To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 951
- compare with another revision
- download diff
- download tarball
- view history from revision 951
- Committer: Teddy Hogeborn
- Date: 2018-08-15 09:26:02 UTC
- Revision ID: teddy@recompile.se-20180815092602-xoyb5s6gf8376i7u
mandos-client: Set system clock if necessary
* plugins.d/mandos-client.c (init_gpgme/import_key): If the system
clock is not set, or set to january 1970, set the system clock to
the more plausible value that is the mtime of the key file. This is
required by GnuPG to be able to import the keys. (We can't pass the
--ignore-time-conflict or the --ignore-valid-from options though
GPGME.)
* plugins.d/mandos-client.c (init_gpgme/import_key): If the system
clock is not set, or set to january 1970, set the system clock to
the more plausible value that is the mtime of the key file. This is
required by GnuPG to be able to import the keys. (We can't pass the
--ignore-time-conflict or the --ignore-valid-from options though
GPGME.)
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files removed:
- etc-plugins.d-README
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
#DEBUG:=-ggdb3 -fsanitize=address
14
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
15
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
16
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
17
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
18
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
19
-fsanitize=shift -fsanitize=integer-divide-by-zero \
20
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
21
-fsanitize=return -fsanitize=signed-integer-overflow \
22
-fsanitize=bounds -fsanitize=alignment \
23
-fsanitize=object-size -fsanitize=float-divide-by-zero \
24
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
25
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
26
-fsanitize=enum
27
# Check which sanitizing options can be used
28
SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
29
echo 'int main(){}' | $(CC) --language=c $(option) /dev/stdin \
30
-o /dev/null >/dev/null 2>&1 && echo $(option)))
31
LINK_FORTIFY_LD:=-z relro -z now
32
LINK_FORTIFY:=
33
34
# If BROKEN_PIE is set, do not build with -pie
35
ifndef BROKEN_PIE
36
FORTIFY += -fPIE
37
LINK_FORTIFY += -pie
38
endif
13
39
#COVERAGE=--coverage
14
OPTIMIZE=-Os
15
LANGUAGE=-std=gnu99
40
OPTIMIZE:=-Os -fno-strict-aliasing
41
LANGUAGE:=-std=gnu11
42
htmldir:=man
43
version:=1.7.19
44
SED:=sed
45
46
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
47
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nogroup || echo 65534)))
16
48
17
49
## Use these settings for a traditional /usr/local install
18
# PREFIX=$(DESTDIR)/usr/local
19
# CONFDIR=$(DESTDIR)/etc/mandos
20
# KEYDIR=$(DESTDIR)/etc/mandos/keys
21
# MANDIR=$(PREFIX)/man
22
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
50
# PREFIX:=$(DESTDIR)/usr/local
51
# CONFDIR:=$(DESTDIR)/etc/mandos
52
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
53
# MANDIR:=$(PREFIX)/man
54
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
55
# STATEDIR:=$(DESTDIR)/var/lib/mandos
56
# LIBDIR:=$(PREFIX)/lib
23
57
##
24
58
25
59
## These settings are for a package-type install
26
PREFIX=$(DESTDIR)/usr
27
CONFDIR=$(DESTDIR)/etc/mandos
28
KEYDIR=$(DESTDIR)/etc/keys/mandos
29
MANDIR=$(PREFIX)/share/man
30
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
60
PREFIX:=$(DESTDIR)/usr
61
CONFDIR:=$(DESTDIR)/etc/mandos
62
KEYDIR:=$(DESTDIR)/etc/keys/mandos
63
MANDIR:=$(PREFIX)/share/man
64
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
65
STATEDIR:=$(DESTDIR)/var/lib/mandos
66
LIBDIR:=$(shell \
67
for d in \
68
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
69
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
70
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
71
echo "$(DESTDIR)$$d"; \
72
break; \
73
fi; \
74
done)
31
75
##
32
76
33
