Annotation of embedaddon/sudo/configure.ac, revision 1.1
1.1 ! misho 1: dnl
! 2: dnl Use the top-level autogen.sh script to generate configure and config.h.in
! 3: dnl
! 4: dnl Copyright (c) 1994-1996,1998-2014 Todd C. Miller <Todd.Miller@courtesan.com>
! 5: dnl
! 6: AC_PREREQ([2.59])
! 7: AC_INIT([sudo], [1.8.10p3], [http://www.sudo.ws/bugs/], [sudo])
! 8: AC_CONFIG_HEADER([config.h pathnames.h])
! 9: AC_CONFIG_SRCDIR([src/sudo.c])
! 10: dnl
! 11: dnl Note: this must come after AC_INIT
! 12: dnl
! 13: AC_MSG_NOTICE([Configuring Sudo version $PACKAGE_VERSION])
! 14: dnl
! 15: dnl Variables that get substituted in the Makefile and man pages
! 16: dnl
! 17: AC_SUBST([HAVE_BSM_AUDIT])
! 18: AC_SUBST([SHELL])
! 19: AC_SUBST([LIBTOOL])
! 20: AC_SUBST([CFLAGS])
! 21: AC_SUBST([PROGS])
! 22: AC_SUBST([CPPFLAGS])
! 23: AC_SUBST([LDFLAGS])
! 24: AC_SUBST([SUDOERS_LDFLAGS])
! 25: AC_SUBST([LT_LDFLAGS])
! 26: AC_SUBST([LT_LDMAP])
! 27: AC_SUBST([LT_LDOPT])
! 28: AC_SUBST([LT_LDDEP])
! 29: AC_SUBST([LT_LDEXPORTS])
! 30: AC_SUBST([COMMON_OBJS])
! 31: AC_SUBST([SUDOERS_OBJS])
! 32: AC_SUBST([SUDO_OBJS])
! 33: AC_SUBST([LIBS])
! 34: AC_SUBST([SUDO_LIBS])
! 35: AC_SUBST([SUDOERS_LIBS])
! 36: AC_SUBST([STATIC_SUDOERS])
! 37: AC_SUBST([NET_LIBS])
! 38: AC_SUBST([AFS_LIBS])
! 39: AC_SUBST([REPLAY_LIBS])
! 40: AC_SUBST([GETGROUPS_LIB])
! 41: AC_SUBST([OSDEFS])
! 42: AC_SUBST([AUTH_OBJS])
! 43: AC_SUBST([MANTYPE])
! 44: AC_SUBST([MANDIRTYPE])
! 45: AC_SUBST([MANCOMPRESS])
! 46: AC_SUBST([MANCOMPRESSEXT])
! 47: AC_SUBST([SHLIB_MODE])
! 48: AC_SUBST([SHLIB_EXT])
! 49: AC_SUBST([SUDOERS_MODE])
! 50: AC_SUBST([SUDOERS_UID])
! 51: AC_SUBST([SUDOERS_GID])
! 52: AC_SUBST([DEVEL])
! 53: AC_SUBST([BAMAN])
! 54: AC_SUBST([LCMAN])
! 55: AC_SUBST([PSMAN])
! 56: AC_SUBST([SEMAN])
! 57: AC_SUBST([devdir])
! 58: AC_SUBST([mansectsu])
! 59: AC_SUBST([mansectform])
! 60: AC_SUBST([mansrcdir])
! 61: AC_SUBST([NOEXECFILE])
! 62: AC_SUBST([NOEXECDIR])
! 63: AC_SUBST([SOEXT])
! 64: AC_SUBST([noexec_file])
! 65: AC_SUBST([sesh_file])
! 66: AC_SUBST([INSTALL_NOEXEC])
! 67: AC_SUBST([DONT_LEAK_PATH_INFO])
! 68: AC_SUBST([BSDAUTH_USAGE])
! 69: AC_SUBST([SELINUX_USAGE])
! 70: AC_SUBST([LDAP])
! 71: AC_SUBST([LOGINCAP_USAGE])
! 72: AC_SUBST([ZLIB])
! 73: AC_SUBST([ZLIB_SRC])
! 74: AC_SUBST([LIBTOOL_DEPS])
! 75: AC_SUBST([ac_config_libobj_dir])
! 76: AC_SUBST([CONFIGURE_ARGS])
! 77: AC_SUBST([LIBDL])
! 78: AC_SUBST([LT_STATIC])
! 79: AC_SUBST([LIBINTL])
! 80: AC_SUBST([SUDO_NLS])
! 81: AC_SUBST([LOCALEDIR_SUFFIX])
! 82: AC_SUBST([COMPAT_TEST_PROGS])
! 83: AC_SUBST([CROSS_COMPILING])
! 84: AC_SUBST([PIE_LDFLAGS])
! 85: AC_SUBST([PIE_CFLAGS])
! 86: AC_SUBST([SSP_LDFLAGS])
! 87: AC_SUBST([SSP_CFLAGS])
! 88: AC_SUBST([NO_VIZ])
! 89: AC_SUBST([INIT_SCRIPT])
! 90: AC_SUBST([INIT_DIR])
! 91: AC_SUBST([RC_LINK])
! 92: dnl
! 93: dnl Variables that get substituted in docs (not overridden by environment)
! 94: dnl
! 95: AC_SUBST([iolog_dir])dnl real initial value from SUDO_IO_LOGDIR
! 96: AC_SUBST([rundir])dnl real initial value from SUDO_RUNDIR
! 97: AC_SUBST([vardir])dnl real initial value from SUDO_VARDIR
! 98: AC_SUBST([timeout])
! 99: AC_SUBST([password_timeout])
! 100: AC_SUBST([sudo_umask])
! 101: AC_SUBST([umask_override])
! 102: AC_SUBST([passprompt])
! 103: AC_SUBST([long_otp_prompt])
! 104: AC_SUBST([lecture])
! 105: AC_SUBST([logfac])
! 106: AC_SUBST([goodpri])
! 107: AC_SUBST([badpri])
! 108: AC_SUBST([loglen])
! 109: AC_SUBST([ignore_dot])
! 110: AC_SUBST([mail_no_user])
! 111: AC_SUBST([mail_no_host])
! 112: AC_SUBST([mail_no_perms])
! 113: AC_SUBST([mailto])
! 114: AC_SUBST([mailsub])
! 115: AC_SUBST([badpass_message])
! 116: AC_SUBST([fqdn])
! 117: AC_SUBST([runas_default])
! 118: AC_SUBST([env_editor])
! 119: AC_SUBST([env_reset])
! 120: AC_SUBST([passwd_tries])
! 121: AC_SUBST([tty_tickets])
! 122: AC_SUBST([insults])
! 123: AC_SUBST([root_sudo])
! 124: AC_SUBST([path_info])
! 125: AC_SUBST([ldap_conf])
! 126: AC_SUBST([ldap_secret])
! 127: AC_SUBST([sssd_lib])
! 128: AC_SUBST([nsswitch_conf])
! 129: AC_SUBST([netsvc_conf])
! 130: AC_SUBST([secure_path])
! 131: AC_SUBST([editor])
! 132: AC_SUBST([pam_session])
! 133: AC_SUBST([pam_login_service])
! 134: AC_SUBST([PLUGINDIR])
! 135: #
! 136: # Begin initial values for man page substitution
! 137: #
! 138: iolog_dir=/var/log/sudo-io
! 139: rundir=/var/run/sudo
! 140: vardir=/var/adm/sudo
! 141: timeout=5
! 142: password_timeout=5
! 143: sudo_umask=0022
! 144: umask_override=off
! 145: passprompt="Password:"
! 146: long_otp_prompt=off
! 147: lecture=once
! 148: logfac=auth
! 149: goodpri=notice
! 150: badpri=alert
! 151: loglen=80
! 152: ignore_dot=off
! 153: mail_no_user=on
! 154: mail_no_host=off
! 155: mail_no_perms=off
! 156: mailto=root
! 157: mailsub="*** SECURITY information for %h ***"
! 158: badpass_message="Sorry, try again."
! 159: fqdn=off
! 160: runas_default=root
! 161: env_editor=off
! 162: env_reset=on
! 163: editor=vi
! 164: passwd_tries=3
! 165: tty_tickets=on
! 166: insults=off
! 167: root_sudo=on
! 168: path_info=on
! 169: ldap_conf=/etc/ldap.conf
! 170: ldap_secret=/etc/ldap.secret
! 171: netsvc_conf=/etc/netsvc.conf
! 172: noexec_file=/usr/local/libexec/sudo/sudo_noexec.so
! 173: sesh_file=/usr/local/libexec/sudo/sesh
! 174: nsswitch_conf=/etc/nsswitch.conf
! 175: secure_path="not set"
! 176: pam_session=on
! 177: pam_login_service=sudo
! 178: PLUGINDIR=/usr/local/libexec/sudo
! 179: #
! 180: # End initial values for man page substitution
! 181: #
! 182: dnl
! 183: dnl Initial values for Makefile variables listed above
! 184: dnl May be overridden by environment variables..
! 185: dnl
! 186: INSTALL_NOEXEC=
! 187: devdir='$(srcdir)'
! 188: PROGS="sudo"
! 189: : ${MANDIRTYPE='man'}
! 190: : ${mansrcdir='.'}
! 191: : ${SHLIB_MODE='0644'}
! 192: : ${SUDOERS_MODE='0440'}
! 193: : ${SUDOERS_UID='0'}
! 194: : ${SUDOERS_GID='0'}
! 195: DEVEL=
! 196: LDAP="#"
! 197: BAMAN=0
! 198: LCMAN=0
! 199: PSMAN=0
! 200: SEMAN=0
! 201: LIBINTL=
! 202: ZLIB=
! 203: ZLIB_SRC=
! 204: AUTH_OBJS=
! 205: AUTH_REG=
! 206: AUTH_EXCL=
! 207: AUTH_EXCL_DEF=
! 208: AUTH_DEF=passwd
! 209: SUDO_NLS=disabled
! 210: LOCALEDIR_SUFFIX=
! 211: LT_LDEXPORTS="-export-symbols \$(shlib_exp)"
! 212: LT_LDDEP="\$(shlib_exp)"
! 213: NO_VIZ="-DNO_VIZ"
! 214: OS_INIT=os_init_common
! 215: INIT_SCRIPT=
! 216: INIT_DIR=
! 217: RC_LINK=
! 218:
! 219: dnl
! 220: dnl Other vaiables
! 221: dnl
! 222: CHECKSHADOW=true
! 223: shadow_defs=
! 224: shadow_funcs=
! 225: shadow_libs=
! 226: shadow_libs_optional=
! 227: CONFIGURE_ARGS="$@"
! 228:
! 229: dnl
! 230: dnl LD_PRELOAD equivalents
! 231: dnl
! 232: RTLD_PRELOAD_VAR="LD_PRELOAD"
! 233: RTLD_PRELOAD_ENABLE_VAR=
! 234: RTLD_PRELOAD_DELIM=":"
! 235: RTLD_PRELOAD_DEFAULT=
! 236:
! 237: dnl
! 238: dnl libc replacement functions live in compat
! 239: dnl
! 240: AC_CONFIG_LIBOBJ_DIR(compat)
! 241:
! 242: #
! 243: # Prior to sudo 1.8.7, sudo stored libexec files in $libexecdir.
