To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 78
- compare with another revision
- download diff
- download tarball
- view history from revision 78
- Committer: Teddy Hogeborn
- Date: 2008-08-16 03:29:08 UTC
- Revision ID: teddy@fukt.bsnet.se-20080816032908-ihw7c05r2mnyk389
Add feature to specify custom environment variables for plugins.
* plugin-runner.c (plugin): New members "environ" and "envc" to
contain possible custom environment.
(getplugin): Return NULL on failure instead of doing exit(); all
callers changed.
(add_to_char_array): New helper function for "add_argument" and
"add_environment".
(addargument): Renamed to "add_argument". Return bool. Call
"add_to_char_array" to actually do things.
(add_environment): New; analogous to "add_argument".
(addcustomargument): Renamed to "add_to_argv" to avoid confusion
with "add_argument".
(main): New options "--global-envs" and "--envs-for" to specify
custom environment for plugins. Print environment for
plugins in debug mode. Use asprintf instead of strcpy and
strcat. Use execve() for plugins with custom environments.
Free environment for plugin when freeing plugin list.
* plugin-runner.c (plugin): New members "environ" and "envc" to
contain possible custom environment.
(getplugin): Return NULL on failure instead of doing exit(); all
callers changed.
(add_to_char_array): New helper function for "add_argument" and
"add_environment".
(addargument): Renamed to "add_argument". Return bool. Call
"add_to_char_array" to actually do things.
(add_environment): New; analogous to "add_argument".
(addcustomargument): Renamed to "add_to_argv" to avoid confusion
with "add_argument".
(main): New options "--global-envs" and "--envs-for" to specify
custom environment for plugins. Print environment for
plugins in debug mode. Use asprintf instead of strcpy and
strcat. Use execve() for plugins with custom environments.
Free environment for plugin when freeing plugin list.
- files added:
- initramfs-tools-hook-conf
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- Makefile
added
removed
Makefile
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
6
4
-Wunsafe-loop-optimizations -Wpointer-arith \
7
5
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
35
36
# If BROKEN_PIE is set, do not build with -pie
37
ifndef BROKEN_PIE
38
FORTIFY += -fPIE
39
LINK_FORTIFY += -pie
40
endif
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Wunreachable-code -Winline \
8
-Wvolatile-register-var
9
DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
41
13
#COVERAGE=--coverage
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
FEATURES:=-D_FILE_OFFSET_BITS=64
45
htmldir:=man
46
version:=1.8.9
47
SED:=sed
48
PKG_CONFIG?=pkg-config
49
50
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
|| getent passwd nobody || echo 65534)))
52
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
|| getent group nogroup || echo 65534)))
54
55
LINUXVERSION:=$(shell uname --kernel-release)
56
57
## Use these settings for a traditional /usr/local install
58
# PREFIX:=$(DESTDIR)/usr/local
59
# CONFDIR:=$(DESTDIR)/etc/mandos
60
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
# MANDIR:=$(PREFIX)/man
62
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
# LIBDIR:=$(PREFIX)/lib
66
##
67
68
## These settings are for a package-type install
69
PREFIX:=$(DESTDIR)/usr
70
CONFDIR:=$(DESTDIR)/etc/mandos
71
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
MANDIR:=$(PREFIX)/share/man
73
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
LIBDIR:=$(shell \
77
for d in \
78
"/usr/lib/`dpkg-architecture \
79
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
80
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
81
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
82
echo "$(DESTDIR)$$d"; \
83
break; \
84
fi; \
85
done)
86
##
87
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
--variable=systemdsystemunitdir)
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
--variable=tmpfilesdir)
92
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
93
--variable=sysusersdir)
94
95
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
96
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
97
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
98
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
99
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
100
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
101
getconf LFS_LDFLAGS)
102
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
103
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
104
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
105
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
14
OPTIMIZE=-Os
15
LANGUAGE=-std=gnu99
16
# PREFIX=/usr/local
17
PREFIX=/usr
18
# CONFDIR=/usr/local/lib/mandos
19
CONFDIR=/etc/mandos
20
# MANDIR=/usr/local/man
21
MANDIR=/usr/share/man
106
22
107
23
# Do not change these two
108
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
109
$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
110
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
111
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
24
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) $(LANGUAGE)
25
LDFLAGS=$(COVERAGE)
112
26
113
# Commands to format a DocBook <refentry> document into a manual page
114