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
34
GNUTLS_LIBS=$(shell libgnutls-config --libs)
35
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
36
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
37
GPGME_CFLAGS=$(shell gpgme-config --cflags)
38
GPGME_LIBS=$(shell gpgme-config --libs)
77
SYSTEMD:=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
78
TMPFILES:=$(DESTDIR)$(shell pkg-config systemd --variable=tmpfilesdir)
79
80
GNUTLS_CFLAGS:=$(shell pkg-config --cflags-only-I gnutls)
81
GNUTLS_LIBS:=$(shell pkg-config --libs gnutls)
82
AVAHI_CFLAGS:=$(shell pkg-config --cflags-only-I avahi-core)
83
AVAHI_LIBS:=$(shell pkg-config --libs avahi-core)
84
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
85
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
86
getconf LFS_LDFLAGS)
87
LIBNL3_CFLAGS:=$(shell pkg-config --cflags-only-I libnl-route-3.0)
88
LIBNL3_LIBS:=$(shell pkg-config --libs libnl-route-3.0)
39
89
40
90
# Do not change these two
41
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
42
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
43
LDFLAGS=$(COVERAGE)
91
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(SANITIZE) $(COVERAGE) \
92
$(OPTIMIZE) $(LANGUAGE) -DVERSION='"$(version)"'
93
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
44
94
45
95
# Commands to format a DocBook <refentry> document into a manual page
46
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
96
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
47
97
--param man.charmap.use.subset 0 \
48
98
--param make.year.ranges 1 \
49
99
--param make.single.year.ranges 1 \
50
100
--param man.output.quietly 1 \
51
101
--param man.authors.section.enabled 0 \
52
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
102
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
53
103
$(notdir $<); \
54
$(MANPOST) $(notdir $@)
55
# DocBook-to-man post-processing to fix a '\n' escape bug
56
MANPOST=sed --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
57
58
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client
59
PROGS=plugin-runner $(PLUGINS)
60
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
104
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
105
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
106
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
107
fi >/dev/null)
108
109
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
110
--param make.year.ranges 1 \
111
--param make.single.year.ranges 1 \
112
--param man.output.quietly 1 \
113
--param man.authors.section.enabled 0 \
114
--param citerefentry.link 1 \
115
--output $@ \
116
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
117
$<; $(HTMLPOST) $@)
118
# Fix citerefentry links
119
HTMLPOST:=$(SED) --in-place \
120
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
121
122
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
123
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
124
plugins.d/plymouth
125
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
126
CPROGS:=plugin-runner $(PLUGINS) $(PLUGIN_HELPERS)
127
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
128
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
129
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
61
130
plugins.d/mandos-client.8mandos \
62
plugins.d/password-prompt.8mandos mandos.conf.5 \
63
mandos-clients.conf.5
64
65
objects=$(addsuffix .o,$(PROGS))
66
67
all: $(PROGS)
131
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
132
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
133
plugins.d/plymouth.8mandos intro.8mandos
134
135
htmldocs:=$(addsuffix .xhtml,$(DOCS))
136
137
objects:=$(addsuffix .o,$(CPROGS))
138
139
all: $(PROGS) mandos.lsm
68
140
69
141
doc: $(DOCS)
70
142
71
%.5: %.xml legalnotice.xml
72
$(DOCBOOKTOMAN)
73
74
%.8: %.xml legalnotice.xml
75
$(DOCBOOKTOMAN)
76
77
%.8mandos: %.xml legalnotice.xml
78
$(DOCBOOKTOMAN)
79
