42a8595256
giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation
396 lines
10 KiB
Makefile
396 lines
10 KiB
Makefile
# from: @(#)Makefile 5.11 (Berkeley) 5/21/91
|
|
# $FreeBSD$
|
|
|
|
.include <bsd.own.mk>
|
|
|
|
.if ${MK_SENDMAIL} != "no"
|
|
SUBDIR= sendmail
|
|
.endif
|
|
|
|
BIN1= crontab \
|
|
devd.conf \
|
|
devfs.conf \
|
|
ddb.conf \
|
|
dhclient.conf \
|
|
disktab \
|
|
fbtab \
|
|
ftpusers \
|
|
gettytab \
|
|
group \
|
|
hosts \
|
|
hosts.allow \
|
|
hosts.equiv \
|
|
inetd.conf \
|
|
libalias.conf \
|
|
libmap.conf \
|
|
login.access \
|
|
login.conf \
|
|
mac.conf \
|
|
motd \
|
|
netconfig \
|
|
network.subr \
|
|
networks \
|
|
newsyslog.conf \
|
|
nsswitch.conf \
|
|
phones \
|
|
profile \
|
|
protocols \
|
|
rc \
|
|
rc.bsdextended \
|
|
rc.firewall \
|
|
rc.initdiskless \
|
|
rc.sendmail \
|
|
rc.shutdown \
|
|
rc.subr \
|
|
remote \
|
|
rpc \
|
|
services \
|
|
shells \
|
|
sysctl.conf \
|
|
syslog.conf \
|
|
termcap.small
|
|
|
|
.if ${MACHINE_ARCH} == "amd64" || ${MACHINE_ARCH} == "powerpc64"
|
|
BIN1+= libmap32.conf
|
|
.endif
|
|
|
|
.if exists(${.CURDIR}/etc.${MACHINE}/ttys)
|
|
BIN1+= etc.${MACHINE}/ttys
|
|
.elif exists(${.CURDIR}/etc.${MACHINE_ARCH}/ttys)
|
|
BIN1+= etc.${MACHINE_ARCH}/ttys
|
|
.elif exists(${.CURDIR}/etc.${MACHINE_CPUARCH}/ttys)
|
|
BIN1+= etc.${MACHINE_CPUARCH}/ttys
|
|
.else
|
|
.error etc.MACHINE/ttys missing
|
|
.endif
|
|
|
|
OPENBSMDIR= ${.CURDIR}/../contrib/openbsm
|
|
BSM_ETC_OPEN_FILES= ${OPENBSMDIR}/etc/audit_class \
|
|
${OPENBSMDIR}/etc/audit_event
|
|
BSM_ETC_RESTRICTED_FILES= ${OPENBSMDIR}/etc/audit_control \
|
|
${OPENBSMDIR}/etc/audit_user
|
|
BSM_ETC_EXEC_FILES= ${OPENBSMDIR}/etc/audit_warn
|
|
BSM_ETC_DIR= ${DESTDIR}/etc/security
|
|
|
|
# NB: keep these sorted by MK_* knobs
|
|
|
|
.if ${MK_AMD} != "no"
|
|
BIN1+= amd.map
|
|
.endif
|
|
|
|
.if ${MK_APM} != "no"
|
|
BIN1+= apmd.conf
|
|
.endif
|
|
|
|
.if ${MK_BSNMP} != "no"
|
|
BIN1+= snmpd.config
|
|
.endif
|
|
|
|
.if ${MK_FREEBSD_UPDATE} != "no"
|
|
BIN1+= freebsd-update.conf
|
|
.endif
|
|
|
|
.if ${MK_LOCATE} != "no"
|
|
BIN1+= ${.CURDIR}/../usr.bin/locate/locate/locate.rc
|
|
.endif
|
|
|
|
.if ${MK_LPR} != "no"
|
|
BIN1+= hosts.lpd printcap
|
|
.endif
|
|
|
|
.if ${MK_MAIL} != "no"
|
|
BIN1+= ${.CURDIR}/../usr.bin/mail/misc/mail.rc
|
|
.endif
|
|
|
|