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
27
DOCBOOKTOMAN=xsltproc --nonet \
115
28
--param man.charmap.use.subset 0 \
116
29
--param make.year.ranges 1 \
117
30
--param make.single.year.ranges 1 \
118
31
--param man.output.quietly 1 \
119
--param man.authors.section.enabled 0 \
120
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
121
$(notdir $<); \
122
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
123
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
124
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
125
$(notdir $@); fi >/dev/null)
126
127
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
128
--param make.year.ranges 1 \
129
--param make.single.year.ranges 1 \
130
--param man.output.quietly 1 \
131
--param man.authors.section.enabled 0 \
132
--param citerefentry.link 1 \
133
--output $@ \
134
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
135
$<; $(HTMLPOST) $@)
136
# Fix citerefentry links
137
HTMLPOST:=$(SED) --in-place \
138
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
139
140
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
141
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
142
plugins.d/plymouth
143
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
144
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
145
$(PLUGIN_HELPERS)
146
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
147
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
148
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
149
dracut-module/password-agent.8mandos \
150
plugins.d/mandos-client.8mandos \
151
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
152
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
153
plugins.d/plymouth.8mandos intro.8mandos
154
155
htmldocs:=$(addsuffix .xhtml,$(DOCS))
156
157
objects:=$(addsuffix .o,$(CPROGS))
158
159
all: $(PROGS) mandos.lsm
32
--param man.authors.section.enabled 0
33
34
PLUGINS=plugins.d/password-prompt plugins.d/password-request
35
PROGS=plugin-runner $(PLUGINS)
36
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
37
plugins.d/password-request.8mandos \
38
plugins.d/password-prompt.8mandos mandos.conf.5 \
39
mandos-clients.conf.5
40
41
objects=$(shell for p in $(PROGS); do echo $${p}.o; done)
42
43
all: $(PROGS)
160
44
161
45
doc: $(DOCS)
162
46
163
html: $(htmldocs)
164
165
%.5: %.xml common.ent legalnotice.xml
166
$(DOCBOOKTOMAN)
167
%.5.xhtml: %.xml common.ent legalnotice.xml
168
$(DOCBOOKTOHTML)
169
170
%.8: %.xml common.ent legalnotice.xml
171
$(DOCBOOKTOMAN)
172
%.8.xhtml: %.xml common.ent legalnotice.xml
173
$(DOCBOOKTOHTML)
174
175
%.8mandos: %.xml common.ent legalnotice.xml
176
$(DOCBOOKTOMAN)
177
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
178
$(DOCBOOKTOHTML)
179
180
intro.8mandos: intro.xml common.ent legalnotice.xml
181
$(DOCBOOKTOMAN)
182
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
183
$(DOCBOOKTOHTML)
184
185
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
186
legalnotice.xml
187
$(DOCBOOKTOMAN)
188
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
189
overview.xml legalnotice.xml
190
$(DOCBOOKTOHTML)
191
192
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
193
legalnotice.xml
194
$(DOCBOOKTOMAN)
195
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
196
legalnotice.xml
197
$(DOCBOOKTOHTML)
198
199
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
200
legalnotice.xml
201
$(DOCBOOKTOMAN)
202
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
203
legalnotice.xml
204
$(DOCBOOKTOHTML)
205
206
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
207
legalnotice.xml
208
$(DOCBOOKTOMAN)
209
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
210
legalnotice.xml
211
$(DOCBOOKTOHTML)
212
213
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
214
legalnotice.xml
215
$(DOCBOOKTOMAN)
216
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
217
legalnotice.xml
218
$(DOCBOOKTOHTML)
219
220
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
221
legalnotice.xml
222
$(DOCBOOKTOMAN)
223
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
224
overview.xml legalnotice.xml
225
$(DOCBOOKTOHTML)
226
227
dracut-module/password-agent.8mandos: \
228
dracut-module/password-agent.xml common.ent \
229
overview.xml legalnotice.xml
230
$(DOCBOOKTOMAN)
231
dracut-module/password-agent.8mandos.xhtml: \
232
dracut-module/password-agent.xml common.ent \
233
overview.xml legalnotice.xml
234
$(DOCBOOKTOHTML)
235
236
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
237
common.ent \
238
mandos-options.xml \
239
overview.xml legalnotice.xml
240
$(DOCBOOKTOMAN)
241
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
242
common.ent \
243
mandos-options.xml \
244
overview.xml legalnotice.xml
245
$(DOCBOOKTOHTML)
246
247
# Update all these files with version number $(version)
248
common.ent: Makefile
249
$(strip $(SED) --in-place \
250
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
251
$@)
252
253
mandos: Makefile
254
$(strip $(SED) --in-place \
255
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
256
$@)
257
258
mandos-keygen: Makefile
259
$(strip $(SED) --in-place \
260
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
261
$@)
262
263
mandos-ctl: Makefile
264
$(strip $(SED) --in-place \
265
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
266
$@)
267
268