! 244: # Starting with sudo 1.8.7, $libexecdir/sudo is used so strip
! 245: # off an extraneous "/sudo" from libexecdir.
! 246: #
! 247: case "$libexecdir" in
! 248: */sudo)
! 249: AC_MSG_WARN([libexecdir should not include the "sudo" subdirectory])
! 250: libexecdir=`expr "$libexecdir" : '\\(.*\\)/sudo$'`
! 251: ;;
! 252: esac
! 253:
! 254: dnl
! 255: dnl Deprecated --with options (these all warn or generate an error)
! 256: dnl
! 257:
! 258: AC_ARG_WITH(otp-only, [AS_HELP_STRING([--with-otp-only], [deprecated])],
! 259: [case $with_otp_only in
! 260: yes) with_passwd="no"
! 261: AC_MSG_NOTICE([--with-otp-only option deprecated, treating as --without-passwd])
! 262: ;;
! 263: esac])
! 264:
! 265: AC_ARG_WITH(alertmail, [AS_HELP_STRING([--with-alertmail], [deprecated])],
! 266: [case $with_alertmail in
! 267: *) with_mailto="$with_alertmail"
! 268: AC_MSG_NOTICE([--with-alertmail option deprecated, treating as --mailto])
! 269: ;;
! 270: esac])
! 271:
! 272: dnl
! 273: dnl Options for --with
! 274: dnl
! 275:
! 276: AC_ARG_WITH(devel, [AS_HELP_STRING([--with-devel], [add development options])],
! 277: [case $with_devel in
! 278: yes) AC_MSG_NOTICE([Setting up for development: -Wall, flex, yacc])
! 279: OSDEFS="${OSDEFS} -DSUDO_DEVEL"
! 280: DEVEL="true"
! 281: devdir=.
! 282: ;;
! 283: no) ;;
! 284: *) AC_MSG_WARN([Ignoring unknown argument to --with-devel: $with_devel])
! 285: ;;
! 286: esac])
! 287:
! 288: AC_ARG_WITH(CC, [AS_HELP_STRING([--with-CC], [C compiler to use])],
! 289: [case $with_CC in
! 290: *) AC_MSG_ERROR([the --with-CC option is no longer supported, please set the CC environment variable instead.])
! 291: ;;
! 292: esac])
! 293:
! 294: AC_ARG_WITH(rpath, [AS_HELP_STRING([--with-rpath], [deprecated, use --disable-rpath])],
! 295: [AC_MSG_WARN([--with-rpath deprecated, rpath is now the default])])
! 296:
! 297: AC_ARG_WITH(blibpath, [AS_HELP_STRING([--with-blibpath[=PATH]], [deprecated])],
! 298: [AC_MSG_WARN([--with-blibpath deprecated, use --with-libpath])])
! 299:
! 300: dnl
! 301: dnl Handle BSM auditing support.
! 302: dnl
! 303: AC_ARG_WITH(bsm-audit, [AS_HELP_STRING([--with-bsm-audit], [enable BSM audit support])],
! 304: [case $with_bsm_audit in
! 305: yes) AC_DEFINE(HAVE_BSM_AUDIT)
! 306: SUDOERS_LIBS="${SUDOERS_LIBS} -lbsm"
! 307: SUDOERS_OBJS="${SUDOERS_OBJS} bsm_audit.lo"
! 308: ;;
! 309: no) ;;
! 310: *) AC_MSG_ERROR(["--with-bsm-audit does not take an argument."])
! 311: ;;
! 312: esac])
! 313:
! 314: dnl
! 315: dnl Handle Linux auditing support.
! 316: dnl
! 317: AC_ARG_WITH(linux-audit, [AS_HELP_STRING([--with-linux-audit], [enable Linux audit support])],
! 318: [case $with_linux_audit in
! 319: yes) AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <libaudit.h>]], [[int i = AUDIT_USER_CMD; (void)i;]])], [
! 320: AC_DEFINE(HAVE_LINUX_AUDIT)
! 321: SUDO_LIBS="${SUDO_LIBS} -laudit"
! 322: SUDOERS_LIBS="${SUDO_LIBS} -laudit"
! 323: SUDOERS_OBJS="${SUDOERS_OBJS} linux_audit.lo"
! 324: ], [
! 325: AC_MSG_ERROR([unable to find AUDIT_USER_CMD in libaudit.h for --with-linux-audit])
! 326: ])
! 327: ;;
! 328: no) ;;
! 329: *) AC_MSG_ERROR(["--with-linux-audit does not take an argument."])
! 330: ;;
! 331: esac])
! 332:
! 333: dnl
! 334: dnl Handle SSSD support.
! 335: dnl
! 336: AC_ARG_WITH(sssd, [AS_HELP_STRING([--with-sssd], [enable SSSD support])],
! 337: [case $with_sssd in
! 338: yes) SUDOERS_OBJS="${SUDOERS_OBJS} sssd.lo"
! 339: AC_DEFINE(HAVE_SSSD)
! 340: ;;
! 341: no) ;;
! 342: *) AC_MSG_ERROR(["--with-sssd does not take an argument."])
! 343: ;;
! 344: esac])
! 345:
! 346: AC_ARG_WITH(sssd-lib, [AS_HELP_STRING([--with-sssd-lib], [path to the SSSD library])])
! 347: sssd_lib="\"LIBDIR\""
! 348: test -n "$with_sssd_lib" && sssd_lib="$with_sssd_lib"
! 349: SUDO_DEFINE_UNQUOTED(_PATH_SSSD_LIB, "$sssd_lib", [Path to the SSSD library])
! 350:
! 351: AC_ARG_WITH(incpath, [AS_HELP_STRING([--with-incpath], [additional places to look for include files])],
! 352: [case $with_incpath in
! 353: yes) AC_MSG_ERROR(["must give --with-incpath an argument."])
! 354: ;;
! 355: no) AC_MSG_ERROR(["--without-incpath not supported."])
! 356: ;;
! 357: *) AC_MSG_NOTICE([Adding ${with_incpath} to CPPFLAGS])
! 358: for i in ${with_incpath}; do
! 359: SUDO_APPEND_CPPFLAGS(-I${i})
! 360: done
! 361: ;;
! 362: esac])
! 363:
! 364: AC_ARG_WITH(libpath, [AS_HELP_STRING([--with-libpath], [additional places to look for libraries])],
! 365: [case $with_libpath in
! 366: yes) AC_MSG_ERROR(["must give --with-libpath an argument."])
! 367: ;;
! 368: no) AC_MSG_ERROR(["--without-libpath not supported."])
! 369: ;;
! 370: *) AC_MSG_NOTICE([Adding ${with_libpath} to LDFLAGS])
! 371: ;;
! 372: esac])
! 373:
! 374: AC_ARG_WITH(libraries, [AS_HELP_STRING([--with-libraries], [additional libraries to link with])],
! 375: [case $with_libraries in
! 376: yes) AC_MSG_ERROR(["must give --with-libraries an argument."])
! 377: ;;
! 378: no) AC_MSG_ERROR(["--without-libraries not supported."])
! 379: ;;
! 380: *) AC_MSG_NOTICE([Adding ${with_libraries} to LIBS])
! 381: ;;
! 382: esac])
! 383:
! 384: AC_ARG_WITH(efence, [AS_HELP_STRING([--with-efence], [link with -lefence for malloc() debugging])],
! 385: [case $with_efence in
! 386: yes) AC_MSG_NOTICE([Sudo will link with -lefence (Electric Fence)])
! 387: LIBS="${LIBS} -lefence"
! 388: if test -f /usr/local/lib/libefence.a; then
! 389: with_libpath="${with_libpath} /usr/local/lib"
! 390: fi
! 391: ;;
! 392: no) ;;
! 393: *) AC_MSG_WARN([Ignoring unknown argument to --with-efence: $with_efence])
! 394: ;;
! 395: esac])
! 396:
! 397: AC_ARG_WITH(csops, [AS_HELP_STRING([--with-csops], [add CSOps standard options])],
! 398: [case $with_csops in
! 399: yes) AC_MSG_NOTICE([Adding CSOps standard options])
! 400: CHECKSIA=false
! 401: with_ignore_dot=yes
! 402: insults=on
! 403: with_classic_insults=yes
! 404: with_csops_insults=yes
! 405: with_env_editor=yes
! 406: : ${mansectsu='8'}
! 407: : ${mansectform='5'}
! 408: ;;
! 409: no) ;;
! 410: *) AC_MSG_WARN([Ignoring unknown argument to --with-csops: $with_csops])
! 411: ;;
! 412: esac])
! 413:
! 414: AC_ARG_WITH(passwd, [AS_HELP_STRING([--without-passwd], [don't use passwd/shadow file for authentication])],
! 415: [case $with_passwd in
! 416: yes|no) AC_MSG_CHECKING(whether to use shadow/passwd file authentication)
! 417: AC_MSG_RESULT($with_passwd)
! 418: AUTH_DEF=""
! 419: test "$with_passwd" = "yes" && AUTH_REG="$AUTH_REG passwd"
! 420: ;;
! 421: *) AC_MSG_ERROR(["Sorry, --with-passwd does not take an argument."])
! 422: ;;
! 423: esac])
! 424:
! 425: AC_ARG_WITH(skey, [AS_HELP_STRING([--with-skey[=DIR]], [enable S/Key support ])],
! 426: [case $with_skey in
! 427: no) ;;
! 428: *) AC_DEFINE(HAVE_SKEY)
! 429: AC_MSG_CHECKING(whether to try S/Key authentication)
! 430: AC_MSG_RESULT(yes)
! 431: AUTH_REG="$AUTH_REG S/Key"
! 432: ;;
! 433: esac])
! 434:
! 435: AC_ARG_WITH(opie, [AS_HELP_STRING([--with-opie[=DIR]], [enable OPIE support ])],
! 436: [case $with_opie in
! 437: no) ;;
! 438: *) AC_DEFINE(HAVE_OPIE)
! 439: AC_MSG_CHECKING(whether to try NRL OPIE authentication)
! 440: AC_MSG_RESULT(yes)
! 441: AUTH_REG="$AUTH_REG NRL_OPIE"
! 442: ;;
! 443: esac])
! 444:
! 445: AC_ARG_WITH(long-otp-prompt, [AS_HELP_STRING([--with-long-otp-prompt], [use a two line OTP (skey/opie) prompt])],
! 446: [case $with_long_otp_prompt in
! 447: yes) AC_DEFINE(LONG_OTP_PROMPT)
! 448: AC_MSG_CHECKING(whether to use a two line prompt for OTP authentication)
! 449: AC_MSG_RESULT(yes)
! 450: long_otp_prompt=on
! 451: ;;
! 452: no) long_otp_prompt=off
! 453: ;;
! 454: *) AC_MSG_ERROR(["--with-long-otp-prompt does not take an argument."])
