1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
# Makefile for miscellaneous programs
# Copyright (C) 2002-2006 Michael Richardson <mcr@xelerance.com>
#
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version. See <https://www.gnu.org/licenses/gpl2.txt>.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# for more details.
# the man page source is generated
MANPAGES += ipsec.conf.5
MANPAGES += ipsec.secrets.5
XMLTO_FLAGS = --searchpath $(abs_srcdir)/d.ipsec.conf:$(abs_srcdir)
# different mode
ipsec.secrets.INSTFLAGS = -m 0600
CONFFILES += ipsec.conf
CONFFILES += ipsec.secrets
LOGROTATEDFILE += libreswan
CONFDSUBDIR = policies
CONFDSUBDIRFILES = clear clear-or-private private-or-clear private block portexcludes.conf
ifndef top_srcdir
include ../mk/dirs.mk
endif
include $(top_srcdir)/mk/config.mk
include $(top_srcdir)/mk/targets.mk
include $(top_srcdir)/mk/rules.mk
include $(top_srcdir)/mk/manpages.mk
include $(top_srcdir)/mk/install.mk
local-base: $(CONFFILES) $(CONFDSUBDIRFILES) $(LOGROTATEDFILE)
local-clean-base:
rm -f $(foreach file, $(CONFFILES) $(CONFDSUBDIRFILES) $(LOGROTATEDFILE), $(builddir)/$(file))
# For each group of files; first copy to the examples directory and
# then, optionally, install into /etc (but only when
# INSTALL_CONFIGS=true, and only when not already present).
local-install-base: $(CONFFILES) $(CONFDSUBDIRFILES) $(LOGROTATEDFILE)
@: CONFDDIR - EXAMPLECONFDIR not EXAMPLECONFDDIR and sample suffix
@set -eu ; $(call install-directory, $(DESTDIR)$(EXAMPLE_IPSEC_SYSCONFDIR))
@set -eu ; $(call install-file, $(INSTCONFFLAGS) $(ipsec.conf.INSTFLAGS), $(builddir)/ipsec.conf, $(DESTDIR)$(EXAMPLE_IPSEC_SYSCONFDIR)/$(notdir $(IPSEC_CONF))-sample)
@set -eu ; $(call install-file, $(INSTCONFFLAGS) $(ipsec.secrets.INSTFLAGS), $(builddir)/ipsec.secrets, $(DESTDIR)$(EXAMPLE_IPSEC_SYSCONFDIR)/$(notdir $(IPSEC_SECRETS))-sample)
ifeq ($(INSTALL_CONFIGS),true)
@set -eu ; $(call install-directory, $(DESTDIR)$(IPSEC_CONFDDIR), 0700)
@set -eu ; $(call install-missing-file, $(INSTCONFFLAGS) $(ipsec.conf.INSTFLAGS), $(builddir)/ipsec.conf, $(DESTDIR)$(IPSEC_CONF))
@set -eu ; $(call install-missing-file, $(INSTCONFFLAGS) $(ipsec.secrets.INSTFLAGS), $(builddir)/ipsec.secrets, $(DESTDIR)$(IPSEC_SECRETS))
endif
@: CONFDSUBDIR
@set -eu ; $(call install-directory, $(DESTDIR)$(EXAMPLE_IPSEC_CONFDDIR), 0700)
@set -eu ; $(call install-directory, $(DESTDIR)$(EXAMPLE_IPSEC_CONFDDIR)/$(CONFDSUBDIR), 0700)
@set -eu ; $(foreach file, $(CONFDSUBDIRFILES), \
$(call install-file, $(INSTCONFFLAGS), \
$(builddir)/$(file), $(DESTDIR)$(EXAMPLE_IPSEC_CONFDDIR)/$(CONFDSUBDIR)/$(file)) ; \
)
ifeq ($(INSTALL_CONFIGS),true)
@set -eu ; $(call install-directory, $(DESTDIR)$(IPSEC_CONFDDIR)/$(CONFDSUBDIR), 0700)
@set -eu ; $(foreach file, $(CONFDSUBDIRFILES), \
$(call install-missing-file, $(INSTCONFFLAGS), \
$(DESTDIR)$(EXAMPLE_IPSEC_CONFDDIR)/$(CONFDSUBDIR)/$(file), $(DESTDIR)$(IPSEC_CONFDDIR)/$(CONFDSUBDIR)/$(file)) ; \
)
endif
@: LOGROTATED