80
mandos.8: mandos.xml mandos-options.xml overview.xml legalnotice.xml
81
$(DOCBOOKTOMAN)
82
83
mandos-keygen.8: mandos-keygen.xml overview.xml legalnotice.xml
84
$(DOCBOOKTOMAN)
85
86
mandos.conf.5: mandos.conf.xml mandos-options.xml legalnotice.xml
87
$(DOCBOOKTOMAN)
88
89
plugin-runner.8mandos: plugin-runner.xml overview.xml legalnotice.xml
90
$(DOCBOOKTOMAN)
143
html: $(htmldocs)
144
145
%.5: %.xml common.ent legalnotice.xml
146
$(DOCBOOKTOMAN)
147
%.5.xhtml: %.xml common.ent legalnotice.xml
148
$(DOCBOOKTOHTML)
149
150
%.8: %.xml common.ent legalnotice.xml
151
$(DOCBOOKTOMAN)
152
%.8.xhtml: %.xml common.ent legalnotice.xml
153
$(DOCBOOKTOHTML)
154
155
%.8mandos: %.xml common.ent legalnotice.xml
156
$(DOCBOOKTOMAN)
157
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
158
$(DOCBOOKTOHTML)
159
160
intro.8mandos: intro.xml common.ent legalnotice.xml
161
$(DOCBOOKTOMAN)
162
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
163
$(DOCBOOKTOHTML)
164
165
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
166
legalnotice.xml
167
$(DOCBOOKTOMAN)
168
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
169
overview.xml legalnotice.xml
170
$(DOCBOOKTOHTML)
171
172
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
173
legalnotice.xml
174
$(DOCBOOKTOMAN)
175
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
176
legalnotice.xml
177
$(DOCBOOKTOHTML)
178
179
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
180
legalnotice.xml
181
$(DOCBOOKTOMAN)
182
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
183
legalnotice.xml
184
$(DOCBOOKTOHTML)
185
186
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
187
legalnotice.xml
188
$(DOCBOOKTOMAN)
189
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
190
legalnotice.xml
191
$(DOCBOOKTOHTML)
192
193
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
194
legalnotice.xml
195
$(DOCBOOKTOMAN)
196
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
197
legalnotice.xml
198
$(DOCBOOKTOHTML)
199
200
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
201
legalnotice.xml
202
$(DOCBOOKTOMAN)
203
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
204
overview.xml legalnotice.xml
205
$(DOCBOOKTOHTML)
91
206
92
207
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
208
common.ent \
93
209
mandos-options.xml \
94
210
overview.xml legalnotice.xml
95
211
$(DOCBOOKTOMAN)
96
97
plugins.d/mandos-client: plugins.d/mandos-client.o
98
$(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
99
$(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
100
101
.PHONY : all doc clean distclean run-client run-server install \
102
install-server install-client uninstall uninstall-server \
103
uninstall-client purge purge-server purge-client
212
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
213
common.ent \
214
mandos-options.xml \
215
overview.xml legalnotice.xml
216
$(DOCBOOKTOHTML)
217
218
# Update all these files with version number $(version)
219
common.ent: Makefile
220
$(strip $(SED) --in-place \
221
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
222
$@)
223
224
mandos: Makefile
225
$(strip $(SED) --in-place \
226
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
227
$@)
228
229
mandos-keygen: Makefile
230
$(strip $(SED) --in-place \
231
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
232
$@)
233
234
mandos-ctl: Makefile
235
$(strip $(SED) --in-place \
236
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
237
$@)
238
239
mandos-monitor: Makefile
240
$(strip $(SED) --in-place \
241
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
242
$@)
243
244
mandos.lsm: Makefile
245
$(strip $(SED) --in-place \
246
--expression='s/^\(Version:\).*/\1\t$(version)/' \
247
$@)
248
$(strip $(SED) --in-place \
249
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
250
$@)
251
$(strip $(SED) --in-place \
252
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
253
$@)