! 455: ;;
! 456: esac])
! 457:
! 458: AC_ARG_WITH(SecurID, [AS_HELP_STRING([--with-SecurID[[=DIR]]], [enable SecurID support])],
! 459: [case $with_SecurID in
! 460: no) ;;
! 461: *) AC_DEFINE(HAVE_SECURID)
! 462: AC_MSG_CHECKING(whether to use SecurID for authentication)
! 463: AC_MSG_RESULT(yes)
! 464: AUTH_EXCL="$AUTH_EXCL SecurID"
! 465: ;;
! 466: esac])
! 467:
! 468: AC_ARG_WITH(fwtk, [AS_HELP_STRING([--with-fwtk[[=DIR]]], [enable FWTK AuthSRV support])],
! 469: [case $with_fwtk in
! 470: no) ;;
! 471: *) AC_DEFINE(HAVE_FWTK)
! 472: AC_MSG_CHECKING(whether to use FWTK AuthSRV for authentication)
! 473: AC_MSG_RESULT(yes)
! 474: AUTH_EXCL="$AUTH_EXCL FWTK"
! 475: ;;
! 476: esac])
! 477:
! 478: AC_ARG_WITH(kerb5, [AS_HELP_STRING([--with-kerb5[[=DIR]]], [enable Kerberos V support])],
! 479: [case $with_kerb5 in
! 480: no) ;;
! 481: *) AC_MSG_CHECKING(whether to try Kerberos V authentication)
! 482: AC_MSG_RESULT(yes)
! 483: AUTH_REG="$AUTH_REG kerb5"
! 484: ;;
! 485: esac])
! 486:
! 487: AC_ARG_WITH(aixauth, [AS_HELP_STRING([--with-aixauth], [enable AIX general authentication support])],
! 488: [case $with_aixauth in
! 489: yes) AUTH_EXCL="$AUTH_EXCL AIX_AUTH";;
! 490: no) ;;
! 491: *) AC_MSG_ERROR(["--with-aixauth does not take an argument."])
! 492: ;;
! 493: esac])
! 494:
! 495: AC_ARG_WITH(pam, [AS_HELP_STRING([--with-pam], [enable PAM support])],
! 496: [case $with_pam in
! 497: yes) AUTH_EXCL="$AUTH_EXCL PAM";;
! 498: no) ;;
! 499: *) AC_MSG_ERROR(["--with-pam does not take an argument."])
! 500: ;;
! 501: esac])
! 502:
! 503: AC_ARG_WITH(AFS, [AS_HELP_STRING([--with-AFS], [enable AFS support])],
! 504: [case $with_AFS in
! 505: yes) AC_DEFINE(HAVE_AFS)
! 506: AC_MSG_CHECKING(whether to try AFS (kerberos) authentication)
! 507: AC_MSG_RESULT(yes)
! 508: AUTH_REG="$AUTH_REG AFS"
! 509: ;;
! 510: no) ;;
! 511: *) AC_MSG_ERROR(["--with-AFS does not take an argument."])
! 512: ;;
! 513: esac])
! 514:
! 515: AC_ARG_WITH(DCE, [AS_HELP_STRING([--with-DCE], [enable DCE support])],
! 516: [case $with_DCE in
! 517: yes) AC_DEFINE(HAVE_DCE)
! 518: AC_MSG_CHECKING(whether to try DCE (kerberos) authentication)
! 519: AC_MSG_RESULT(yes)
! 520: AUTH_REG="$AUTH_REG DCE"
! 521: ;;
! 522: no) ;;
! 523: *) AC_MSG_ERROR(["--with-DCE does not take an argument."])
! 524: ;;
! 525: esac])
! 526:
! 527: AC_ARG_WITH(logincap, [AS_HELP_STRING([--with-logincap], [enable BSD login class support])],
! 528: [case $with_logincap in
! 529: yes|no) ;;
! 530: *) AC_MSG_ERROR(["--with-logincap does not take an argument."])
! 531: ;;
! 532: esac])
! 533:
! 534: AC_ARG_WITH(bsdauth, [AS_HELP_STRING([--with-bsdauth], [enable BSD authentication support])],
! 535: [case $with_bsdauth in
! 536: yes) AUTH_EXCL="$AUTH_EXCL BSD_AUTH";;
! 537: no) ;;
! 538: *) AC_MSG_ERROR(["--with-bsdauth does not take an argument."])
! 539: ;;
! 540: esac])
! 541:
! 542: AC_ARG_WITH(project, [AS_HELP_STRING([--with-project], [enable Solaris project support])],
! 543: [case $with_project in
! 544: yes|no) ;;
! 545: no) ;;
! 546: *) AC_MSG_ERROR(["--with-project does not take an argument."])
! 547: ;;
! 548: esac])
! 549:
! 550: AC_MSG_CHECKING(whether to lecture users the first time they run sudo)
! 551: AC_ARG_WITH(lecture, [AS_HELP_STRING([--without-lecture], [don't print lecture for first-time sudoer])],
! 552: [case $with_lecture in
! 553: yes|short|always) lecture=once
! 554: ;;
! 555: no|none|never) lecture=never
! 556: ;;
! 557: *) AC_MSG_ERROR(["unknown argument to --with-lecture: $with_lecture"])
! 558: ;;
! 559: esac])
! 560: if test "$lecture" = "once"; then
! 561: AC_MSG_RESULT(yes)
! 562: else
! 563: AC_DEFINE(NO_LECTURE)
! 564: AC_MSG_RESULT(no)
! 565: fi
! 566:
! 567: AC_MSG_CHECKING(whether sudo should log via syslog or to a file by default)
! 568: AC_ARG_WITH(logging, [AS_HELP_STRING([--with-logging], [log via syslog, file, or both])],
! 569: [case $with_logging in
! 570: yes) AC_MSG_ERROR(["must give --with-logging an argument."])
! 571: ;;
! 572: no) AC_MSG_ERROR(["--without-logging not supported."])
! 573: ;;
! 574: syslog) AC_DEFINE(LOGGING, SLOG_SYSLOG)
! 575: AC_MSG_RESULT(syslog)
! 576: ;;
! 577: file) AC_DEFINE(LOGGING, SLOG_FILE)
! 578: AC_MSG_RESULT(file)
! 579: ;;
! 580: both) AC_DEFINE(LOGGING, SLOG_BOTH)
! 581: AC_MSG_RESULT(both)
! 582: ;;
! 583: *) AC_MSG_ERROR(["unknown argument to --with-logging: $with_logging"])
! 584: ;;
! 585: esac], [AC_DEFINE(LOGGING, SLOG_SYSLOG) AC_MSG_RESULT(syslog)])
! 586:
! 587: AC_ARG_WITH(logfac, [AS_HELP_STRING([--with-logfac], [syslog facility to log with (default is "auth")])],
! 588: [case $with_logfac in
! 589: yes) AC_MSG_ERROR(["must give --with-logfac an argument."])
! 590: ;;
! 591: no) AC_MSG_ERROR(["--without-logfac not supported."])
! 592: ;;
! 593: authpriv|auth|daemon|user|local0|local1|local2|local3|local4|local5|local6|local7) logfac=$with_logfac
! 594: ;;
! 595: *) AC_MSG_ERROR(["$with_logfac is not a supported syslog facility."])
! 596: ;;
! 597: esac])
! 598:
! 599: AC_MSG_CHECKING(at which syslog priority to log commands)
! 600: AC_ARG_WITH(goodpri, [AS_HELP_STRING([--with-goodpri], [syslog priority for commands (def is "notice")])],
! 601: [case $with_goodpri in
! 602: yes) AC_MSG_ERROR(["must give --with-goodpri an argument."])
! 603: ;;
! 604: no) AC_MSG_ERROR(["--without-goodpri not supported."])
! 605: ;;
! 606: alert|crit|debug|emerg|err|info|notice|warning)
! 607: goodpri=$with_goodpri
! 608: ;;
! 609: *) AC_MSG_ERROR(["$with_goodpri is not a supported syslog priority."])
! 610: ;;
! 611: esac])
! 612: AC_DEFINE_UNQUOTED(PRI_SUCCESS, "$goodpri", [The syslog priority sudo will use for successful attempts.])
! 613: AC_MSG_RESULT($goodpri)
! 614:
! 615: AC_MSG_CHECKING(at which syslog priority to log failures)
! 616: AC_ARG_WITH(badpri, [AS_HELP_STRING([--with-badpri], [syslog priority for failures (def is "alert")])],
! 617: [case $with_badpri in
! 618: yes) AC_MSG_ERROR(["must give --with-badpri an argument."])
! 619: ;;
! 620: no) AC_MSG_ERROR(["--without-badpri not supported."])
! 621: ;;
! 622: alert|crit|debug|emerg|err|info|notice|warning)
! 623: badpri=$with_badpri
! 624: ;;
! 625: *) AC_MSG_ERROR([$with_badpri is not a supported syslog priority.])
! 626: ;;
! 627: esac])
! 628: AC_DEFINE_UNQUOTED(PRI_FAILURE, "$badpri", [The syslog priority sudo will use for unsuccessful attempts/errors.])
! 629: AC_MSG_RESULT($badpri)
! 630:
! 631: AC_ARG_WITH(logpath, [AS_HELP_STRING([--with-logpath], [path to the sudo log file])],
! 632: [case $with_logpath in
! 633: yes) AC_MSG_ERROR(["must give --with-logpath an argument."])
! 634: ;;
! 635: no) AC_MSG_ERROR(["--without-logpath not supported."])
! 636: ;;
! 637: esac])
! 638:
! 639: AC_MSG_CHECKING(how long a line in the log file should be)
! 640: AC_ARG_WITH(loglen, [AS_HELP_STRING([--with-loglen], [maximum length of a log file line (default is 80)])],
! 641: [case $with_loglen in
! 642: yes) AC_MSG_ERROR(["must give --with-loglen an argument."])
! 643: ;;
! 644: no) AC_MSG_ERROR(["--without-loglen not supported."])
! 645: ;;
! 646: [[0-9]]*) loglen=$with_loglen
! 647: ;;
! 648: *) AC_MSG_ERROR(["you must enter a number, not $with_loglen"])
! 649: ;;
! 650: esac])
! 651: AC_DEFINE_UNQUOTED(MAXLOGFILELEN, $loglen, [The max number of chars per log file line (for line wrapping).])