@set -eu ; $(call install-directory, $(DESTDIR)$(EXAMPLE_LOGROTATEDDIR))
@set -eu ; $(call install-file, $(INSTCONFFLAGS), \
$(builddir)/$(LOGROTATEDFILE), $(DESTDIR)$(EXAMPLE_LOGROTATEDDIR)/$(LOGROTATEDFILE))
ifeq ($(INSTALL_CONFIGS),true)
@set -eu ; $(call install-directory, $(DESTDIR)$(LOGROTATEDDIR))
@set -eu ; $(call install-missing-file, $(INSTCONFFLAGS), \
$(builddir)/$(LOGROTATEDFILE), $(DESTDIR)$(LOGROTATEDDIR)/$(LOGROTATEDFILE))
endif
@: NSSDIR install
ifeq ($(INSTALL_CONFIGS),true)
@set -eu ; $(call install-directory, $(DESTDIR)$(NSSDIR), 0700)
endif
ifeq ($(USE_AUTHPAM),true)
@: PAM
@set -eu ; $(call install-directory, $(DESTDIR)$(EXAMPLE_PAMCONFDIR))
@set -eu ; $(call install-file, $(INSTCONFFLAGS), \
pam.d/pluto, $(DESTDIR)$(EXAMPLE_PAMCONFDIR)/pluto)
ifeq ($(INSTALL_CONFIGS),true)
@set -eu ; $(call install-directory, $(DESTDIR)$(PAMCONFDIR))
@set -eu ; $(call install-missing-file, $(INSTCONFFLAGS), \
$(DESTDIR)$(EXAMPLE_PAMCONFDIR)/pluto, $(DESTDIR)$(PAMCONFDIR)/pluto)
endif
endif
@: $(SELINUX)
ifeq ($(INSTALL_CONFIGS),true)
@if test -z "$(DESTDIR)" -a -x /usr/sbin/selinuxenabled -a $(DESTDIR)$(SBINDIR) != "$(DESTDIR)/usr/sbin" ; then \
if /usr/sbin/selinuxenabled ; then \
echo -e "\n************************** WARNING ***********************************" ; \
echo "SElinux is present on this system and the prefix path is not /usr." ; \
echo "This can cause software failures if selinux is running in Enforcing mode"; \
echo -e "unless selinux policies are updated manually to allow this.\n" ; \
echo "The following commands fix a common issue of /usr/local/ being mislabeled"; \
echo " sudo restorecon /usr/local/sbin -Rv"; \
echo " sudo restorecon /usr/local/libexec/ipsec -Rv"; \
if test -x /usr/sbin/getenforce ; then \
echo -e "\nSElinux is currently running in `/usr/sbin/getenforce` mode" ; \
fi ; \
echo -e "**********************************************************************\n" ; \
fi \
fi
endif
list-local-base:
@set -eu ; $(foreach file, $(CONFFILES), \
echo $(DESTDIR)$(SYSCONFDIR)/$(file) ; \
)
@set -eu ; $(foreach file, $(CONFFILES), \
echo $(DESTDIR)$(EXAMPLE_IPSEC_SYSCONFDIR)/$(file)-sample ; \
)
@set -eu ; $(foreach file, $(CONFDSUBDIRFILES), \
echo $(DESTDIR)$(IPSEC_CONFDDIR)/$(CONFDSUBDIR)/$${file} ; \
)
# Custom rules for ipsec.conf.5; manpages.mk should be updated to
# mimic this behaviour.
$(builddir)/ipsec.conf.5.man: $(srcdir)/ipsec.conf.5.xml $(srcdir)/d.ipsec.conf/*.xml
$(builddir)/ipsec.conf.5.man: $(builddir)/ipsec.conf.5.ok
$(builddir)/ipsec.conf.5.ok: $(srcdir)/d.ipsec.conf/*.xml
: do all d.ipsec.conf/*.xml files appear in ipsec.conf.5.xml?
for x in d.ipsec.conf/*.xml ; do \
b=$$(basename $${x} .xml) ; \
if ! grep '"'$${x}'"' ipsec.conf.5.xml > /dev/null ; then \
echo '"'$${x}'"' missing ; \
exit 1 ; \
fi ; \
if ! grep '&'$${b}';' ipsec.conf.5.xml > /dev/null ; then \
echo $${b} missing ; \
exit 1 ; \
fi ; \
done
touch $@
$(top_builddir)/html/ipsec.conf.5.html: $(srcdir)/d.ipsec.conf/*.xml
|
