Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
7667b0dc16
core-agent-linux/qrexec/Makefile

30 lines
1.2 KiB
Makefile
Raw Normal View History

rpm: use build flags provided by the distribution Among other things, this enable various hardening options. QubesOS/qubes-issues#2259
2018-08-01 02:20:57 +02:00
CC ?= gcc
CFLAGS += -I. -g -O2 -Wall -Wextra -Werror -pie -fPIC `pkg-config --cflags vchan-$(BACKEND_VMM)`
LDFLAGS += -pie
LDLIBS = `pkg-config --libs vchan-$(BACKEND_VMM)` -lqrexec-utils -lpam
Add qrexec back, use qubes-utils libraries for common code
2013-03-20 06:21:16 +01:00
qrexec: add simple "fork server" to spawn new processes inside user session This process should be started from user session (most likely qubes-session). New processes (of that user) will be created as children of that session making logind and such crap happy. This should also solve problems with EOF transmission (no additional "su" process) and prevent loading all the environment multiple times.
2015-02-17 04:18:34 +01:00
all: qrexec-agent qrexec-client-vm qrexec-fork-server
qrexec: new protocol - direct data vchan connections
2013-12-27 06:07:33 +01:00
qrexec-agent: qrexec-agent.o qrexec-agent-data.o
qrexec: add simple "fork server" to spawn new processes inside user session This process should be started from user session (most likely qubes-session). New processes (of that user) will be created as children of that session making logind and such crap happy. This should also solve problems with EOF transmission (no additional "su" process) and prevent loading all the environment multiple times.
2015-02-17 04:18:34 +01:00
qrexec-fork-server: qrexec-fork-server.o qrexec-agent-data.o
qrexec: handle data vchan directly from qrexec-client-vm This way qrexec-client-vm will have much more information, at least: - will know whether the service call was accepted or refused - potentially will know remote process exit code This commit implements the first point - the local process will not be started if service call was refused.
2015-03-16 21:10:25 +01:00
qrexec-client-vm: qrexec-client-vm.o qrexec-agent-data.o
Add qrexec back, use qubes-utils libraries for common code
2013-03-20 06:21:16 +01:00
clean:
rm -f *.o *~ qrexec-agent qrexec-client-vm
install:
install -d $(DESTDIR)/etc/qubes-rpc
qrexec: add simple "fork server" to spawn new processes inside user session This process should be started from user session (most likely qubes-session). New processes (of that user) will be created as children of that session making logind and such crap happy. This should also solve problems with EOF transmission (no additional "su" process) and prevent loading all the environment multiple times.
2015-02-17 04:18:34 +01:00
install -d $(DESTDIR)/usr/lib/qubes $(DESTDIR)/usr/bin
Add qrexec back, use qubes-utils libraries for common code
2013-03-20 06:21:16 +01:00
install qrexec-agent $(DESTDIR)/usr/lib/qubes
qrexec: move qrexec-client-vm to /usr/bin
2015-03-17 23:11:47 +01:00
install qrexec-client-vm $(DESTDIR)/usr/bin
ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec-client-vm
ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec_client_vm
qrexec: add simple "fork server" to spawn new processes inside user session This process should be started from user session (most likely qubes-session). New processes (of that user) will be created as children of that session making logind and such crap happy. This should also solve problems with EOF transmission (no additional "su" process) and prevent loading all the environment multiple times.
2015-02-17 04:18:34 +01:00
install qrexec-fork-server $(DESTDIR)/usr/bin
Add qrexec back, use qubes-utils libraries for common code
2013-03-20 06:21:16 +01:00
install qubes-rpc-multiplexer $(DESTDIR)/usr/lib/qubes
qrexec: ship pam configuration for debian Debian have different base pam config files to include than Fedora. Fixes QubesOS/qubes-issues#2903
2017-07-06 20:15:02 +02:00
ifeq ($(shell lsb_release -is), Debian)
install -D -m 0644 qrexec.pam.debian $(DESTDIR)/etc/pam.d/qrexec
archlinux: ship pam.d/qrexec as a replacement of using su
2017-10-23 08:09:34 +02:00
else ifeq ($(shell lsb_release -is), Arch)
install -D -m 0644 qrexec.pam.archlinux $(DESTDIR)/etc/pam.d/qrexec
qrexec: ship pam configuration for debian Debian have different base pam config files to include than Fedora. Fixes QubesOS/qubes-issues#2903
2017-07-06 20:15:02 +02:00
else
qrexec: use PAM directly instead of calling su to setup the session Instead of calling 'su' to switch the user, use own implementation of this. Thanks to PAM it's pretty simple. The main reason is to have control over process waiting for session termination (to call pam_close_sesion/pam_end). Especially we don't want it to keep std* fds open, which would prevent qrexec-agent from receiving EOF when one of them will be closed. Also, this will preserve QREXEC_AGENT_PID environment variable. Fixes QubesOS/qubes-issues#2851
2014-10-31 01:07:49 +01:00
install -D -m 0644 qrexec.pam $(DESTDIR)/etc/pam.d/qrexec
qrexec: ship pam configuration for debian Debian have different base pam config files to include than Fedora. Fixes QubesOS/qubes-issues#2903
2017-07-06 20:15:02 +02:00
endif
Add qrexec back, use qubes-utils libraries for common code
2013-03-20 06:21:16 +01:00
Reference in New Issue Copy Permalink