mandos-monitor: Makefile
269
$(strip $(SED) --in-place \
270
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
271
$@)
272
273
mandos.lsm: Makefile
274
$(strip $(SED) --in-place \
275
--expression='s/^\(Version:\).*/\1\t$(version)/' \
276
$@)
277
$(strip $(SED) --in-place \
278
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
279
$@)
280
$(strip $(SED) --in-place \
281
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
282
$@)
283
284
# Need to add the GnuTLS, Avahi and GPGME libraries
285
plugins.d/mandos-client: plugins.d/mandos-client.c
286
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
287
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
288
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
289
) $(LDLIBS) -o $@
290
291
# Need to add the libnl-route library
292
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
293
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
294
) $(LOADLIBES) $(LDLIBS) -o $@
295
296
# Need to add the GLib and pthread libraries
297
dracut-module/password-agent: dracut-module/password-agent.c
298
$(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
299
) $(LOADLIBES) $(LDLIBS) -o $@
300
301
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
302
check run-client run-server install install-html \
303
install-server install-client-nokey install-client uninstall \
304
uninstall-server uninstall-client purge purge-server \
305
purge-client
47
%.5: %.xml
48
cd $(dir $^); $(DOCBOOKTOMAN) $(notdir $^)
49
50
%.8: %.xml
51
cd $(dir $^); $(DOCBOOKTOMAN) $(notdir $^)
52
53
%.8mandos: %.xml
54
cd $(dir $^); $(DOCBOOKTOMAN) $(notdir $^)
55
56
plugin-runner: plugin-runner.o
57
$(LINK.o) -lgnutls $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
58
59
plugins.d/password-request: plugins.d/password-request.o
60
$(LINK.o) -lgnutls -lavahi-core -lgpgme $(COMMON) $^ \
61
$(LOADLIBES) $(LDLIBS) -o $@
62
63
plugins.d/password-prompt: plugins.d/password-prompt.o
64
$(LINK.o) $(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
65
66
.PHONY : all clean distclean run-client run-server install \
67
install-server install-client uninstall uninstall-server \
68
uninstall-client purge purge-server purge-client
306
69
307
70
clean:
308
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
71
-rm --force $(PROGS) $(objects) $(DOCS) core
309
72
310
73
distclean: clean
311
74
mostlyclean: clean
312
75
maintainer-clean: clean
313
-rm --force --recursive keydir confdir statedir
76
-rm --force --recursive keydir
314
77
315
check: all
78
check:
316
79
./mandos --check
317
./mandos-ctl --check
318
./mandos-keygen --version
319
./plugin-runner --version
320
./plugin-helpers/mandos-client-iprouteadddel --version
321
./dracut-module/password-agent --test
322
80
323
# Run the client with a local config and key
324
run-client: all keydir/seckey.txt keydir/pubkey.txt \
325
keydir/tls-privkey.pem keydir/tls-pubkey.pem
326
@echo '######################################################'
327
@echo '# The following error messages are harmless and can #'
328
@echo '# be safely ignored: #'
329
@echo '## From plugin-runner: #'
330
@echo '# setgid: Operation not permitted #'
331
@echo '# setuid: Operation not permitted #'
332
@echo '## From askpass-fifo: #'
333
@echo '# mkfifo: Permission denied #'
334
@echo '## From mandos-client: #'
335
@echo '# Failed to raise privileges: Operation not permi... #'
336
@echo '# Warning: network hook "*" exited with status * #'
337
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
338
@echo '# Failed to bring up interface "*": Operation not... #'
339
@echo '# #'
340
@echo '# (The messages are caused by not running as root, #'
341
@echo '# but you should NOT run "make run-client" as root #'
342
@echo '# unless you also unpacked and compiled Mandos as #'
343
@echo '# root, which is also NOT recommended.) #'
344
@echo '######################################################'
345
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
81
run-client: all
82
-mkdir keydir
83
-./mandos-keygen --dir keydir
346
84
./plugin-runner --plugin-dir=plugins.d \
347
--plugin-helper-dir=plugin-helpers \
348
--config-file=plugin-runner.conf \
349
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
350
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
351
$(CLIENTARGS)
352
353
# Used by run-client
354
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
355
install --directory keydir
356
./mandos-keygen --dir keydir --force
357
358
# Run the server with a local config
359
run-server: confdir/mandos.conf confdir/clients.conf statedir
360
./mandos --debug --no-dbus --configdir=confdir \
361
--statedir=statedir $(SERVERARGS)
362
363
# Used by run-server
364
confdir/mandos.conf: mandos.conf
365
install --directory confdir
366
install --mode=u=rw,go=r $^ $@
367
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
368
install --directory confdir
369
install --mode=u=rw $< $@
370
# Add a client password
371
./mandos-keygen --dir keydir --password --no-ssh >> $@
372
statedir:
373
install --directory statedir
374
375
install: install-server install-client-nokey
376
377
install-html: html
378
install --directory $(htmldir)
379
install --mode=u=rw,go=r --target-directory=$(htmldir) \
380
$(htmldocs)
85
--options-for=password-request:--keydir=keydir
86
87
run-server:
88
./mandos --debug --configdir=.