! 652: AC_MSG_RESULT($loglen)
! 653:
! 654: AC_MSG_CHECKING(whether sudo should ignore '.' or '' in \$PATH)
! 655: AC_ARG_WITH(ignore-dot, [AS_HELP_STRING([--with-ignore-dot], [ignore '.' in the PATH])],
! 656: [case $with_ignore_dot in
! 657: yes) ignore_dot=on
! 658: ;;
! 659: no) ignore_dot=off
! 660: ;;
! 661: *) AC_MSG_ERROR(["--with-ignore-dot does not take an argument."])
! 662: ;;
! 663: esac])
! 664: if test "$ignore_dot" = "on"; then
! 665: AC_DEFINE(IGNORE_DOT_PATH)
! 666: AC_MSG_RESULT(yes)
! 667: else
! 668: AC_MSG_RESULT(no)
! 669: fi
! 670:
! 671: AC_MSG_CHECKING(whether to send mail when a user is not in sudoers)
! 672: AC_ARG_WITH(mail-if-no-user, [AS_HELP_STRING([--without-mail-if-no-user], [do not send mail if user not in sudoers])],
! 673: [case $with_mail_if_no_user in
! 674: yes) mail_no_user=on
! 675: ;;
! 676: no) mail_no_user=off
! 677: ;;
! 678: *) AC_MSG_ERROR(["--with-mail-if-no-user does not take an argument."])
! 679: ;;
! 680: esac])
! 681: if test "$mail_no_user" = "on"; then
! 682: AC_DEFINE(SEND_MAIL_WHEN_NO_USER)
! 683: AC_MSG_RESULT(yes)
! 684: else
! 685: AC_MSG_RESULT(no)
! 686: fi
! 687:
! 688: AC_MSG_CHECKING(whether to send mail when user listed but not for this host)
! 689: AC_ARG_WITH(mail-if-no-host, [AS_HELP_STRING([--with-mail-if-no-host], [send mail if user in sudoers but not for this host])],
! 690: [case $with_mail_if_no_host in
! 691: yes) mail_no_host=on
! 692: ;;
! 693: no) mail_no_host=off
! 694: ;;
! 695: *) AC_MSG_ERROR(["--with-mail-if-no-host does not take an argument."])
! 696: ;;
! 697: esac])
! 698: if test "$mail_no_host" = "on"; then
! 699: AC_DEFINE(SEND_MAIL_WHEN_NO_HOST)
! 700: AC_MSG_RESULT(yes)
! 701: else
! 702: AC_MSG_RESULT(no)
! 703: fi
! 704:
! 705: AC_MSG_CHECKING(whether to send mail when a user tries a disallowed command)
! 706: AC_ARG_WITH(mail-if-noperms, [AS_HELP_STRING([--with-mail-if-noperms], [send mail if user not allowed to run command])],
! 707: [case $with_mail_if_noperms in
! 708: yes) mail_noperms=on
! 709: ;;
! 710: no) mail_noperms=off
! 711: ;;
! 712: *) AC_MSG_ERROR(["--with-mail-if-noperms does not take an argument."])
! 713: ;;
! 714: esac])
! 715: if test "$mail_noperms" = "on"; then
! 716: AC_DEFINE(SEND_MAIL_WHEN_NOT_OK)
! 717: AC_MSG_RESULT(yes)
! 718: else
! 719: AC_MSG_RESULT(no)
! 720: fi
! 721:
! 722: AC_MSG_CHECKING(who should get the mail that sudo sends)
! 723: AC_ARG_WITH(mailto, [AS_HELP_STRING([--with-mailto], [who should get sudo mail (default is "root")])],
! 724: [case $with_mailto in
! 725: yes) AC_MSG_ERROR(["must give --with-mailto an argument."])
! 726: ;;
! 727: no) AC_MSG_ERROR(["--without-mailto not supported."])
! 728: ;;
! 729: *) mailto=$with_mailto
! 730: ;;
! 731: esac])
! 732: AC_DEFINE_UNQUOTED(MAILTO, "$mailto", [The user or email address that sudo mail is sent to.])
! 733: AC_MSG_RESULT([$mailto])
! 734:
! 735: AC_ARG_WITH(mailsubject, [AS_HELP_STRING([--with-mailsubject], [subject of sudo mail])],
! 736: [case $with_mailsubject in
! 737: yes) AC_MSG_ERROR(["must give --with-mailsubject an argument."])
! 738: ;;
! 739: no) AC_MSG_WARN([Sorry, --without-mailsubject not supported.])
! 740: ;;
! 741: *) mailsub="$with_mailsubject"
! 742: AC_MSG_CHECKING(sudo mail subject)
! 743: AC_MSG_RESULT([Using alert mail subject: $mailsub])
! 744: ;;
! 745: esac])
! 746: AC_DEFINE_UNQUOTED(MAILSUBJECT, "$mailsub", [The subject of the mail sent by sudo to the MAILTO user/address.])
! 747:
! 748: AC_MSG_CHECKING(for bad password prompt)
! 749: AC_ARG_WITH(passprompt, [AS_HELP_STRING([--with-passprompt], [default password prompt])],
! 750: [case $with_passprompt in
! 751: yes) AC_MSG_ERROR(["must give --with-passprompt an argument."])
! 752: ;;
! 753: no) AC_MSG_WARN([Sorry, --without-passprompt not supported.])
! 754: ;;
! 755: *) passprompt="$with_passprompt"
! 756: esac])
! 757: AC_MSG_RESULT($passprompt)
! 758: AC_DEFINE_UNQUOTED(PASSPROMPT, "$passprompt", [The default password prompt.])
! 759:
! 760: AC_MSG_CHECKING(for bad password message)
! 761: AC_ARG_WITH(badpass-message, [AS_HELP_STRING([--with-badpass-message], [message the user sees when the password is wrong])],
! 762: [case $with_badpass_message in
! 763: yes) AC_MSG_ERROR(["Must give --with-badpass-message an argument."])
! 764: ;;
! 765: no) AC_MSG_WARN([Sorry, --without-badpass-message not supported.])
! 766: ;;
! 767: *) badpass_message="$with_badpass_message"
! 768: ;;
! 769: esac])
! 770: AC_DEFINE_UNQUOTED(INCORRECT_PASSWORD, "$badpass_message", [The message given when a bad password is entered.])
! 771: AC_MSG_RESULT([$badpass_message])
! 772:
! 773: AC_MSG_CHECKING(whether to expect fully qualified hosts in sudoers)
! 774: AC_ARG_WITH(fqdn, [AS_HELP_STRING([--with-fqdn], [expect fully qualified hosts in sudoers])],
! 775: [case $with_fqdn in
! 776: yes) fqdn=on
! 777: ;;
! 778: no) fqdn=off
! 779: ;;
! 780: *) AC_MSG_ERROR(["--with-fqdn does not take an argument."])
! 781: ;;
! 782: esac])
! 783: if test "$fqdn" = "on"; then
! 784: AC_DEFINE(FQDN)
! 785: AC_MSG_RESULT(yes)
! 786: else
! 787: AC_MSG_RESULT(no)
! 788: fi
! 789:
! 790: AC_ARG_WITH(timedir, [AS_HELP_STRING([--with-timedir=DIR], [deprecated])],
! 791: [case $with_timedir in
! 792: *) AC_MSG_ERROR(["--without-timedir no longer supported, see --with-rundir."])
! 793: ;;
! 794: esac])
! 795:
! 796: AC_ARG_WITH(rundir, [AS_HELP_STRING([--with-rundir=DIR], [path to the sudo time stamp parent dir])],
! 797: [case $with_rundir in
! 798: yes) AC_MSG_ERROR(["must give --with-rundir an argument."])
! 799: ;;
! 800: no) AC_MSG_ERROR(["--without-rundir not supported."])
! 801: ;;
! 802: esac])
! 803:
! 804: AC_ARG_WITH(vardir, [AS_HELP_STRING([--with-vardir=DIR], [path to the sudo var dir])],
! 805: [case $with_vardir in
! 806: yes) AC_MSG_ERROR(["must give --with-vardirdir an argument."])
! 807: ;;
! 808: no) AC_MSG_ERROR(["--without-vardirdir not supported."])
! 809: ;;
! 810: esac])
! 811:
! 812: AC_ARG_WITH(iologdir, [AS_HELP_STRING([--with-iologdir=DIR], [directory to store sudo I/O log files in])],
! 813: [case $with_iologdir in
! 814: yes) ;;
! 815: no) AC_MSG_ERROR(["--without-iologdir not supported."])
! 816: ;;
! 817: esac])
! 818:
! 819: AC_ARG_WITH(sendmail, [AS_HELP_STRING([--with-sendmail], [set path to sendmail])
! 820: AS_HELP_STRING([--without-sendmail], [do not send mail at all])],
! 821: [case $with_sendmail in
! 822: yes) with_sendmail=""
! 823: ;;
! 824: no) ;;
! 825: *) SUDO_DEFINE_UNQUOTED(_PATH_SUDO_SENDMAIL, "$with_sendmail")
! 826: ;;
! 827: esac])
! 828:
! 829: AC_ARG_WITH(sudoers-mode, [AS_HELP_STRING([--with-sudoers-mode], [mode of sudoers file (defaults to 0440)])],
! 830: [case $with_sudoers_mode in
! 831: yes) AC_MSG_ERROR(["must give --with-sudoers-mode an argument."])
! 832: ;;
! 833: no) AC_MSG_ERROR(["--without-sudoers-mode not supported."])
! 834: ;;
! 835: [[1-9]]*) SUDOERS_MODE=0${with_sudoers_mode}
! 836: ;;
! 837: 0*) SUDOERS_MODE=$with_sudoers_mode
! 838: ;;
! 839: *) AC_MSG_ERROR(["you must use an octal mode, not a name."])
! 840: ;;
! 841: esac])
! 842:
! 843: AC_ARG_WITH(sudoers-uid, [AS_HELP_STRING([--with-sudoers-uid], [uid that owns sudoers file (defaults to 0)])],
! 844: [case $with_sudoers_uid in
! 845: yes) AC_MSG_ERROR(["must give --with-sudoers-uid an argument."])
! 846: ;;
! 847: no) AC_MSG_ERROR(["--without-sudoers-uid not supported."])
! 848: ;;
! 849: [[0-9]]*) SUDOERS_UID=$with_sudoers_uid
! 850: ;;
! 851: *) AC_MSG_ERROR(["you must use an unsigned numeric uid, not a name."])
! 852: ;;
! 853: esac])
! 854:
! 855: AC_ARG_WITH(sudoers-gid, [AS_HELP_STRING([--with-sudoers-gid], [gid that owns sudoers file (defaults to 0)])],
! 856: [case $with_sudoers_gid in
! 857: yes) AC_MSG_ERROR(["must give --with-sudoers-gid an argument."])
