c4ec9fdf47
kernel access control. Hook up various policy modules to the kernel build. Note that a number of these modules require futher entry point commits in the remainder of the kernel to become fully functional, but enough of the pieces are in place to allow experimentation. Note also that it would be desirable to not build the mac_*.ko modules if 'options MAC' is not defined in the kernel configuration, because the resulting modules are not useful without the kernel option. There doesn't appear to be precedent for a way to do this -- for example, we allow ipfw.ko to be built even if 'options NETINET' isn't defined. Suggests welcomed on the "best" way to do this. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
235 lines
2.4 KiB
Makefile
235 lines
2.4 KiB
Makefile
# $FreeBSD$
|
|
|
|
.if exists(${.CURDIR}/../crypto) && !defined(NOCRYPT)
|
|
_random= random
|
|
.endif
|
|
|
|
SUBDIR= 3dfx \
|
|
accf_data \
|
|
accf_http \
|
|
agp \
|
|
aha \
|
|
aio \
|
|
amr \
|
|
an \
|
|
aue \
|
|
bge \
|
|
bridge \
|
|
ccd \
|
|
coda \
|
|
cue \
|
|
dc \
|
|
de \
|
|
digi \
|
|
dummynet \
|
|
ed \
|
|
fdescfs \
|
|
fdc \
|
|
fxp \
|
|
gx \
|
|
if_disc \
|
|
if_ef \
|
|
if_gif \
|
|
if_faith \
|
|
if_ppp \
|
|
if_sl \
|
|
if_stf \
|
|
if_tap \
|
|
if_tun \
|
|
if_vlan \
|
|
ip6fw \
|
|
ip_mroute_mod \
|
|
ipfw \
|
|
ispfw \
|
|
joy \
|
|
kue \
|
|
lge \
|
|
libiconv \
|
|
libmchain \
|
|
lnc \
|
|
lpt \
|
|
mac_biba \
|
|
mac_bsdextended \
|
|
mac_ifoff \
|
|
mac_mls \
|
|
mac_none \
|
|
mac_seeotheruids \
|
|
mac_test \
|
|
md \
|
|
mii \
|
|
mlx \
|
|
msdosfs \
|
|
nfsclient \
|
|
nfsserver \
|
|
nge \
|
|
nmdm \
|
|
ntfs \
|
|
nullfs \
|
|
pcn \
|
|
plip \
|
|
portalfs \
|
|
ppbus \
|
|
ppi \
|
|
pps \
|
|
procfs \
|
|
pseudofs \
|
|
${_random} \
|
|
rl \
|
|
rp \
|
|
sf \
|
|
sis \
|
|
sk \
|
|
sn \
|
|
snp \
|
|
ste \
|
|
sym \
|
|
syscons \
|
|
sysvipc \
|
|
ti \
|
|
tl \
|
|
twe \
|
|
tx \
|
|
txp \
|
|
ucom \
|
|
udbp \
|
|
ufm \
|
|
udf \
|
|
ugen \
|
|
uhid \
|
|
ukbd \
|
|
ulpt \
|
|
umapfs \
|
|
umass \
|
|
umodem \
|
|
ums \
|
|
unionfs \
|
|
uplcom \
|
|
urio \
|
|
usb \
|
|
uscanner \
|
|
uvisor \
|
|
uvscom \
|
|
vpo \
|
|
vr \
|
|
vx \
|
|
wb \
|
|
xl
|
|
|
|
.if !defined(NO_IPFILTER) && ${MACHINE_ARCH} != "ia64"
|
|
SUBDIR+=ipfilter
|
|
.endif
|
|
|
|
#removed while KSE settles in:
|
|
# ncp \
|
|
# nwfs \
|
|
# XXX some of these can move to the general case when de-i386'ed
|
|
.if ${MACHINE_ARCH} == "i386"
|
|
SUBDIR+=aac \
|
|
acpi \
|
|
aic \
|
|
ar \
|
|
arcnet \
|
|
apm \
|
|
asr \
|
|
atspeaker \
|
|
bktr \
|
|
cam \
|
|
cd9660 \
|
|
ciss \
|
|
cm \
|
|
coff \
|
|
drm \
|
|
el \
|
|
em \
|
|
fe \
|
|
fpu \
|
|
gnufpu \
|
|
hea \
|
|
hfa \
|
|
ibcs2 \
|
|
iir \
|
|
linprocfs \
|
|
linux \
|
|
lomac \
|
|
ncv \
|
|
nsp \
|
|
mly \
|
|
netgraph \
|
|
oltr \
|
|
pecoff \
|
|
ray \
|
|
s3 \
|
|
sbni \
|
|
scsi_low \
|
|
smbfs \
|
|
sound \
|
|
splash \
|
|
sppp \
|
|
sr \
|
|
stg \
|
|
streams \
|
|
vesa \
|
|
vinum \
|
|
wi \
|
|
xe
|
|
.endif
|
|
|
|
.if ${MACHINE_ARCH} == "ia64"
|
|
SUBDIR+=aic \
|
|
arcnet \
|
|
ciss \
|
|
cm \
|
|
coff \
|
|
el \
|
|
em \
|
|
fe \
|
|
iir \
|
|
mly \
|
|
ray \
|
|
scsi_low \
|
|
smbfs \
|
|
splash \
|
|
sr \
|
|
streams \
|
|
wi \
|
|
xe
|
|
.endif
|
|
|
|
.if ${MACHINE} == "pc98"
|
|
SUBDIR+=pmc \
|
|
snc \
|
|
vinum
|
|
.endif
|
|
|
|
.if ${MACHINE_ARCH} == "alpha"
|
|
SUBDIR+=cam \
|
|
cd9660 \
|
|
linprocfs \
|
|
linux \
|
|
lomac \
|
|
osf1 \
|
|
sound \
|
|
sppp \
|
|
vinum
|
|
.endif
|
|
|
|
.if defined(WANT_EXT2FS_MODULE)
|
|
SUBDIR+=ext2fs
|
|
.endif
|
|
|
|
.if defined(MODULES_OVERRIDE) && !defined(ALL_MODULES)
|
|
SUBDIR=${MODULES_OVERRIDE}
|
|
.endif
|
|
|
|
# Calling kldxref(8) for each module is expensive.
|
|
.if !defined(NO_XREF)
|
|
.MAKEFLAGS:= ${.MAKEFLAGS} -DNO_XREF
|
|
afterinstall:
|
|
@if type kldxref >/dev/null 2>&1; then \
|
|
${ECHO} kldxref ${DESTDIR}${KMODDIR}; \
|
|
kldxref ${DESTDIR}${KMODDIR}; \
|
|
fi
|
|
.endif
|
|
|
|
.include <bsd.subdir.mk>
|