NetBSD/usr.bin/login/Makefile

#	$NetBSD: Makefile,v 1.51 2009/12/29 19:26:13 christos Exp $
#	@(#)Makefile	8.1 (Berkeley) 7/19/93

WARNS?=	2	# XXX -Wcast-qual issues

.include <bsd.own.mk>

USE_FORT?= yes	# setuid
PROG=	login
SRCS=	copyrightstr.c
DPADD+=	${LIBUTIL} ${LIBCRYPT}
LDADD+=	-lutil -lcrypt
BINOWN=	root
BINMODE=4555

SRCS+=	common.c
.if (${USE_PAM} != "no")
SRCS+=	login_pam.c
LDADD+=	-lpam ${PAM_STATIC_LDADD}
DPADD+= ${LIBPAM} ${PAM_STATIC_DPADD}
.else	# USE_PAM == no
SRCS+=	login.c
CPPFLAGS+=-DLOGIN_CAP -DSUPPORT_UTMP -DSUPPORT_UTMPX

.if (${USE_KERBEROS} != "no")
SRCS+= k5login.c
CPPFLAGS+=-DKERBEROS5 -I${DESTDIR}/usr/include/krb5
DPADD+=	${LIBKRB5} ${LIBASN1}
LDADD+= -lkrb5 -lasn1

DPADD+=	${LIBCRYPTO} ${LIBROKEN} ${LIBCOM_ERR}
LDADD+=	-lcrypto -lroken -lcom_err
.endif

.if (${USE_SKEY} != "no")
CPPFLAGS+=-DSKEY
DPADD+= ${LIBSKEY}
LDADD+=	-lskey
.endif
.endif	# USE_PAM == no

CLEANFILES+=	copyrightstr.c

copyrightstr.c: ${NETBSDSRCDIR}/sys/conf/copyright
	${_MKTARGET_CREATE}
	rm -f ${.TARGET}
	${TOOL_AWK} '\
		BEGIN { print "const char copyrightstr[] =" }\
		{ print "\""$$0"\\n\""}\
		END { print "\"\\n\";" }\
	' ${.ALLSRC} > ${.TARGET}


.include <bsd.prog.mk>
PR/42540: Ed Ravin: /usr/bin/login does not log normal logins, and does not log ip addresses. - Factor out the common code in login.c and login_pam.c into common.c - Always log a login event - Check passed in sockaddr against the one from getpeername(2). 2009-12-29 22:26:13 +03:00			`# $NetBSD: Makefile,v 1.51 2009/12/29 19:26:13 christos Exp $`
Merged with 4.4lite. Changed to conform to NetBSD's new RCS Id convention. 1994-12-23 09:52:56 +03:00			`# @(#)Makefile 8.1 (Berkeley) 7/19/93`
initial import of 386bsd-0.1 sources 1993-03-21 12:45:37 +03:00
Enable WARNS=4 by default for usr.bin, except for: awk bdes checknr compile_et error gss hxtool kgetcred kinit klist ldd less lex locale login m4 man menuc mk_cmds mklocale msgc openssl rpcgen rpcinfo sdiff spell ssh string2key telnet tn3270 verify_krb5_conf xlint 2009-04-15 02:15:16 +04:00			`WARNS?= 2 # XXX -Wcast-qual issues`

Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description. 2000-06-23 10:01:10 +04:00			`.include <bsd.own.mk>`

Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to various string and memory copy and set functions (as well as a few system calls and other miscellany) where known at function entry. RedHat has evidently built all "core system packages" with this option for some time. This option should be used at the top of Makefiles (or Makefile.inc where this is used for subdirectories) but after any setting of LIB. This is only useful for userland code, and cannot be used in libc or in any code which includes the libc internals, because it overrides certain libc functions with macros. Some effort has been made to make USE_FORT=yes work correctly for a full-system build by having the bsd.sys.mk logic disable the feature where it should not be used (libc, libssp iteself, the kernel) but no attempt has been made to build the entire system with USE_FORT and doing so will doubtless expose numerous bugs and misfeatures. Adjust the system build so that all programs and libraries that are setuid, directly handle network data (including serial comm data), perform authentication, or appear likely to have (or have a history of having) data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default, with the exception of libc, which cannot use USE_FORT and thus uses only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no per-directory or in a system build will disable if desired. 2007-05-28 16:06:17 +04:00			`USE_FORT?= yes # setuid`
initial import of 386bsd-0.1 sources 1993-03-21 12:45:37 +03:00			`PROG= login`
Add PAM support to login(8) 2005-01-23 12:47:43 +03:00			`SRCS= copyrightstr.c`
CFLAGS->CPPFLAGS; Conditionalize SKEY 1997-10-11 23:19:11 +04:00			`DPADD+= ${LIBUTIL} ${LIBCRYPT}`
			`LDADD+= -lutil -lcrypt`
Minor changes. 1997-10-12 16:54:55 +04:00			`BINOWN= root`
			`BINMODE=4555`
Add PAM support to login(8) 2005-01-23 12:47:43 +03:00
PR/42540: Ed Ravin: /usr/bin/login does not log normal logins, and does not log ip addresses. - Factor out the common code in login.c and login_pam.c into common.c - Always log a login event - Check passed in sockaddr against the one from getpeername(2). 2009-12-29 22:26:13 +03:00			`SRCS+= common.c`
Add PAM support to login(8) 2005-01-23 12:47:43 +03:00			`.if (${USE_PAM} != "no")`
			`SRCS+= login_pam.c`
Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compiling with MKPIC=no, possibly because the target does not support shared libraries, these include libraries required to resolve all symbols which end up referenced from PAM-using applications. The libraries presently required are -lcrypt, -lrpcsvc and -lutil. Add use of these variables which are currently set up to use PAM, so that they compile when MKPIC=no. Also, in the telnetd case, reorder the order of the libraries, so that libtelnet.a comes before -ltermcap and -lutil, again to fix link error when MKPIC=no. Discussed with thorpej and christos. 2005-03-04 23:41:08 +03:00			`LDADD+= -lpam ${PAM_STATIC_LDADD}`
			`DPADD+= ${LIBPAM} ${PAM_STATIC_DPADD}`
Be consistent about making USE_PAM!=no be exclusive to USE_SKEY!=no. 2008-04-06 13:54:37 +04:00			`.else # USE_PAM == no`
Add PAM support to login(8) 2005-01-23 12:47:43 +03:00			`SRCS+= login.c`
make this compile without SUPPORT_UTMPX 2002-07-28 02:58:07 +04:00			`CPPFLAGS+=-DLOGIN_CAP -DSUPPORT_UTMP -DSUPPORT_UTMPX`
CFLAGS->CPPFLAGS; Conditionalize SKEY 1997-10-11 23:19:11 +04:00
Add PAM support to login(8) 2005-01-23 12:47:43 +03:00			`.if (${USE_KERBEROS} != "no")`
			`SRCS+= k5login.c`
			`CPPFLAGS+=-DKERBEROS5 -I${DESTDIR}/usr/include/krb5`
			`DPADD+= ${LIBKRB5} ${LIBASN1}`
			`LDADD+= -lkrb5 -lasn1`

			`DPADD+= ${LIBCRYPTO} ${LIBROKEN} ${LIBCOM_ERR}`
			`LDADD+= -lcrypto -lroken -lcom_err`
			`.endif`

Split the notion of building Hesiod, Kerberos, S/key, and YP infrastructure and using that infrastructure in programs. * MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building of the infratsructure (libraries, support programs, etc.) * USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control building of support for using the corresponding API in various libraries/programs that can use it. As discussed on tech-toolchain. 2002-03-22 21:10:19 +03:00			`.if (${USE_SKEY} != "no")`
Minor changes. 1997-10-12 16:54:55 +04:00			`CPPFLAGS+=-DSKEY`
CFLAGS->CPPFLAGS; Conditionalize SKEY 1997-10-11 23:19:11 +04:00			`DPADD+= ${LIBSKEY}`
			`LDADD+= -lskey`
			`.endif`
Be consistent about making USE_PAM!=no be exclusive to USE_SKEY!=no. 2008-04-06 13:54:37 +04:00			`.endif # USE_PAM == no`
some changes to make Kerberos a bit easier to use. from Michael Graff <explorer@vorpal.com>, with some work by myself... 1994-03-30 06:49:15 +04:00
Generate the copyright string from sys/conf/copyright rather than replicating it here. Idea from Simon Burge. 2004-01-05 06:53:10 +03:00			`CLEANFILES+= copyrightstr.c`

			`copyrightstr.c: ${NETBSDSRCDIR}/sys/conf/copyright`
			`${_MKTARGET_CREATE}`
			`rm -f ${.TARGET}`
Use ${TOOL_AWK} instead of ${AWK} or plain "awk" in make commands. Pass AWK=${TOOL_AWK:Q} to shell scripts that use awk. 2008-10-20 02:05:23 +04:00			`${TOOL_AWK} '\`
Generate the copyright string from sys/conf/copyright rather than replicating it here. Idea from Simon Burge. 2004-01-05 06:53:10 +03:00			`BEGIN { print "const char copyrightstr[] =" }\`
			`{ print "\""$$0"\\n\""}\`
			`END { print "\"\\n\";" }\`
			`' ${.ALLSRC} > ${.TARGET}`

Build domestic login on domestic systems. Incorporated (minor) diff from domestic man page. 1999-03-05 04:07:56 +03:00
Use bsd.crypto.mk. 1999-07-13 02:11:37 +04:00			`.include <bsd.prog.mk>`