254
255
# Need to add the GnuTLS, Avahi and GPGME libraries, and can't use
256
# -fsanitize=leak because GnuTLS and GPGME both leak memory.
257
plugins.d/mandos-client: plugins.d/mandos-client.c
258
$(CC) $(filter-out -fsanitize=leak,$(CFLAGS)) $(strip\
259
) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) $(strip\
260
) $(CPPFLAGS) $(LDFLAGS) $(TARGET_ARCH) $^ $(strip\
261
) -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
262
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
263
264
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
265
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
266
) $(LOADLIBES) $(LDLIBS) -o $@
267
268
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
269
check run-client run-server install install-html \
270
install-server install-client-nokey install-client uninstall \
271
uninstall-server uninstall-client purge purge-server \
272
purge-client
104
273
105
274
clean:
106
-rm --force $(PROGS) $(objects) $(DOCS) core
275
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
107
276
108
277
distclean: clean
109
278
mostlyclean: clean
110
279
maintainer-clean: clean
111
-rm --force --recursive keydir confdir
280
-rm --force --recursive keydir confdir statedir
112
281
113
check:
282
check: all
114
283
./mandos --check
284
./mandos-ctl --check
115
285
116
286
# Run the client with a local config and key
117
287
run-client: all keydir/seckey.txt keydir/pubkey.txt
288
@echo "###################################################################"
289
@echo "# The following error messages are harmless and can be safely #"
290
@echo "# ignored: #"
291
@echo "# From plugin-runner: setgid: Operation not permitted #"
292
@echo "# setuid: Operation not permitted #"
293
@echo "# From askpass-fifo: mkfifo: Permission denied #"
294
@echo "# From mandos-client: #"
295
@echo "# Failed to raise privileges: Operation not permitted #"
296
@echo "# Warning: network hook \"*\" exited with status * #"
297
@echo "# #"
298
@echo "# (The messages are caused by not running as root, but you should #"
299
@echo "# NOT run \"make run-client\" as root unless you also unpacked and #"
300
@echo "# compiled Mandos as root, which is also NOT recommended.) #"
301
@echo "###################################################################"
302
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
118
303
./plugin-runner --plugin-dir=plugins.d \
304
--plugin-helper-dir=plugin-helpers \
119
305
--config-file=plugin-runner.conf \
120
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
306
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
307
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
308
$(CLIENTARGS)
121
309
122
310
# Used by run-client
123
311
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
125
313
./mandos-keygen --dir keydir --force
126
314
127
315
# Run the server with a local config
128
run-server: confdir/mandos.conf confdir/clients.conf
129
./mandos --debug --configdir=confdir
316
run-server: confdir/mandos.conf confdir/clients.conf statedir
317
./mandos --debug --no-dbus --configdir=confdir \
318
--statedir=statedir $(SERVERARGS)
130
319
131
320
# Used by run-server
132
321
confdir/mandos.conf: mandos.conf
136
325
install --directory confdir
137
326
install --mode=u=rw $< $@
138
327
# Add a client password
139
./mandos-keygen --dir keydir --password >> $@
328
./mandos-keygen --dir keydir --password --no-ssh >> $@
329
statedir:
330
install --directory statedir
140
331
141
332
install: install-server install-client-nokey
142
333
334
install-html: html
335
install --directory $(htmldir)
336
install --mode=u=rw,go=r --target-directory=$(htmldir) \
337
$(htmldocs)
338
143
339
install-server: doc
144
install --directory $(CONFDIR) $(MANDIR)/man5 \
145
$(MANDIR)/man8 $(DESTDIR)/etc/init.d \
146
$(DESTDIR)/etc/default $(PREFIX)/sbin
340
install --directory $(CONFDIR)
341
if install --directory --mode=u=rwx --owner=$(USER) \
342
--group=$(GROUP) $(STATEDIR); then \
343
:; \
344