.if ${MK_NTP} != "no"
|
|
BIN1+= ntp.conf
|
|
.endif
|
|
|
|
.if ${MK_OPENSSH} != "no"
|
|
SSH= ${.CURDIR}/../crypto/openssh/ssh_config \
|
|
${.CURDIR}/../crypto/openssh/sshd_config \
|
|
${.CURDIR}/../crypto/openssh/moduli
|
|
.endif
|
|
.if ${MK_OPENSSL} != "no"
|
|
SSL= ${.CURDIR}/../crypto/openssl/apps/openssl.cnf
|
|
.endif
|
|
|
|
.if ${MK_NS_CACHING} != "no"
|
|
BIN1+= nscd.conf
|
|
.endif
|
|
|
|
.if ${MK_PORTSNAP} != "no"
|
|
BIN1+= portsnap.conf
|
|
.endif
|
|
|
|
.if ${MK_PF} != "no"
|
|
BIN1+= pf.os
|
|
.endif
|
|
|
|
.if ${MK_TCSH} != "no"
|
|
BIN1+= csh.cshrc csh.login csh.logout
|
|
.endif
|
|
|
|
.if ${MK_WIRELESS} != "no"
|
|
BIN1+= regdomain.xml
|
|
.endif
|
|
|
|
# -rwxr-xr-x root:wheel, for the new cron root:wheel
|
|
BIN2= netstart pccard_ether rc.suspend rc.resume
|
|
|
|
MTREE= BSD.include.dist BSD.root.dist BSD.usr.dist BSD.var.dist
|
|
.if ${MK_TESTS} != "no"
|
|
MTREE+= BSD.tests.dist
|
|
.endif
|
|
.if ${MK_SENDMAIL} != "no"
|
|
MTREE+= BSD.sendmail.dist
|
|
.endif
|
|
.if ${MK_DEBUG_FILES} != "no"
|
|
MTREE+= BSD.debug.dist
|
|
.endif
|
|
|
|
PPPCNF= ppp.conf
|
|
|
|
.if ${MK_SENDMAIL} == "no"
|
|
ETCMAIL=mailer.conf aliases
|
|
.else
|
|
ETCMAIL=Makefile README mailer.conf access.sample virtusertable.sample \
|
|
mailertable.sample aliases
|
|
.endif
|
|
|
|
# Special top level files for FreeBSD
|
|
FREEBSD=COPYRIGHT
|
|
|
|
# Sanitize DESTDIR
|
|
DESTDIR:= ${DESTDIR:C://*:/:g}
|
|
|
|
afterinstall:
|
|
.if ${MK_MAN} != "no"
|
|
${_+_}cd ${.CURDIR}/../share/man; ${MAKE} makedb
|
|
.endif
|
|
|
|
distribute:
|
|
${_+_}cd ${.CURDIR} ; ${MAKE} install DESTDIR=${DISTDIR}/${DISTRIBUTION}
|
|
${_+_}cd ${.CURDIR} ; ${MAKE} distribution DESTDIR=${DISTDIR}/${DISTRIBUTION}
|
|
|
|
.include <bsd.endian.mk>
|
|
.if ${TARGET_ENDIANNESS} == "1234"
|
|
CAP_MKDB_ENDIAN?= -l
|
|
PWD_MKDB_ENDIAN?= -L
|
|
.elif ${TARGET_ENDIANNESS} == "4321"
|
|
CAP_MKDB_ENDIAN?= -b
|
|
PWD_MKDB_ENDIAN?= -B
|
|
.else
|
|
CAP_MKDB_ENDIAN?=
|
|
PWD_MKDB_ENDIAN?=
|
|
.endif
|
|
|
|
.if defined(NO_ROOT)
|
|
METALOG.add?= cat -l >> ${METALOG}
|
|
.endif
|
|
|
|
distribution:
|
|
.if !defined(DESTDIR)
|
|
@echo "set DESTDIR before running \"make ${.TARGET}\""
|
|
@false
|
|
.endif
|
|
cd ${.CURDIR}; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
${BIN1} ${DESTDIR}/etc; \
|
|