89
90
install: install-server install-client
381
91
382
92
install-server: doc
383
install --directory $(CONFDIR)
384
if install --directory --mode=u=rwx --owner=$(USER) \
385
--group=$(GROUP) $(STATEDIR); then \
386
:; \
387
elif install --directory --mode=u=rwx $(STATEDIR); then \
388
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
389
fi
390
if [ "$(TMPFILES)" != "$(DESTDIR)" \
391
-a -d "$(TMPFILES)" ]; then \
392
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
393
$(TMPFILES)/mandos.conf; \
394
fi
395
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
396
-a -d "$(SYSUSERS)" ]; then \
397
install --mode=u=rw,go=r sysusers.d-mandos.conf \
398
$(SYSUSERS)/mandos.conf; \
399
fi
400
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
401
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
402
mandos-ctl
403
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
404
mandos-monitor
405
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
406
mandos.conf
407
install --mode=u=rw --target-directory=$(CONFDIR) \
93
mkdir --mode=0755 --parents $(CONFDIR) $(MANDIR)/man5 \
94
$(MANDIR)/man8
95
install --mode=0755 mandos $(PREFIX)/sbin/mandos
96
install --mode=0644 --target-directory=$(CONFDIR) mandos.conf
97
install --mode=0640 --target-directory=$(CONFDIR) \
408
98
clients.conf
409
install --mode=u=rw,go=r dbus-mandos.conf \
410
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
411
install --mode=u=rwx,go=rx init.d-mandos \
412
$(DESTDIR)/etc/init.d/mandos
413
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
414
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
415
fi
416
install --mode=u=rw,go=r default-mandos \
417
$(DESTDIR)/etc/default/mandos
418
if [ -z $(DESTDIR) ]; then \
419
update-rc.d mandos defaults 25 15;\
420
fi
421
99
gzip --best --to-stdout mandos.8 \
422
100
> $(MANDIR)/man8/mandos.8.gz
423
gzip --best --to-stdout mandos-monitor.8 \
424
> $(MANDIR)/man8/mandos-monitor.8.gz
425
gzip --best --to-stdout mandos-ctl.8 \
426
> $(MANDIR)/man8/mandos-ctl.8.gz
427
101
gzip --best --to-stdout mandos.conf.5 \
428
102
> $(MANDIR)/man5/mandos.conf.5.gz
429
103
gzip --best --to-stdout mandos-clients.conf.5 \
430
104
> $(MANDIR)/man5/mandos-clients.conf.5.gz
431
gzip --best --to-stdout intro.8mandos \
432
> $(MANDIR)/man8/intro.8mandos.gz
433
105
434
install-client-nokey: all doc
435
install --directory $(LIBDIR)/mandos $(CONFDIR)
436
install --directory --mode=u=rwx $(KEYDIR) \
437
$(LIBDIR)/mandos/plugins.d \
438
$(LIBDIR)/mandos/plugin-helpers
439
if [ "$(SYSUSERS)" != "$(DESTDIR)" \
440
-a -d "$(SYSUSERS)" ]; then \
441
install --mode=u=rw,go=r sysusers.d-mandos.conf \
442
$(SYSUSERS)/mandos-client.conf; \
443
fi
444
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
445
install --mode=u=rwx \
446
--directory "$(CONFDIR)/plugins.d" \
447
"$(CONFDIR)/plugin-helpers"; \
448
fi
449
install --mode=u=rwx,go=rx --directory \
450
"$(CONFDIR)/network-hooks.d"
451
install --mode=u=rwx,go=rx \
452
--target-directory=$(LIBDIR)/mandos plugin-runner
453
install --mode=u=rwx,go=rx \
454
--target-directory=$(LIBDIR)/mandos \
455
mandos-to-cryptroot-unlock
456
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
106
install-client: all doc /usr/share/initramfs-tools/hooks/.
