3af55c5cb3
Instead of calling 'su' to switch the user, use own implementation of this. Thanks to PAM it's pretty simple. The main reason is to have control over process waiting for session termination (to call pam_close_sesion/pam_end). Especially we don't want it to keep std* fds open, which would prevent qrexec-agent from receiving EOF when one of them will be closed. Also, this will preserve QREXEC_AGENT_PID environment variable. Fixes QubesOS/qubes-issues#2851
24 lines
967 B
Makefile
24 lines
967 B
Makefile
CC=gcc
|
|
CFLAGS+=-I. -g -O2 -Wall -Wextra -Werror -pie -fPIC `pkg-config --cflags vchan-$(BACKEND_VMM)`
|
|
LDFLAGS=-pie
|
|
LDLIBS=`pkg-config --libs vchan-$(BACKEND_VMM)` -lqrexec-utils -lpam
|
|
|
|
all: qrexec-agent qrexec-client-vm qrexec-fork-server
|
|
qrexec-agent: qrexec-agent.o qrexec-agent-data.o
|
|
qrexec-fork-server: qrexec-fork-server.o qrexec-agent-data.o
|
|
qrexec-client-vm: qrexec-client-vm.o qrexec-agent-data.o
|
|
clean:
|
|
rm -f *.o *~ qrexec-agent qrexec-client-vm
|
|
|
|
install:
|
|
install -d $(DESTDIR)/etc/qubes-rpc
|
|
install -d $(DESTDIR)/usr/lib/qubes $(DESTDIR)/usr/bin
|
|
install qrexec-agent $(DESTDIR)/usr/lib/qubes
|
|
install qrexec-client-vm $(DESTDIR)/usr/bin
|
|
ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec-client-vm
|
|
ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec_client_vm
|
|
install qrexec-fork-server $(DESTDIR)/usr/bin
|
|
install qubes-rpc-multiplexer $(DESTDIR)/usr/lib/qubes
|
|
install -D -m 0644 qrexec.pam $(DESTDIR)/etc/pam.d/qrexec
|
|
|