cap_mkdb ${CAP_MKDB_ENDIAN} ${DESTDIR}/etc/login.conf; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 755 \
|
|
${BIN2} ${DESTDIR}/etc; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 600 \
|
|
master.passwd nsmb.conf opieaccess ${DESTDIR}/etc;
|
|
.if ${MK_AT} == "no"
|
|
sed -i "" -e 's;.*/usr/libexec/atrun;#&;' ${DESTDIR}/etc/crontab
|
|
.endif
|
|
.if ${MK_TCSH} == "no"
|
|
sed -i "" -e 's;/bin/csh;/bin/sh;' ${DESTDIR}/etc/master.passwd
|
|
.endif
|
|
pwd_mkdb ${PWD_MKDB_ENDIAN} -i -p -d ${DESTDIR}/etc \
|
|
${DESTDIR}/etc/master.passwd
|
|
.if defined(NO_ROOT)
|
|
( \
|
|
echo "./etc/login.conf.db type=file mode=0644 uname=root gname=wheel"; \
|
|
echo "./etc/passwd type=file mode=0644 uname=root gname=wheel"; \
|
|
echo "./etc/pwd.db type=file mode=0644 uname=root gname=wheel"; \
|
|
echo "./etc/spwd.db type=file mode=0600 uname=root gname=wheel"; \
|
|
) | ${METALOG.add}
|
|
.endif
|
|
.if ${MK_BLUETOOTH} != "no"
|
|
${_+_}cd ${.CURDIR}/bluetooth; ${MAKE} install
|
|
.endif
|
|
.if ${MK_CASPER} != "no"
|
|
${_+_}cd ${.CURDIR}/casper; ${MAKE} install
|
|
.endif
|
|
${_+_}cd ${.CURDIR}/defaults; ${MAKE} install
|
|
${_+_}cd ${.CURDIR}/devd; ${MAKE} install
|
|
${_+_}cd ${.CURDIR}/gss; ${MAKE} install
|
|
${_+_}cd ${.CURDIR}/periodic; ${MAKE} install
|
|
.if ${MK_PKGBOOTSTRAP} != "no"
|
|
${_+_}cd ${.CURDIR}/pkg; ${MAKE} install
|
|
.endif
|
|
${_+_}cd ${.CURDIR}/rc.d; ${MAKE} install
|
|
${_+_}cd ${.CURDIR}/../gnu/usr.bin/send-pr; ${MAKE} etc-gnats-freefall
|
|
${_+_}cd ${.CURDIR}/../share/termcap; ${MAKE} etc-termcap
|
|
${_+_}cd ${.CURDIR}/../usr.sbin/rmt; ${MAKE} etc-rmt
|
|
${_+_}cd ${.CURDIR}/pam.d; ${MAKE} install
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 0444 \
|
|
${BSM_ETC_OPEN_FILES} ${BSM_ETC_DIR}
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 0600 \
|
|
${BSM_ETC_RESTRICTED_FILES} ${BSM_ETC_DIR}
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 0500 \
|
|
${BSM_ETC_EXEC_FILES} ${BSM_ETC_DIR}
|
|
.if ${MK_UNBOUND} != "no"
|
|
if [ ! -e ${DESTDIR}/etc/unbound ]; then \
|
|
${INSTALL_SYMLINK} ../var/unbound ${DESTDIR}/etc/unbound; \
|
|
fi
|
|
.endif
|
|
.if ${MK_SENDMAIL} != "no"
|
|
${_+_}cd ${.CURDIR}/sendmail; ${MAKE} distribution
|
|
.endif
|
|
.if ${MK_OPENSSH} != "no"
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
${SSH} ${DESTDIR}/etc/ssh
|
|
.endif
|
|