107
mkdir --mode=0755 --parents $(PREFIX)/lib/mandos $(CONFDIR) \
108
$(MANDIR)/man8
109
-mkdir --mode=0700 $(PREFIX)/lib/mandos/plugins.d
110
chmod u=rwx,g=,o= $(PREFIX)/lib/mandos/plugins.d
111
install --mode=0755 --target-directory=$(PREFIX)/lib/mandos \
112
plugin-runner
113
install --mode=0755 --target-directory=$(PREFIX)/sbin \
457
114
mandos-keygen
458
install --mode=u=rwx,go=rx \
459
--target-directory=$(LIBDIR)/mandos/plugins.d \
115
install --mode=0755 \
116
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
460
117
plugins.d/password-prompt
461
install --mode=u=rwxs,go=rx \
462
--target-directory=$(LIBDIR)/mandos/plugins.d \
463
plugins.d/mandos-client
464
install --mode=u=rwxs,go=rx \
465
--target-directory=$(LIBDIR)/mandos/plugins.d \
466
plugins.d/usplash
467
install --mode=u=rwxs,go=rx \
468
--target-directory=$(LIBDIR)/mandos/plugins.d \
469
plugins.d/splashy
470
install --mode=u=rwxs,go=rx \
471
--target-directory=$(LIBDIR)/mandos/plugins.d \
472
plugins.d/askpass-fifo
473
install --mode=u=rwxs,go=rx \
474
--target-directory=$(LIBDIR)/mandos/plugins.d \
475
plugins.d/plymouth
476
install --mode=u=rwx,go=rx \
477
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
478
plugin-helpers/mandos-client-iprouteadddel
118
install --mode=4755 \
119
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
120
plugins.d/password-request
479
121
install initramfs-tools-hook \
480
$(INITRAMFSTOOLS)/hooks/mandos
481
install --mode=u=rw,go=r initramfs-tools-conf \
482
$(INITRAMFSTOOLS)/conf.d/mandos-conf
483
install --mode=u=rw,go=r initramfs-tools-conf-hook \
484
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
122
/usr/share/initramfs-tools/hooks/mandos
123
install initramfs-tools-hook-conf \
124
/usr/share/initramfs-tools/conf-hooks.d/mandos
485
125
install initramfs-tools-script \
486
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
487
install initramfs-tools-script-stop \
488
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
489
install --directory $(DRACUTMODULE)
490
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
491
dracut-module/ask-password-mandos.path \
492
dracut-module/ask-password-mandos.service
493
install --mode=u=rwxs,go=rx \
494
--target-directory=$(DRACUTMODULE) \
495
dracut-module/module-setup.sh \
496
dracut-module/cmdline-mandos.sh \
497
dracut-module/password-agent
498
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
126
/usr/share/initramfs-tools/scripts/local-top/mandos
499
127
gzip --best --to-stdout mandos-keygen.8 \
500
128
> $(MANDIR)/man8/mandos-keygen.8.gz
501
129
gzip --best --to-stdout plugin-runner.8mandos \
502
130
> $(MANDIR)/man8/plugin-runner.8mandos.gz
503
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
504
> $(MANDIR)/man8/mandos-client.8mandos.gz
505
131
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
506
132
> $(MANDIR)/man8/password-prompt.8mandos.gz
507
gzip --best --to-stdout plugins.d/usplash.8mandos \
508
> $(MANDIR)/man8/usplash.8mandos.gz
509
gzip --best --to-stdout plugins.d/splashy.8mandos \
510
> $(MANDIR)/man8/splashy.8mandos.gz
511
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
512
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
513
gzip --best --to-stdout plugins.d/plymouth.8mandos \
514
> $(MANDIR)/man8/plymouth.8mandos.gz
515
gzip --best --to-stdout dracut-module/password-agent.8mandos \
516
> $(MANDIR)/man8/password-agent.8mandos.gz
517
518
install-client: install-client-nokey
519
# Post-installation stuff
520
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
521
if command -v update-initramfs >/dev/null; then \
522
update-initramfs -k all -u; \
523
elif command -v dracut >/dev/null; then \
524
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
525
if [ -w "$$initrd" ]; then \
526
chmod go-r "$$initrd"; \
527
dracut --force "$$initrd"; \
528
fi; \
529
done; \
530
fi
531
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
133
gzip --best --to-stdout plugins.d/password-request.8mandos \
134
> $(MANDIR)/man8/password-request.8mandos.gz
135
-$(PREFIX)/sbin/mandos-keygen
136
update-initramfs -k all -u
532
137
533
138
uninstall: uninstall-server uninstall-client
534
139
535
uninstall-server:
140
uninstall-server: $(PREFIX)/sbin/mandos
536
141
-rm --force $(PREFIX)/sbin/mandos \
537
$(PREFIX)/sbin/mandos-ctl \
538
$(PREFIX)/sbin/mandos-monitor \
539
142
$(MANDIR)/man8/mandos.8.gz \
540
$(MANDIR)/man8/mandos-monitor.8.gz \
541
$(MANDIR)/man8/mandos-ctl.8.gz \
542
143
$(MANDIR)/man5/mandos.conf.5.gz \
543
144
$(MANDIR)/man5/mandos-clients.conf.5.gz
544
update-rc.d -f mandos remove
545
145
-rmdir $(CONFDIR)
546
146
547
147
uninstall-client:
548
148
# Refuse to uninstall client if /etc/crypttab is explicitly configured
549
149
# to use it.
550
150
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
551
$(DESTDIR)/etc/crypttab
151
/etc/crypttab
552
152
-rm --force $(PREFIX)/sbin/mandos-keygen \
553
$(LIBDIR)/mandos/plugin-runner \
554
$(LIBDIR)/mandos/plugins.d/password-prompt \
555
$(LIBDIR)/mandos/plugins.d/mandos-client \
556
$(LIBDIR)/mandos/plugins.d/usplash \
557
$(LIBDIR)/mandos/plugins.d/splashy \
558
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
559
$(LIBDIR)/mandos/plugins.d/plymouth \
560
$(INITRAMFSTOOLS)/hooks/mandos \
561
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
562
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
563
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
564
$(DRACUTMODULE)/ask-password-mandos.path \
565
$(DRACUTMODULE)/ask-password-mandos.service \
566
$(DRACUTMODULE)/module-setup.sh \
567
$(DRACUTMODULE)/cmdline-mandos.sh \
568
$(DRACUTMODULE)/password-agent \
153
$(PREFIX)/lib/mandos/plugin-runner \
154
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
155
$(PREFIX)/lib/mandos/plugins.d/password-request \
156
/usr/share/initramfs-tools/hooks/mandos \
157
/usr/share/initramfs-tools/conf-hooks.d/mandos \
158
$(MANDIR)/man8/plugin-runner.8mandos.gz \
569
159
$(MANDIR)/man8/mandos-keygen.8.gz \
570
$(MANDIR)/man8/plugin-runner.8mandos.gz \
571
$(MANDIR)/man8/mandos-client.8mandos.gz
572
160
$(MANDIR)/man8/password-prompt.8mandos.gz \
573
$(MANDIR)/man8/usplash.8mandos.gz \
574
$(MANDIR)/man8/splashy.8mandos.gz \
575
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
576
$(MANDIR)/man8/plymouth.8mandos.gz \
577
$(MANDIR)/man8/password-agent.8mandos.gz \
578
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
579
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
580
if command -v update-initramfs >/dev/null; then \
581
update-initramfs -k all -u; \
582
elif command -v dracut >/dev/null; then \
583
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
584
test -w "$$initrd" && dracut --force "$$initrd"; \
585
done; \
586
fi
161
$(MANDIR)/man8/password-request.8mandos.gz
162
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
163
$(PREFIX)/lib/mandos $(CONFDIR)
164
update-initramfs -k all -u
587
165
588
166
purge: purge-server purge-client
589
167
590
168
purge-server: uninstall-server
591
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
592
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
593
$(DESTDIR)/etc/default/mandos \
594
$(DESTDIR)/etc/init.d/mandos \
595
$(SYSTEMD)/mandos.service \
596
$(DESTDIR)/run/mandos.pid \
597
$(DESTDIR)/var/run/mandos.pid
169
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf
598
170
-rmdir $(CONFDIR)
599
171
600
172
purge-client: uninstall-client
601
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
602
-rm --force $(CONFDIR)/plugin-runner.conf \
603
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
604
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
605
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
173
-rm --force $(CONFDIR)/seckey.txt $(CONFDIR)/pubkey.txt
174
-rmdir $(CONFDIR) $(CONFDIR)/plugins.d
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0