elif install --directory --mode=u=rwx $(STATEDIR); then \
345
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
346
fi
347
if [ "$(TMPFILES)" != "$(DESTDIR)" -a -d "$(TMPFILES)" ]; then \
348
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
349
$(TMPFILES)/mandos.conf; \
350
fi
147
351
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
352
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
353
mandos-ctl
354
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
355
mandos-monitor
148
356
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
149
357
mandos.conf
150
358
install --mode=u=rw --target-directory=$(CONFDIR) \
151
359
clients.conf
360
install --mode=u=rw,go=r dbus-mandos.conf \
361
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
152
362
install --mode=u=rwx,go=rx init.d-mandos \
153
363
$(DESTDIR)/etc/init.d/mandos
364
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
365
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
366
fi
154
367
install --mode=u=rw,go=r default-mandos \
155
368
$(DESTDIR)/etc/default/mandos
156
update-rc.d mandos defaults
369
if [ -z $(DESTDIR) ]; then \
370
update-rc.d mandos defaults 25 15;\
371
fi
157
372
gzip --best --to-stdout mandos.8 \
158
373
> $(MANDIR)/man8/mandos.8.gz
374
gzip --best --to-stdout mandos-monitor.8 \
375
> $(MANDIR)/man8/mandos-monitor.8.gz
376
gzip --best --to-stdout mandos-ctl.8 \
377
> $(MANDIR)/man8/mandos-ctl.8.gz
159
378
gzip --best --to-stdout mandos.conf.5 \
160
379
> $(MANDIR)/man5/mandos.conf.5.gz
161
380
gzip --best --to-stdout mandos-clients.conf.5 \
162
381
> $(MANDIR)/man5/mandos-clients.conf.5.gz
382
gzip --best --to-stdout intro.8mandos \
383
> $(MANDIR)/man8/intro.8mandos.gz
163
384
164
385
install-client-nokey: all doc
165
install --directory $(PREFIX)/lib/mandos $(CONFDIR) \
166
$(MANDIR)/man8 $(PREFIX)/sbin \
167
$(INITRAMFSTOOLS)/hooks \
168
$(INITRAMFSTOOLS)/conf-hooks.d \
169
$(INITRAMFSTOOLS)/scripts/local-top
170
install --directory --mode=u=rwx $(KEYDIR)
171
install --directory --mode=u=rwx \
172
$(PREFIX)/lib/mandos/plugins.d
173
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
386
install --directory $(LIBDIR)/mandos $(CONFDIR)
387
install --directory --mode=u=rwx $(KEYDIR) \
388
$(LIBDIR)/mandos/plugins.d \
389
$(LIBDIR)/mandos/plugin-helpers
390
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
174
391
install --mode=u=rwx \
175
--directory "$(CONFDIR)/plugins.d" && \
176
install --mode=u=rw,go=r etc-plugins.d-README \
177
$(CONFDIR)/plugins.d/README ; \
392
--directory "$(CONFDIR)/plugins.d" \
393
"$(CONFDIR)/plugin-helpers"; \
178
394
fi
395
install --mode=u=rwx,go=rx --directory \
396
"$(CONFDIR)/network-hooks.d"
179
397
install --mode=u=rwx,go=rx \
180
--target-directory=$(PREFIX)/lib/mandos plugin-runner
398
--target-directory=$(LIBDIR)/mandos plugin-runner
181
399
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
182
400
mandos-keygen
183
401
install --mode=u=rwx,go=rx \
184
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
402
--target-directory=$(LIBDIR)/mandos/plugins.d \
185
403
plugins.d/password-prompt
186
404
install --mode=u=rwxs,go=rx \
187
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
405
--target-directory=$(LIBDIR)/mandos/plugins.d \
188
406
plugins.d/mandos-client
189
install --mode=u=rwx,go=rx \
190
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
407
install --mode=u=rwxs,go=rx \
408
--target-directory=$(LIBDIR)/mandos/plugins.d \
191
409
plugins.d/usplash
410
install --mode=u=rwxs,go=rx \
411
--target-directory=$(LIBDIR)/mandos/plugins.d \
412
plugins.d/splashy
413
install --mode=u=rwxs,go=rx \
414
--target-directory=$(LIBDIR)/mandos/plugins.d \
415
plugins.d/askpass-fifo
416
install --mode=u=rwxs,go=rx \
417
--target-directory=$(LIBDIR)/mandos/plugins.d \
418
plugins.d/plymouth
419
install --mode=u=rwx,go=rx \
420
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
421
plugin-helpers/mandos-client-iprouteadddel
192
422
install initramfs-tools-hook \
