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
495
348
plugins.d/splashy
496
349
install --mode=u=rwxs,go=rx \
497
--target-directory=$(LIBDIR)/mandos/plugins.d \
350
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
498
351
plugins.d/askpass-fifo
499
352
install --mode=u=rwxs,go=rx \
500
--target-directory=$(LIBDIR)/mandos/plugins.d \
353
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
501
354
plugins.d/plymouth
502
install --mode=u=rwx,go=rx \
503
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
504
plugin-helpers/mandos-client-iprouteadddel
505
install -D initramfs-tools-hook \
355
install initramfs-tools-hook \
506
356
$(INITRAMFSTOOLS)/hooks/mandos
507
install -D --mode=u=rw,go=r initramfs-tools-conf \
508
$(INITRAMFSTOOLS)/conf.d/mandos-conf
509
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
510
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
511
install -D initramfs-tools-script \
357
install --mode=u=rw,go=r initramfs-tools-hook-conf \
358
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
359
install initramfs-tools-script \
512
360
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
513
install -D initramfs-tools-script-stop \
514
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
515
install -D --mode=u=rw,go=r \
516
--target-directory=$(DRACUTMODULE) \
517
dracut-module/ask-password-mandos.path \
518
dracut-module/ask-password-mandos.service
519
install --mode=u=rwxs,go=rx \
520
--target-directory=$(DRACUTMODULE) \
521
dracut-module/module-setup.sh \
522
dracut-module/cmdline-mandos.sh \
523
dracut-module/password-agent
524
361
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
525
install --directory $(MANDIR)/man8
526
362
gzip --best --to-stdout mandos-keygen.8 \
527
363
> $(MANDIR)/man8/mandos-keygen.8.gz
528
364
gzip --best --to-stdout plugin-runner.8mandos \
539
375
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
540
376
gzip --best --to-stdout plugins.d/plymouth.8mandos \
541
377
> $(MANDIR)/man8/plymouth.8mandos.gz
542
gzip --best --to-stdout dracut-module/password-agent.8mandos \
543
> $(MANDIR)/man8/password-agent.8mandos.gz
544
378
545
.PHONY: install-client
546
379
install-client: install-client-nokey
547
380
# Post-installation stuff
548
-$(BINDIR)/mandos-keygen --dir "$(KEYDIR)"
549
if command -v update-initramfs >/dev/null; then \
550
update-initramfs -k all -u; \
551
elif command -v dracut >/dev/null; then \
552
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
553
if [ -w "$$initrd" ]; then \
554
chmod go-r "$$initrd"; \
555
dracut --force "$$initrd"; \
556
fi; \
557
done; \
558
fi
381
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
382
update-initramfs -k all -u
559
383
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
560
384
561
.PHONY: uninstall
562
385
uninstall: uninstall-server uninstall-client
563
386
564
.PHONY: uninstall-server
565
387
uninstall-server:
566
-rm --force $(BINDIR)/mandos \
567
$(BINDIR)/mandos-ctl \
568
$(BINDIR)/mandos-monitor \
388
-rm --force $(PREFIX)/sbin/mandos \
389
$(PREFIX)/sbin/mandos-ctl \
390
$(PREFIX)/sbin/mandos-monitor \
569
391
$(MANDIR)/man8/mandos.8.gz \
570
392
$(MANDIR)/man8/mandos-monitor.8.gz \
571
393
$(MANDIR)/man8/mandos-ctl.8.gz \
574
396
update-rc.d -f mandos remove
575
397
-rmdir $(CONFDIR)
576
398
577
.PHONY: uninstall-client
578
399
uninstall-client:
579
400
# Refuse to uninstall client if /etc/crypttab is explicitly configured
580
401
# to use it.
581
402
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
582
403
$(DESTDIR)/etc/crypttab
583
-rm --force $(BINDIR)/mandos-keygen \
584
$(LIBDIR)/mandos/plugin-runner \
585
$(LIBDIR)/mandos/plugins.d/password-prompt \
586
$(LIBDIR)/mandos/plugins.d/mandos-client \
587
$(LIBDIR)/mandos/plugins.d/usplash \
588
$(LIBDIR)/mandos/plugins.d/splashy \
589
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
590
$(LIBDIR)/mandos/plugins.d/plymouth \
404
-rm --force $(PREFIX)/sbin/mandos-keygen \
405
$(PREFIX)/lib/mandos/plugin-runner \
406
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
407
$(PREFIX)/lib/mandos/plugins.d/mandos-client \
408
$(PREFIX)/lib/mandos/plugins.d/usplash \
409
$(PREFIX)/lib/mandos/plugins.d/splashy \
410
$(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
411
$(PREFIX)/lib/mandos/plugins.d/plymouth \
591
412
$(INITRAMFSTOOLS)/hooks/mandos \
592
413
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
593
414
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
594
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
595
$(DRACUTMODULE)/ask-password-mandos.path \
596
$(DRACUTMODULE)/ask-password-mandos.service \
597
$(DRACUTMODULE)/module-setup.sh \
598
$(DRACUTMODULE)/cmdline-mandos.sh \
599
$(DRACUTMODULE)/password-agent \
600
415
$(MANDIR)/man8/mandos-keygen.8.gz \
601
416
$(MANDIR)/man8/plugin-runner.8mandos.gz \
602
417
$(MANDIR)/man8/mandos-client.8mandos.gz
605
420
$(MANDIR)/man8/splashy.8mandos.gz \
606
421
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
607
422
$(MANDIR)/man8/plymouth.8mandos.gz \
608
$(MANDIR)/man8/password-agent.8mandos.gz \
609
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
610
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
611
if command -v update-initramfs >/dev/null; then \
612
update-initramfs -k all -u; \
613
elif command -v dracut >/dev/null; then \
614
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
615
test -w "$$initrd" && dracut --force "$$initrd"; \
616
done; \
617
fi
423
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
424
$(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
425
update-initramfs -k all -u
618
426
619
.PHONY: purge
620
427
purge: purge-server purge-client
621
428
622
.PHONY: purge-server
623
429
purge-server: uninstall-server
624
430
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
625
431
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
626
432
$(DESTDIR)/etc/default/mandos \
627
433
$(DESTDIR)/etc/init.d/mandos \
628
$(DESTDIR)/run/mandos.pid \
629
434
$(DESTDIR)/var/run/mandos.pid
630
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
631
-rm --force -- $(SYSTEMD)/mandos.service; \
632
fi
633
435
-rmdir $(CONFDIR)
634
436
635
.PHONY: purge-client
636
437
purge-client: uninstall-client
637
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
438
-shred --remove $(KEYDIR)/seckey.txt
638
439
-rm --force $(CONFDIR)/plugin-runner.conf \
639
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
640
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
440
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
641
441
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0