! 858: ;;
! 859: no) AC_MSG_ERROR(["--without-sudoers-gid not supported."])
! 860: ;;
! 861: [[0-9]]*) SUDOERS_GID=$with_sudoers_gid
! 862: ;;
! 863: *) AC_MSG_ERROR(["you must use an unsigned numeric gid, not a name."])
! 864: ;;
! 865: esac])
! 866:
! 867: AC_MSG_CHECKING(for umask programs should be run with)
! 868: AC_ARG_WITH(umask, [AS_HELP_STRING([--with-umask], [umask with which the prog should run (default is 022)])
! 869: AS_HELP_STRING([--without-umask], [Preserves the umask of the user invoking sudo.])],
! 870: [case $with_umask in
! 871: yes) AC_MSG_ERROR(["must give --with-umask an argument."])
! 872: ;;
! 873: no) sudo_umask=0777
! 874: ;;
! 875: [[0-9]]*) sudo_umask=$with_umask
! 876: ;;
! 877: *) AC_MSG_ERROR(["you must enter a numeric mask."])
! 878: ;;
! 879: esac])
! 880: AC_DEFINE_UNQUOTED(SUDO_UMASK, $sudo_umask, [The umask that the sudo-run prog should use.])
! 881: if test "$sudo_umask" = "0777"; then
! 882: AC_MSG_RESULT(user)
! 883: else
! 884: AC_MSG_RESULT($sudo_umask)
! 885: fi
! 886:
! 887: AC_ARG_WITH(umask-override, [AS_HELP_STRING([--with-umask-override], [Use the umask specified in sudoers even if it is less restrictive than the user's.])],
! 888: [case $with_umask_override in
! 889: yes) AC_DEFINE(UMASK_OVERRIDE)
! 890: umask_override=on
! 891: ;;
! 892: no) umask_override=off
! 893: ;;
! 894: *) AC_MSG_ERROR(["--with-umask-override does not take an argument."])
! 895: ;;
! 896: esac])
! 897:
! 898: AC_MSG_CHECKING(for default user to run commands as)
! 899: AC_ARG_WITH(runas-default, [AS_HELP_STRING([--with-runas-default], [User to run commands as (default is "root")])],
! 900: [case $with_runas_default in
! 901: yes) AC_MSG_ERROR(["must give --with-runas-default an argument."])
! 902: ;;
! 903: no) AC_MSG_ERROR(["--without-runas-default not supported."])
! 904: ;;
! 905: *) runas_default="$with_runas_default"
! 906: ;;
! 907: esac])
! 908: AC_DEFINE_UNQUOTED(RUNAS_DEFAULT, "$runas_default", [The user sudo should run commands as by default.])
! 909: AC_MSG_RESULT([$runas_default])
! 910:
! 911: AC_ARG_WITH(exempt, [AS_HELP_STRING([--with-exempt=group], [no passwd needed for users in this group])],
! 912: [case $with_exempt in
! 913: yes) AC_MSG_ERROR(["must give --with-exempt an argument."])
! 914: ;;
! 915: no) AC_MSG_ERROR(["--without-exempt not supported."])
! 916: ;;
! 917: *) AC_DEFINE_UNQUOTED(EXEMPTGROUP, "$with_exempt", [If defined, users in this group need not enter a passwd (ie "sudo").])
! 918: AC_MSG_CHECKING(for group to be exempt from password)
! 919: AC_MSG_RESULT([$with_exempt])
! 920: ;;
! 921: esac])
! 922:
! 923: AC_MSG_CHECKING(for editor that visudo should use)
! 924: AC_ARG_WITH(editor, [AS_HELP_STRING([--with-editor=path], [Default editor for visudo (defaults to vi)])],
! 925: [case $with_editor in
! 926: yes) AC_MSG_ERROR(["must give --with-editor an argument."])
! 927: ;;
! 928: no) AC_MSG_ERROR(["--without-editor not supported."])
! 929: ;;
! 930: *) AC_DEFINE_UNQUOTED(EDITOR, "$with_editor", [A colon-separated list of pathnames to be used as the editor for visudo.])
! 931: AC_MSG_RESULT([$with_editor])
! 932: editor="$with_editor"
! 933: ;;
! 934: esac], [AC_DEFINE(EDITOR, _PATH_VI) AC_MSG_RESULT(vi)])
! 935:
! 936: AC_MSG_CHECKING(whether to obey EDITOR and VISUAL environment variables)
! 937: AC_ARG_WITH(env-editor, [AS_HELP_STRING([--with-env-editor], [Use the environment variable EDITOR for visudo])],
! 938: [case $with_env_editor in
! 939: yes) env_editor=on
! 940: ;;
! 941: no) env_editor=off
! 942: ;;
! 943: *) AC_MSG_ERROR(["--with-env-editor does not take an argument."])
! 944: ;;
! 945: esac])
! 946: if test "$env_editor" = "on"; then
! 947: AC_DEFINE(ENV_EDITOR)
! 948: AC_MSG_RESULT(yes)
! 949: else
! 950: AC_MSG_RESULT(no)
! 951: fi
! 952:
! 953: AC_MSG_CHECKING(number of tries a user gets to enter their password)
! 954: AC_ARG_WITH(passwd-tries, [AS_HELP_STRING([--with-passwd-tries], [number of tries to enter password (default is 3)])],
! 955: [case $with_passwd_tries in
! 956: yes) ;;
! 957: no) AC_MSG_ERROR(["--without-editor not supported."])
! 958: ;;
! 959: [[1-9]]*) passwd_tries=$with_passwd_tries
! 960: ;;
! 961: *) AC_MSG_ERROR(["you must enter the numer of tries, > 0"])
! 962: ;;
! 963: esac])
! 964: AC_DEFINE_UNQUOTED(TRIES_FOR_PASSWORD, $passwd_tries, [The number of tries a user gets to enter their password.])
! 965: AC_MSG_RESULT($passwd_tries)
! 966:
! 967: AC_MSG_CHECKING(time in minutes after which sudo will ask for a password again)
! 968: AC_ARG_WITH(timeout, [AS_HELP_STRING([--with-timeout], [minutes before sudo asks for passwd again (def is 5 minutes)])],
! 969: [case $with_timeout in
! 970: yes) ;;
! 971: no) timeout=0
! 972: ;;
! 973: [[0-9]]*) timeout=$with_timeout
! 974: ;;
! 975: *) AC_MSG_ERROR(["you must enter the numer of minutes."])
! 976: ;;
! 977: esac])
! 978: AC_DEFINE_UNQUOTED(TIMEOUT, $timeout, [The number of minutes before sudo asks for a password again.])
! 979: AC_MSG_RESULT($timeout)
! 980:
! 981: AC_MSG_CHECKING(time in minutes after the password prompt will time out)
! 982: AC_ARG_WITH(password-timeout, [AS_HELP_STRING([--with-password-timeout], [passwd prompt timeout in minutes (default is 5 minutes)])],
! 983: [case $with_password_timeout in
! 984: yes) ;;
! 985: no) password_timeout=0
! 986: ;;
! 987: [[0-9]]*) password_timeout=$with_password_timeout
! 988: ;;
! 989: *) AC_MSG_ERROR(["you must enter the numer of minutes."])
! 990: ;;
! 991: esac])
! 992: AC_DEFINE_UNQUOTED(PASSWORD_TIMEOUT, $password_timeout, [The passwd prompt timeout (in minutes).])
! 993: AC_MSG_RESULT($password_timeout)
! 994:
! 995: AC_MSG_CHECKING(whether to use per-tty ticket files)
! 996: AC_ARG_WITH(tty-tickets, [AS_HELP_STRING([--with-tty-tickets], [use a different ticket file for each tty])],
! 997: [case $with_tty_tickets in
! 998: yes) tty_tickets=on
! 999: ;;
! 1000: no) tty_tickets=off
! 1001: ;;
! 1002: *) AC_MSG_ERROR(["--with-tty-tickets does not take an argument."])
! 1003: ;;
! 1004: esac])
! 1005: if test "$tty_tickets" = "off"; then
! 1006: AC_DEFINE(NO_TTY_TICKETS)
! 1007: AC_MSG_RESULT(no)
! 1008: else
! 1009: AC_MSG_RESULT(yes)
! 1010: fi
! 1011:
! 1012: AC_MSG_CHECKING(whether to include insults)
! 1013: AC_ARG_WITH(insults, [AS_HELP_STRING([--with-insults], [insult the user for entering an incorrect password])],
! 1014: [case $with_insults in
! 1015: yes) insults=on
! 1016: with_classic_insults=yes
! 1017: with_csops_insults=yes
! 1018: ;;
! 1019: disabled) insults=off
! 1020: with_classic_insults=yes
! 1021: with_csops_insults=yes
! 1022: ;;
! 1023: no) insults=off
! 1024: ;;
! 1025: *) AC_MSG_ERROR(["--with-insults does not take an argument."])
! 1026: ;;
! 1027: esac])
! 1028: if test "$insults" = "on"; then
! 1029: AC_DEFINE(USE_INSULTS)
! 1030: AC_MSG_RESULT(yes)
! 1031: else
! 1032: AC_MSG_RESULT(no)
! 1033: fi
! 1034:
! 1035: AC_ARG_WITH(all-insults, [AS_HELP_STRING([--with-all-insults], [include all the sudo insult sets])],
! 1036: [case $with_all_insults in
! 1037: yes) with_classic_insults=yes
! 1038: with_csops_insults=yes
! 1039: with_hal_insults=yes
! 1040: with_goons_insults=yes
! 1041: ;;
! 1042: no) ;;
! 1043: *) AC_MSG_ERROR(["--with-all-insults does not take an argument."])
! 1044: ;;
! 1045: esac])
! 1046:
! 1047: AC_ARG_WITH(classic-insults, [AS_HELP_STRING([--with-classic-insults], [include the insults from the "classic" sudo])],
! 1048: [case $with_classic_insults in
! 1049: yes) AC_DEFINE(CLASSIC_INSULTS)
! 1050: ;;
! 1051: no) ;;
! 1052: *) AC_MSG_ERROR(["--with-classic-insults does not take an argument."])
! 1053: ;;
! 1054: esac])
! 1055:
! 1056: AC_ARG_WITH(csops-insults, [AS_HELP_STRING([--with-csops-insults], [include CSOps insults])],
! 1057: [case $with_csops_insults in
! 1058: yes) AC_DEFINE(CSOPS_INSULTS)
! 1059: ;;
! 1060: no) ;;
! 1061: *) AC_MSG_ERROR(["--with-csops-insults does not take an argument."])