193
423
$(INITRAMFSTOOLS)/hooks/mandos
194
install initramfs-tools-hook-conf \
424
install --mode=u=rw,go=r initramfs-tools-hook-conf \
195
425
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
196
426
install initramfs-tools-script \
197
$(INITRAMFSTOOLS)/scripts/local-top/mandos
427
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
198
428
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
199
429
gzip --best --to-stdout mandos-keygen.8 \
200
430
> $(MANDIR)/man8/mandos-keygen.8.gz
201
431
gzip --best --to-stdout plugin-runner.8mandos \
202
432
> $(MANDIR)/man8/plugin-runner.8mandos.gz
433
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
434
> $(MANDIR)/man8/mandos-client.8mandos.gz
203
435
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
204
436
> $(MANDIR)/man8/password-prompt.8mandos.gz
205
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
206
> $(MANDIR)/man8/mandos-client.8mandos.gz
437
gzip --best --to-stdout plugins.d/usplash.8mandos \
438
> $(MANDIR)/man8/usplash.8mandos.gz
439
gzip --best --to-stdout plugins.d/splashy.8mandos \
440
> $(MANDIR)/man8/splashy.8mandos.gz
441
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
442
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
443
gzip --best --to-stdout plugins.d/plymouth.8mandos \
444
> $(MANDIR)/man8/plymouth.8mandos.gz
207
445
208
446
install-client: install-client-nokey
209
447
# Post-installation stuff
215
453
216
454
uninstall-server:
217
455
-rm --force $(PREFIX)/sbin/mandos \
456
$(PREFIX)/sbin/mandos-ctl \
457
$(PREFIX)/sbin/mandos-monitor \
218
458
$(MANDIR)/man8/mandos.8.gz \
459
$(MANDIR)/man8/mandos-monitor.8.gz \
460
$(MANDIR)/man8/mandos-ctl.8.gz \
219
461
$(MANDIR)/man5/mandos.conf.5.gz \
220
462
$(MANDIR)/man5/mandos-clients.conf.5.gz
221
463
update-rc.d -f mandos remove
227
469
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
228
470
$(DESTDIR)/etc/crypttab
229
471
-rm --force $(PREFIX)/sbin/mandos-keygen \
230
$(PREFIX)/lib/mandos/plugin-runner \
231
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
232
$(PREFIX)/lib/mandos/plugins.d/mandos-client \
233
$(PREFIX)/lib/mandos/plugins.d/usplash \
472
$(LIBDIR)/mandos/plugin-runner \
473
$(LIBDIR)/mandos/plugins.d/password-prompt \
474
$(LIBDIR)/mandos/plugins.d/mandos-client \
475
$(LIBDIR)/mandos/plugins.d/usplash \
476
$(LIBDIR)/mandos/plugins.d/splashy \
477
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
478
$(LIBDIR)/mandos/plugins.d/plymouth \
234
479
$(INITRAMFSTOOLS)/hooks/mandos \
235
480
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
236
$(INITRAMFSTOOLS)/scripts/local-top/mandos \
481
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
482
$(MANDIR)/man8/mandos-keygen.8.gz \
237
483
$(MANDIR)/man8/plugin-runner.8mandos.gz \
238
$(MANDIR)/man8/mandos-keygen.8.gz \
484
$(MANDIR)/man8/mandos-client.8mandos.gz
239
485
$(MANDIR)/man8/password-prompt.8mandos.gz \
240
$(MANDIR)/man8/mandos-client.8mandos.gz
241
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
242
rm --force $(CONFDIR)/plugins.d/README; \
243
fi
244
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
245
$(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
486
$(MANDIR)/man8/usplash.8mandos.gz \
487
$(MANDIR)/man8/splashy.8mandos.gz \
488
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
489
$(MANDIR)/man8/plymouth.8mandos.gz \
490
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
491
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
246
492
update-initramfs -k all -u
247
493
248
494
purge: purge-server purge-client
249
495
250
496
purge-server: uninstall-server
251
497
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
498
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
252
499
$(DESTDIR)/etc/default/mandos \
253
500
$(DESTDIR)/etc/init.d/mandos \
501
$(SYSTEMD)/mandos.service \
502
$(DESTDIR)/run/mandos.pid \
254
503
$(DESTDIR)/var/run/mandos.pid
255
504
-rmdir $(CONFDIR)
256
505
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0