.if ${MK_OPENSSL} != "no"
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
${SSL} ${DESTDIR}/etc/ssl
|
|
.endif
|
|
.if ${MK_KERBEROS} != "no"
|
|
cd ${.CURDIR}/root; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
dot.k5login ${DESTDIR}/root/.k5login;
|
|
.endif
|
|
cd ${.CURDIR}/root; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
dot.profile ${DESTDIR}/root/.profile; \
|
|
rm -f ${DESTDIR}/.profile; \
|
|
ln ${DESTDIR}/root/.profile ${DESTDIR}/.profile
|
|
.if ${MK_TCSH} != "no"
|
|
cd ${.CURDIR}/root; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
dot.cshrc ${DESTDIR}/root/.cshrc; \
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
dot.login ${DESTDIR}/root/.login; \
|
|
rm -f ${DESTDIR}/.cshrc; \
|
|
ln ${DESTDIR}/root/.cshrc ${DESTDIR}/.cshrc
|
|
.endif
|
|
cd ${.CURDIR}/mtree; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 444 \
|
|
${MTREE} ${DESTDIR}/etc/mtree
|
|
.if ${MK_PPP} != "no"
|
|
cd ${.CURDIR}/ppp; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 600 \
|
|
${PPPCNF} ${DESTDIR}/etc/ppp
|
|
.endif
|
|
.if ${MK_MAIL} != "no"
|
|
cd ${.CURDIR}/mail; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 \
|
|
${ETCMAIL} ${DESTDIR}/etc/mail
|
|
if [ -d ${DESTDIR}/etc/mail -a -f ${DESTDIR}/etc/mail/aliases -a \
|
|
! -f ${DESTDIR}/etc/aliases ]; then \
|
|
ln -s mail/aliases ${DESTDIR}/etc/aliases; \
|
|
fi
|
|
.endif
|
|
${INSTALL} -o ${BINOWN} -g operator -m 664 /dev/null \
|
|
${DESTDIR}/etc/dumpdates
|
|
${INSTALL} -o nobody -g ${BINGRP} -m 644 /dev/null \
|
|
${DESTDIR}/var/db/locate.database
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 644 ${.CURDIR}/minfree \
|
|
${DESTDIR}/var/crash
|
|
cd ${.CURDIR}/..; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 444 \
|
|
${FREEBSD} ${DESTDIR}/
|
|
.if ${MK_BOOT} != "no"
|
|
.if exists(${.CURDIR}/../sys/${MACHINE}/conf/GENERIC.hints)
|
|
${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 444 \
|
|
${.CURDIR}/../sys/${MACHINE}/conf/GENERIC.hints \
|
|
${DESTDIR}/boot/device.hints
|
|
.endif
|
|
.endif
|
|
.if ${MK_NIS} == "no"
|
|
sed -i "" -e 's/.*_compat:/# &/' -e 's/compat$$/files/' \
|
|
${DESTDIR}/etc/nsswitch.conf
|
|
.endif
|
|
|
|
MTREE_CMD?= mtree
|
|
|
|
MTREES= mtree/BSD.root.dist / \
|
|
mtree/BSD.var.dist /var \
|
|
mtree/BSD.usr.dist /usr \
|
|
mtree/BSD.include.dist /usr/include