! 1062: ;;
! 1063: esac])
! 1064:
! 1065: AC_ARG_WITH(hal-insults, [AS_HELP_STRING([--with-hal-insults], [include 2001-like insults])],
! 1066: [case $with_hal_insults in
! 1067: yes) AC_DEFINE(HAL_INSULTS)
! 1068: ;;
! 1069: no) ;;
! 1070: *) AC_MSG_ERROR(["--with-hal-insults does not take an argument."])
! 1071: ;;
! 1072: esac])
! 1073:
! 1074: AC_ARG_WITH(goons-insults, [AS_HELP_STRING([--with-goons-insults], [include the insults from the "Goon Show"])],
! 1075: [case $with_goons_insults in
! 1076: yes) AC_DEFINE(GOONS_INSULTS)
! 1077: ;;
! 1078: no) ;;
! 1079: *) AC_MSG_ERROR(["--with-goons-insults does not take an argument."])
! 1080: ;;
! 1081: esac])
! 1082:
! 1083: AC_ARG_WITH(nsswitch, [AS_HELP_STRING([--with-nsswitch[[=PATH]]], [path to nsswitch.conf])],
! 1084: [case $with_nsswitch in
! 1085: no) ;;
! 1086: yes) with_nsswitch="/etc/nsswitch.conf"
! 1087: ;;
! 1088: *) ;;
! 1089: esac])
! 1090:
! 1091: AC_ARG_WITH(ldap, [AS_HELP_STRING([--with-ldap[[=DIR]]], [enable LDAP support])],
! 1092: [case $with_ldap in
! 1093: no) ;;
! 1094: *) AC_DEFINE(HAVE_LDAP)
! 1095: AC_MSG_CHECKING(whether to use sudoers from LDAP)
! 1096: AC_MSG_RESULT(yes)
! 1097: ;;
! 1098: esac])
! 1099:
! 1100: AC_ARG_WITH(ldap-conf-file, [AS_HELP_STRING([--with-ldap-conf-file], [path to LDAP configuration file])])
! 1101: test -n "$with_ldap_conf_file" && ldap_conf="$with_ldap_conf_file"
! 1102: SUDO_DEFINE_UNQUOTED(_PATH_LDAP_CONF, "$ldap_conf", [Path to the ldap.conf file])
! 1103:
! 1104: AC_ARG_WITH(ldap-secret-file, [AS_HELP_STRING([--with-ldap-secret-file], [path to LDAP secret password file])])
! 1105: test -n "$with_ldap_secret_file" && ldap_secret="$with_ldap_secret_file"
! 1106: SUDO_DEFINE_UNQUOTED(_PATH_LDAP_SECRET, "$ldap_secret", [Path to the ldap.secret file])
! 1107:
! 1108: AC_ARG_WITH(pc-insults, [AS_HELP_STRING([--with-pc-insults], [replace politically incorrect insults with less offensive ones])],
! 1109: [case $with_pc_insults in
! 1110: yes) AC_DEFINE(PC_INSULTS)
! 1111: ;;
! 1112: no) ;;
! 1113: *) AC_MSG_ERROR(["--with-pc-insults does not take an argument."])
! 1114: ;;
! 1115: esac])
! 1116:
! 1117: dnl include all insult sets on one line
! 1118: if test "$insults" = "on"; then
! 1119: AC_MSG_CHECKING(which insult sets to include)
! 1120: i=""
! 1121: test "$with_goons_insults" = "yes" && i="goons ${i}"
! 1122: test "$with_hal_insults" = "yes" && i="hal ${i}"
! 1123: test "$with_csops_insults" = "yes" && i="csops ${i}"
! 1124: test "$with_classic_insults" = "yes" && i="classic ${i}"
! 1125: AC_MSG_RESULT([$i])
! 1126: fi
! 1127:
! 1128: AC_MSG_CHECKING(whether to override the user's path)
! 1129: AC_ARG_WITH(secure-path, [AS_HELP_STRING([--with-secure-path], [override the user's path with a built-in one])],
! 1130: [case $with_secure_path in
! 1131: yes) with_secure_path="/bin:/usr/ucb:/usr/bin:/usr/sbin:/sbin:/usr/etc:/etc"
! 1132: AC_DEFINE_UNQUOTED(SECURE_PATH, "$with_secure_path")
! 1133: AC_MSG_RESULT([$with_secure_path])
! 1134: secure_path="set to $with_secure_path"
! 1135: ;;
! 1136: no) AC_MSG_RESULT(no)
! 1137: ;;
! 1138: *) AC_DEFINE_UNQUOTED(SECURE_PATH, "$with_secure_path")
! 1139: AC_MSG_RESULT([$with_secure_path])
! 1140: secure_path="set to F<$with_secure_path>"
! 1141: ;;
! 1142: esac], AC_MSG_RESULT(no))
! 1143:
! 1144: AC_MSG_CHECKING(whether to get ip addresses from the network interfaces)
! 1145: AC_ARG_WITH(interfaces, [AS_HELP_STRING([--without-interfaces], [don't try to read the ip addr of ether interfaces])],
! 1146: [case $with_interfaces in
! 1147: yes) AC_MSG_RESULT(yes)
! 1148: ;;
! 1149: no) AC_DEFINE(STUB_LOAD_INTERFACES)
! 1150: AC_MSG_RESULT(no)
! 1151: ;;
! 1152: *) AC_MSG_ERROR(["--with-interfaces does not take an argument."])
! 1153: ;;
! 1154: esac], AC_MSG_RESULT(yes))
! 1155:
! 1156: AC_ARG_WITH(stow, [AS_HELP_STRING([--with-stow], [deprecated])],
! 1157: [case $with_stow in
! 1158: *) AC_MSG_NOTICE([--with-stow option deprecated, now is defalt behavior])
! 1159: ;;
! 1160: esac])
! 1161:
! 1162: AC_MSG_CHECKING(whether to use an askpass helper)
! 1163: AC_ARG_WITH(askpass, [AS_HELP_STRING([--with-askpass=PATH], [Fully qualified pathname of askpass helper])],
! 1164: [case $with_askpass in
! 1165: yes) AC_MSG_ERROR(["--with-askpass takes a path as an argument."])
! 1166: ;;
! 1167: no) ;;
! 1168: *) ;;
! 1169: esac], [
! 1170: with_askpass=no
! 1171: AC_MSG_RESULT(no)
! 1172: ])
! 1173: if test X"$with_askpass" != X"no"; then
! 1174: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_ASKPASS, "$with_askpass")
! 1175: else
! 1176: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_ASKPASS, NULL)
! 1177: fi
! 1178:
! 1179: AC_ARG_WITH(plugindir, [AS_HELP_STRING([--with-plugindir=DIR], [set directory to load plugins from])],
! 1180: [case $with_plugindir in
! 1181: no) AC_MSG_ERROR(["illegal argument: --without-plugindir."])
! 1182: ;;
! 1183: *) ;;
! 1184: esac], [with_plugindir="$libexecdir/sudo"])
! 1185:
! 1186: AC_ARG_WITH(man, [AS_HELP_STRING([--with-man], [manual pages use man macros])],
! 1187: [case $with_man in
! 1188: yes) MANTYPE=man
! 1189: ;;
! 1190: no) AC_MSG_ERROR(["--without-man not supported."])
! 1191: ;;
! 1192: *) AC_MSG_ERROR(["ignoring unknown argument to --with-man: $with_man."])
! 1193: ;;
! 1194: esac])
! 1195:
! 1196: AC_ARG_WITH(mdoc, [AS_HELP_STRING([--with-mdoc], [manual pages use mdoc macros])],
! 1197: [case $with_mdoc in
! 1198: yes) MANTYPE=mdoc
! 1199: ;;
! 1200: no) AC_MSG_ERROR(["--without-mdoc not supported."])
! 1201: ;;
! 1202: *) AC_MSG_ERROR(["ignoring unknown argument to --with-mdoc: $with_mdoc."])
! 1203: ;;
! 1204: esac])
! 1205:
! 1206: dnl
! 1207: dnl Options for --enable
! 1208: dnl
! 1209:
! 1210: AC_MSG_CHECKING(whether to do user authentication by default)
! 1211: AC_ARG_ENABLE(authentication,
! 1212: [AS_HELP_STRING([--disable-authentication], [Do not require authentication by default])],
! 1213: [ case "$enableval" in
! 1214: yes) AC_MSG_RESULT(yes)
! 1215: ;;
! 1216: no) AC_MSG_RESULT(no)
! 1217: AC_DEFINE(NO_AUTHENTICATION)
! 1218: ;;
! 1219: *) AC_MSG_RESULT(no)
! 1220: AC_MSG_WARN([Ignoring unknown argument to --enable-authentication: $enableval])
! 1221: ;;
! 1222: esac
! 1223: ], AC_MSG_RESULT(yes))
! 1224:
! 1225: AC_MSG_CHECKING(whether to disable running the mailer as root)
! 1226: AC_ARG_ENABLE(root-mailer,
! 1227: [AS_HELP_STRING([--disable-root-mailer], [Don't run the mailer as root, run as the user])],
! 1228: [ case "$enableval" in
! 1229: yes) AC_MSG_RESULT(no)
! 1230: ;;
! 1231: no) AC_MSG_RESULT(yes)
! 1232: AC_DEFINE(NO_ROOT_MAILER)
! 1233: ;;
! 1234: *) AC_MSG_RESULT(no)
! 1235: AC_MSG_WARN([Ignoring unknown argument to --enable-root-mailer: $enableval])
! 1236: ;;
! 1237: esac
! 1238: ], AC_MSG_RESULT(no))
! 1239:
! 1240: AC_ARG_ENABLE(setreuid,
! 1241: [AS_HELP_STRING([--disable-setreuid], [Don't try to use the setreuid() function])],
! 1242: [ case "$enableval" in
! 1243: no) SKIP_SETREUID=yes
! 1244: ;;
! 1245: *) ;;
! 1246: esac
! 1247: ])
! 1248:
! 1249: AC_ARG_ENABLE(setresuid,
! 1250: [AS_HELP_STRING([--disable-setresuid], [Don't try to use the setresuid() function])],
! 1251: [ case "$enableval" in
! 1252: no) SKIP_SETRESUID=yes
! 1253: ;;
! 1254: *) ;;
! 1255: esac
! 1256: ])
! 1257:
! 1258: AC_MSG_CHECKING(whether to disable shadow password support)
! 1259: AC_ARG_ENABLE(shadow,
! 1260: [AS_HELP_STRING([--disable-shadow], [Never use shadow passwords])],
! 1261: [ case "$enableval" in
! 1262: yes) AC_MSG_RESULT(no)
! 1263: ;;
! 1264: no) AC_MSG_RESULT(yes)
! 1265: CHECKSHADOW="false"
! 1266: ;;
! 1267: *) AC_MSG_RESULT(no)
! 1268: AC_MSG_WARN([Ignoring unknown argument to --enable-shadow: $enableval])
! 1269: ;;
! 1270: esac
! 1271: ], AC_MSG_RESULT(no))
! 1272:
! 1273: AC_MSG_CHECKING(whether root should be allowed to use sudo)
! 1274: AC_ARG_ENABLE(root-sudo,
! 1275: [AS_HELP_STRING([--disable-root-sudo], [Don't allow root to run sudo])],
! 1276: [ case "$enableval" in
! 1277: yes) AC_MSG_RESULT(yes)
! 1278: ;;
! 1279: no) AC_DEFINE(NO_ROOT_SUDO)
! 1280: AC_MSG_RESULT(no)
! 1281: root_sudo=off
! 1282: ;;
! 1283: *) AC_MSG_ERROR(["--enable-root-sudo does not take an argument."])
