1# $MirOS: src/libexec/anoncvssh/Makefile,v 1.8 2008/11/29 17:03:53 tg Exp $
2
3# Note: you DO want to compile this, as well as the anoncvsbin
4# and rsync, statically. It is not possible, however, to do that
5# when your system uses PAM authentication. That's why, use of
6# systems with PAM (such as GNU libc based systems) is strongly
7# disrecommended - better alternatives such as BSD auth exist.
8
9# The following line defines where your CVS Root (repository) lives.
10DEFS+=		-DLOCALROOT=\"/cvs\"
11
12# Two ways to specify the user/host part of $CVSROOT:
13# a) Simple - just specify user@host
14#DEFS+=		-DHOSTNAME=\"_anoncvs@host.domain.com\"
15# b) Split - define user and host (default)
16#    Advantage: a warning will be issued if someone
17#    other than the user specified (or root) invokes us.
18#DEFS+=		-DANONCVS_USER=\"_anoncvs\" -DFQDN=\"host.domain.com\"
19DEFS+=		-DANONUSERLIST='"_anoncvs", "_rsync", "anoncvs", "rsync"'
20
21# Enable rsync for the user.
22# Warning: this also makes rsync writes possible
23# if the file ownership and permissions don't forbid it!
24DEFS+=		-DACCESS_RSYNC
25# if not using the standard path...
26#DEFS+=		-DRSYNC=\"/bin/rsync\"
27
28# Specify if you *DON'T* want to set CVSREADONLYFS=1.
29# This can be used if you want to give a user CVS
30# read/write access, but no shell account. Use with care!
31#DEFS+=		-DACCESS_READWRITE
32
33# If there is more than one person with ACCESS_READWRITE
34# and the OS does not implement nullfs correctly (vnodes
35# just don't like to show up in more than one place) put
36# all of their homes and the CVS Root into a common dir,
37# ensure nobody else can write to it (the common dir can
38# still be the _anoncvs user's home) and define this:
39#XXX rework this some time
40#DEFS+=		-DCHROOT_PARENT_DIR
41
42# Specify this if you want to allow :pserver: access.
43# *Not recommended* because pserver is a security hole!
44#DEFS+=		-DACCESS_PSERVER
45
46# Specify this if you want to log :pserver: connections
47# and unauthorised access.
48DEFS+=		-DUSE_SYSLOG
49
50# Name of this programme. Set e.g. to "anoncvssh.mirbsd"
51# if running more than one anoncvs user, and for read-
52# write users, to "anoncvs-username" (thus you can place
53# them in the common parent dir).
54PROG?=		anoncvssh${PROGSUFF}
55
56# Use 'chflags uchg /usr/libexec/anoncvssh' to prevent the
57# generated file from being overwritten once you customised
58# this Makefile. Use ...nouchg... to disable the protection
59# whenever you are going to update this.
60
61CPPFLAGS+=	${DEFS} -DANONCVSSH_NAME=\"${PROG}\"
62CDIAGFLAGS+=	-Wno-cast-qual
63BINOWN=		root
64BINGRP=		_anoncvs
65BINMODE=	4110
66BINDIR?=	/usr/libexec
67LDFLAGS+=	-static
68SRCS=		anoncvssh.c
69NOMAN=		yes
70
71anoncvssh.o: Makefile
72
73.include <bsd.prog.mk>
74