|
|
.if ${MK_DEBUG_FILES} != "no"
|
|
MTREES+= mtree/BSD.debug.dist /usr/lib
|
|
.endif
|
|
.if ${MK_GROFF} != "no"
|
|
MTREES+= mtree/BSD.groff.dist /usr
|
|
.endif
|
|
.if ${MK_TESTS} != "no"
|
|
MTREES+= mtree/BSD.tests.dist /usr
|
|
.endif
|
|
.if ${MK_SENDMAIL} != "no"
|
|
MTREES+= mtree/BSD.sendmail.dist /
|
|
.endif
|
|
.for mtree in ${LOCAL_MTREE}
|
|
MTREES+= ../${mtree} /
|
|
.endfor
|
|
|
|
distrib-dirs: ${MTREES:N/*}
|
|
@set ${MTREES}; \
|
|
while test $$# -ge 2; do \
|
|
m=${.CURDIR}/$$1; \
|
|
shift; \
|
|
d=${DESTDIR}$$1; \
|
|
shift; \
|
|
${ECHO} ${MTREE_CMD} -deU ${MTREE_FOLLOWS_SYMLINKS} \
|
|
-f $$m -p $$d; \
|
|
${MTREE_CMD} -deU ${MTREE_FOLLOWS_SYMLINKS} -f $$m -p $$d; \
|
|
done; true
|
|
.if defined(NO_ROOT)
|
|
@set ${MTREES}; \
|
|
while test $$# -ge 2; do \
|
|
m=${.CURDIR}/$$1; \
|
|
shift; \
|
|
d=$$1; \
|
|
test "$$d" == "/" && d=""; \
|
|
d=${DISTBASE}$$d; \
|
|
shift; \
|
|
${ECHO} "${MTREE_CMD:N-W} -C -f $$m -K uname,gname | " \
|
|
"sed s#^\.#.$$d# | ${METALOG.add}" ; \
|
|
${MTREE_CMD:N-W} -C -f $$m -K uname,gname | sed s#^\.#.$$d# | \
|
|
${METALOG.add} ; \
|
|
done; true
|
|
.endif
|
|
${INSTALL_SYMLINK} usr/src/sys ${DESTDIR}/sys
|
|
cd ${DESTDIR}/usr/share/man; \
|
|
for mandir in man*; do \
|
|
${INSTALL_SYMLINK} ../$$mandir \
|
|
${DESTDIR}/usr/share/man/en.ISO8859-1/; \
|
|
${INSTALL_SYMLINK} ../$$mandir \
|
|
${DESTDIR}/usr/share/man/en.UTF-8/; \
|
|
done
|
|
cd ${DESTDIR}/usr/share/openssl/man; \
|
|
for mandir in man*; do \
|
|
${INSTALL_SYMLINK} ../$$mandir \
|
|
${DESTDIR}/usr/share/openssl/man/en.ISO8859-1/; \
|
|
done
|
|
set - `grep "^[a-zA-Z]" ${.CURDIR}/man.alias`; \
|
|
while [ $$# -gt 0 ] ; do \
|
|
${INSTALL_SYMLINK} "$$2" "${DESTDIR}/usr/share/man/$$1"; \
|
|
${INSTALL_SYMLINK} "$$2" \
|
|
"${DESTDIR}/usr/share/openssl/man/$$1"; \
|
|
shift; shift; \
|
|
done
|
|
set - `grep "^[a-zA-Z]" ${.CURDIR}/nls.alias`; \
|
|
while [ $$# -gt 0 ] ; do \
|
|
${INSTALL_SYMLINK} "$$2" "${DESTDIR}/usr/share/nls/$$1"; \
|
|
shift; shift; \
|
|
done
|
|
|
|
etc-examples:
|
|
cd ${.CURDIR}; ${INSTALL} -o ${BINOWN} -g ${BINGRP} -m 444 \
|
|
${BIN1} ${BIN2} nsmb.conf opieaccess \
|
|
${DESTDIR}/usr/share/examples/etc
|
|
${_+_}cd ${.CURDIR}/defaults; ${MAKE} install \
|
|
DESTDIR=${DESTDIR}/usr/share/examples
|
|
|
|
.include <bsd.prog.mk>
|