! 1284: ;;
! 1285: esac
! 1286: ], AC_MSG_RESULT(yes))
! 1287:
! 1288: AC_MSG_CHECKING(whether to log the hostname in the log file)
! 1289: AC_ARG_ENABLE(log-host,
! 1290: [AS_HELP_STRING([--enable-log-host], [Log the hostname in the log file])],
! 1291: [ case "$enableval" in
! 1292: yes) AC_MSG_RESULT(yes)
! 1293: AC_DEFINE(HOST_IN_LOG)
! 1294: ;;
! 1295: no) AC_MSG_RESULT(no)
! 1296: ;;
! 1297: *) AC_MSG_RESULT(no)
! 1298: AC_MSG_WARN([Ignoring unknown argument to --enable-log-host: $enableval])
! 1299: ;;
! 1300: esac
! 1301: ], AC_MSG_RESULT(no))
! 1302:
! 1303: AC_MSG_CHECKING(whether to invoke a shell if sudo is given no arguments)
! 1304: AC_ARG_ENABLE(noargs-shell,
! 1305: [AS_HELP_STRING([--enable-noargs-shell], [If sudo is given no arguments run a shell])],
! 1306: [ case "$enableval" in
! 1307: yes) AC_MSG_RESULT(yes)
! 1308: AC_DEFINE(SHELL_IF_NO_ARGS)
! 1309: ;;
! 1310: no) AC_MSG_RESULT(no)
! 1311: ;;
! 1312: *) AC_MSG_RESULT(no)
! 1313: AC_MSG_WARN([Ignoring unknown argument to --enable-noargs-shell: $enableval])
! 1314: ;;
! 1315: esac
! 1316: ], AC_MSG_RESULT(no))
! 1317:
! 1318: AC_MSG_CHECKING(whether to set \$HOME to target user in shell mode)
! 1319: AC_ARG_ENABLE(shell-sets-home,
! 1320: [AS_HELP_STRING([--enable-shell-sets-home], [Set $HOME to target user in shell mode])],
! 1321: [ case "$enableval" in
! 1322: yes) AC_MSG_RESULT(yes)
! 1323: AC_DEFINE(SHELL_SETS_HOME)
! 1324: ;;
! 1325: no) AC_MSG_RESULT(no)
! 1326: ;;
! 1327: *) AC_MSG_RESULT(no)
! 1328: AC_MSG_WARN([Ignoring unknown argument to --enable-shell-sets-home: $enableval])
! 1329: ;;
! 1330: esac
! 1331: ], AC_MSG_RESULT(no))
! 1332:
! 1333: AC_MSG_CHECKING(whether to disable 'command not found' messages)
! 1334: AC_ARG_ENABLE(path_info,
! 1335: [AS_HELP_STRING([--disable-path-info], [Print 'command not allowed' not 'command not found'])],
! 1336: [ case "$enableval" in
! 1337: yes) AC_MSG_RESULT(no)
! 1338: ;;
! 1339: no) AC_MSG_RESULT(yes)
! 1340: AC_DEFINE(DONT_LEAK_PATH_INFO)
! 1341: path_info=off
! 1342: ;;
! 1343: *) AC_MSG_RESULT(no)
! 1344: AC_MSG_WARN([Ignoring unknown argument to --enable-path-info: $enableval])
! 1345: ;;
! 1346: esac
! 1347: ], AC_MSG_RESULT(no))
! 1348:
! 1349: AC_MSG_CHECKING(whether to enable environment debugging)
! 1350: AC_ARG_ENABLE(env_debug,
! 1351: [AS_HELP_STRING([--enable-env-debug], [Whether to enable environment debugging.])],
! 1352: [ case "$enableval" in
! 1353: yes) AC_MSG_RESULT(yes)
! 1354: AC_DEFINE(ENV_DEBUG)
! 1355: ;;
! 1356: no) AC_MSG_RESULT(no)
! 1357: ;;
! 1358: *) AC_MSG_RESULT(no)
! 1359: AC_MSG_WARN([Ignoring unknown argument to --enable-env-debug: $enableval])
! 1360: ;;
! 1361: esac
! 1362: ], AC_MSG_RESULT(no))
! 1363:
! 1364: AC_ARG_ENABLE(zlib,
! 1365: [AS_HELP_STRING([--enable-zlib[[=PATH]]], [Whether to enable or disable zlib])],
! 1366: [], [enable_zlib=yes])
! 1367:
! 1368: AC_MSG_CHECKING(whether to enable environment resetting by default)
! 1369: AC_ARG_ENABLE(env_reset,
! 1370: [AS_HELP_STRING([--enable-env-reset], [Whether to enable environment resetting by default.])],
! 1371: [ case "$enableval" in
! 1372: yes) env_reset=on
! 1373: ;;
! 1374: no) env_reset=off
! 1375: ;;
! 1376: *) env_reset=on
! 1377: AC_MSG_WARN([Ignoring unknown argument to --enable-env-reset: $enableval])
! 1378: ;;
! 1379: esac
! 1380: ])
! 1381: if test "$env_reset" = "on"; then
! 1382: AC_MSG_RESULT(yes)
! 1383: AC_DEFINE(ENV_RESET, 1)
! 1384: else
! 1385: AC_MSG_RESULT(no)
! 1386: AC_DEFINE(ENV_RESET, 0)
! 1387: fi
! 1388:
! 1389: AC_ARG_ENABLE(warnings,
! 1390: [AS_HELP_STRING([--enable-warnings], [Whether to enable compiler warnings])],
! 1391: [ case "$enableval" in
! 1392: yes) ;;
! 1393: no) ;;
! 1394: *) AC_MSG_WARN([Ignoring unknown argument to --enable-warnings: $enableval])
! 1395: ;;
! 1396: esac
! 1397: ])
! 1398:
! 1399: AC_ARG_ENABLE(werror,
! 1400: [AS_HELP_STRING([--enable-werror], [Whether to enable the -Werror compiler option])],
! 1401: [ case "$enableval" in
! 1402: yes) ;;
! 1403: no) ;;
! 1404: *) AC_MSG_WARN([Ignoring unknown argument to --enable-werror: $enableval])
! 1405: ;;
! 1406: esac
! 1407: ])
! 1408:
! 1409: AC_ARG_ENABLE(hardening,
! 1410: [AS_HELP_STRING([--disable-hardening], [Do not use compiler/linker exploit mitigation options])],
! 1411: [], [enable_hardening=yes])
! 1412:
! 1413: AC_ARG_ENABLE(pie,
! 1414: [AS_HELP_STRING([--enable-pie], [Build sudo as a position independent executable.])])
! 1415:
! 1416: AC_ARG_ENABLE(poll,
! 1417: [AS_HELP_STRING([--disable-poll], [Use select() instead of poll().])])
! 1418:
! 1419: AC_ARG_ENABLE(admin-flag,
! 1420: [AS_HELP_STRING([--enable-admin-flag], [Whether to create a Ubuntu-style admin flag file])],
! 1421: [ case "$enableval" in
! 1422: yes) AC_DEFINE(USE_ADMIN_FLAG)
! 1423: ;;
! 1424: no) ;;
! 1425: *) AC_MSG_WARN([Ignoring unknown argument to --enable-admin-flag: $enableval])
! 1426: ;;
! 1427: esac
! 1428: ])
! 1429:
! 1430: AC_ARG_ENABLE(nls,
! 1431: [AS_HELP_STRING([--disable-nls], [Disable natural language support using gettext])],
! 1432: [], [enable_nls=yes])
! 1433:
! 1434: AC_ARG_ENABLE(rpath,
! 1435: [AS_HELP_STRING([--disable-rpath], [Disable passing of -Rpath to the linker])],
! 1436: [], [enable_rpath=yes])
! 1437:
! 1438: AC_ARG_ENABLE(static-sudoers,
! 1439: [AS_HELP_STRING([--enable-static-sudoers], [Build the sudoers policy module as part of the sudo binary instead as a plugin])],
! 1440: [], [enable_static_sudoers=no])
! 1441:
! 1442: AC_ARG_WITH(selinux, [AS_HELP_STRING([--with-selinux], [enable SELinux support])],
! 1443: [case $with_selinux in
! 1444: yes) SELINUX_USAGE="[[-r role]] [[-t type]] "
! 1445: AC_DEFINE(HAVE_SELINUX)
! 1446: SUDO_LIBS="${SUDO_LIBS} -lselinux"
! 1447: SUDO_OBJS="${SUDO_OBJS} selinux.o"
! 1448: PROGS="${PROGS} sesh"
! 1449: SEMAN=1
! 1450: AC_CHECK_LIB([selinux], [setkeycreatecon],
! 1451: [AC_DEFINE(HAVE_SETKEYCREATECON)])
! 1452: ;;
! 1453: no) ;;
! 1454: *) AC_MSG_ERROR(["--with-selinux does not take an argument."])
! 1455: ;;
! 1456: esac], [with_selinux=no])
! 1457:
! 1458: dnl
! 1459: dnl gss_krb5_ccache_name() may not work on Heimdal so we don't use it by default
! 1460: dnl
! 1461: AC_ARG_ENABLE(gss_krb5_ccache_name,
! 1462: [AS_HELP_STRING([--enable-gss-krb5-ccache-name], [Use GSS-API to set the Kerberos V cred cache name])],
! 1463: [check_gss_krb5_ccache_name=$enableval], [check_gss_krb5_ccache_name=no])
! 1464:
! 1465: dnl
! 1466: dnl C compiler checks
! 1467: dnl
! 1468: AC_SEARCH_LIBS([strerror], [cposix])
! 1469: AC_PROG_CPP
! 1470: AC_CHECK_TOOL(AR, ar, false)
! 1471: AC_CHECK_TOOL(RANLIB, ranlib, :)
! 1472: if test X"$AR" = X"false"; then
! 1473: AC_MSG_ERROR([the "ar" utility is required to build sudo])
! 1474: fi
! 1475:
! 1476: if test "x$ac_cv_prog_cc_c89" = "xno"; then
! 1477: AC_MSG_ERROR([Sudo version $PACKAGE_VERSION requires an ANSI C compiler to build.])
! 1478: fi
! 1479:
! 1480: dnl
! 1481: dnl If the user specified --disable-static, override them or we'll
! 1482: dnl be unable to build the executables in the sudoers plugin dir.
! 1483: dnl
! 1484: if test "$enable_static" = "no"; then
! 1485: AC_MSG_WARN([Ignoring --disable-static, sudo does not install static libs])
! 1486: enable_static=yes
! 1487: fi
! 1488:
! 1489: dnl
! 1490: dnl Libtool setup, we require libtool 2.2.6b or higher
! 1491: dnl
! 1492: AC_CANONICAL_HOST
! 1493: AC_CONFIG_MACRO_DIR([m4])
! 1494: LT_PREREQ([2.2.6b])
! 1495: LT_INIT([dlopen])
! 1496:
! 1497: dnl
! 1498: dnl Allow the user to specify an alternate libtool.
! 1499: dnl XXX - should be able to skip LT_INIT if we are using a different libtool
! 1500: dnl
! 1501: AC_ARG_WITH(libtool, [AS_HELP_STRING([--with-libtool=PATH], [specify path to libtool])],
! 1502: [case $with_libtool in
! 1503: yes|builtin) ;;
! 1504: no) AC_MSG_ERROR(["--without-libtool not supported."])
! 1505: ;;
! 1506: system) LIBTOOL=libtool
! 1507: ;;
! 1508: *) LIBTOOL="$with_libtool"
! 1509: ;;
! 1510: esac])
! 1511:
! 1512: dnl
! 1513: dnl Defer with_noexec until after libtool magic runs
! 1514: dnl
! 1515: if test "$enable_shared" = "no"; then
! 1516: with_noexec=no
! 1517: enable_dlopen=no
! 1518: lt_cv_dlopen=none
! 1519: lt_cv_dlopen_libs=
! 1520: ac_cv_func_dlopen=no
! 1521: LT_LDFLAGS=-static
! 1522: else
! 1523: eval _shrext="$shrext_cmds"
! 1524: # Darwin uses .dylib for libraries but .so for modules
! 1525: if test X"$_shrext" = X".dylib"; then
! 1526: SOEXT=".so"
! 1527: SHLIB_EXT=".dylib"
! 1528: else
! 1529: SOEXT="$_shrext"
! 1530: SHLIB_EXT="$_shrext"
! 1531: fi
! 1532: fi
! 1533: LIBDL="$lt_cv_dlopen_libs"
! 1534:
! 1535: AC_MSG_CHECKING(path to sudo_noexec.so)
! 1536: AC_ARG_WITH(noexec, [AS_HELP_STRING([--with-noexec[=PATH]], [fully qualified pathname of sudo_noexec.so])],
! 1537: [case $with_noexec in
! 1538: yes) with_noexec="$libexecdir/sudo/sudo_noexec.so"
! 1539: ;;
! 1540: no) ;;
! 1541: *) ;;
! 1542: esac], [with_noexec="$libexecdir/sudo/sudo_noexec.so"])
! 1543: AC_MSG_RESULT($with_noexec)
! 1544: NOEXECFILE="sudo_noexec.so"
! 1545: NOEXECDIR="`echo $with_noexec|sed -e 's:^${\([[^}]]*\)}:$(\1):' -e 's:^\(.*\)/[[^/]]*:\1:'`"
! 1546:
! 1547: dnl
! 1548: dnl Find programs we use
! 1549: dnl
! 1550: AC_PATH_PROG(UNAMEPROG, [uname], [uname])
! 1551: AC_PATH_PROG(TRPROG, [tr], [tr])
! 1552: AC_PATH_PROG(MANDOCPROG, [mandoc], [mandoc])
! 1553: if test "$MANDOCPROG" != "mandoc"; then
! 1554: : ${MANTYPE='mdoc'}
! 1555: else
! 1556: AC_PATH_PROG(NROFFPROG, [nroff])
! 1557: if test -n "$NROFFPROG"; then
! 1558: test -n "$MANTYPE" && sudo_cv_var_mantype="$MANTYPE"
! 1559: AC_CACHE_CHECK([which macro set to use for manual pages],
! 1560: [sudo_cv_var_mantype],
! 1561: [
! 1562: sudo_cv_var_mantype="man"
! 1563: echo ".Sh NAME" > conftest
! 1564: echo ".Nm sudo" >> conftest
! 1565: echo ".Nd sudo" >> conftest
! 1566: echo ".Sh DESCRIPTION" >> conftest
! 1567: echo "sudo" >> conftest
! 1568: if $NROFFPROG -mdoc conftest >/dev/null 2>&1; then
! 1569: sudo_cv_var_mantype="mdoc"
! 1570: fi
! 1571: rm -f conftest
! 1572: ]
! 1573: )
! 1574: MANTYPE="$sudo_cv_var_mantype"
! 1575: else
! 1576: MANTYPE=cat
! 1577: MANDIRTYPE=cat
! 1578: mansrcdir='$(srcdir)'
! 1579: fi
! 1580: fi
! 1581:
! 1582: dnl
! 1583: dnl What kind of beastie are we being run on?
! 1584: dnl Barf if config.cache was generated on another host.
! 1585: dnl
! 1586: if test -n "$sudo_cv_prev_host"; then
! 1587: if test "$sudo_cv_prev_host" != "$host"; then
! 1588: AC_MSG_ERROR([config.cache was created on a different host; remove it and re-run configure.])
! 1589: else
! 1590: AC_MSG_CHECKING(previous host type)
! 1591: AC_CACHE_VAL(sudo_cv_prev_host, sudo_cv_prev_host="$host")
! 1592: AC_MSG_RESULT([$sudo_cv_prev_host])
! 1593: fi
! 1594: else
! 1595: # this will produce no output since there is no cached value
! 1596: AC_CACHE_VAL(sudo_cv_prev_host, sudo_cv_prev_host="$host")
! 1597: fi
! 1598:
! 1599: dnl
! 1600: dnl We want to be able to differentiate between different rev's
! 1601: dnl
! 1602: if test -n "$host_os"; then
! 1603: OS=`echo $host_os | sed 's/[[0-9]].*//'`
! 1604: OSREV=`echo $host_os | sed 's/^[[^0-9\.]]*\([[0-9\.]]*\).*$/\1/'`
! 1605: OSMAJOR=`echo $OSREV | sed 's/\..*$//'`
! 1606: else
! 1607: OS="unknown"
! 1608: OSREV=0
! 1609: OSMAJOR=0
! 1610: fi
! 1611:
! 1612: case "$host" in
! 1613: *-*-sunos4*)
! 1614: # LD_PRELOAD is space-delimited
! 1615: RTLD_PRELOAD_DELIM=" "
! 1616:
! 1617: # getcwd(3) opens a pipe to getpwd(1)!?!
! 1618: BROKEN_GETCWD=1
! 1619:
! 1620: # system headers lack prototypes but gcc helps...
! 1621: if test -n "$GCC"; then
! 1622: OSDEFS="${OSDEFS} -D__USE_FIXED_PROTOTYPES__"
! 1623: fi
! 1624:
! 1625: shadow_funcs="getpwanam issecure"
! 1626: ;;
! 1627: *-*-solaris2*)
! 1628: # LD_PRELOAD is space-delimited
! 1629: RTLD_PRELOAD_DELIM=" "
! 1630:
! 1631: # Solaris-specific initialization
! 1632: OS_INIT=os_init_solaris
! 1633: SUDO_OBJS="${SUDO_OBJS} solaris.o"
! 1634:
! 1635: # To get the crypt(3) prototype (so we pass -Wall)
! 1636: OSDEFS="${OSDEFS} -D__EXTENSIONS__"
! 1637: # AFS support needs -lucb
! 1638: if test "$with_AFS" = "yes"; then
! 1639: AFS_LIBS="-lc -lucb"
! 1640: fi
! 1641: : ${mansectsu='1m'}
! 1642: : ${mansectform='4'}
! 1643: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 1644: AC_CHECK_FUNCS(priv_set, [PSMAN=1])
! 1645: ;;
! 1646: *-*-aix*)
! 1647: # To get all prototypes (so we pass -Wall)
! 1648: OSDEFS="${OSDEFS} -D_ALL_SOURCE -D_LINUX_SOURCE_COMPAT"
! 1649: SUDOERS_LDFLAGS="${SUDOERS_LDFLAGS} -Wl,-bI:\$(srcdir)/aixcrypt.exp"
! 1650:
! 1651: # On AIX 6 and higher default to PAM, else default to LAM
! 1652: if test $OSMAJOR -ge 6; then
! 1653: if test X"$with_pam" = X""; then
! 1654: AUTH_EXCL_DEF="PAM"
! 1655: fi
! 1656: else
! 1657: if test X"$with_aixauth" = X""; then
! 1658: AC_CHECK_FUNCS(authenticate, [AUTH_EXCL_DEF="AIX_AUTH"])
! 1659: fi
! 1660: fi
! 1661:
! 1662: # AIX analog of nsswitch.conf, enabled by default
! 1663: AC_ARG_WITH(netsvc, [AS_HELP_STRING([--with-netsvc[[=PATH]]], [path to netsvc.conf])],
! 1664: [case $with_netsvc in
! 1665: no) ;;
! 1666: yes) with_netsvc="/etc/netsvc.conf"
! 1667: ;;
! 1668: *) ;;
! 1669: esac])
! 1670: if test -z "$with_nsswitch" -a -z "$with_netsvc"; then
! 1671: with_netsvc="/etc/netsvc.conf"
! 1672: fi
! 1673:
! 1674: # LDR_PRELOAD is only supported in AIX 5.3 and later
! 1675: if test $OSMAJOR -lt 5; then
! 1676: with_noexec=no
! 1677: else
! 1678: RTLD_PRELOAD_VAR="LDR_PRELOAD"
! 1679: fi
! 1680:
! 1681: # Remove timedir on boot, AIX does not have /var/run
! 1682: INIT_SCRIPT=aix.sh
! 1683: INIT_DIR=/etc/rc.d/init.d
! 1684: RC_LINK=/etc/rc.d/rc2.d/S90sudo
! 1685:
! 1686: # AIX-specific functions
! 1687: AC_CHECK_FUNCS(getuserattr setauthdb setrlimit64)
! 1688: COMMON_OBJS="${COMMON_OBJS} aix.lo"
! 1689: ;;
! 1690: *-*-hiuxmpp*)
! 1691: : ${mansectsu='1m'}
! 1692: : ${mansectform='4'}
! 1693:
! 1694: # HP-UX does not clear /var/run so we need to do it
! 1695: INIT_SCRIPT=hpux.sh
! 1696: INIT_DIR=/sbin/init.d
! 1697: RC_LINK=/sbin/rc2.d/S900sudo
! 1698:
! 1699: # HP-UX shared libs must be executable
! 1700: SHLIB_MODE=0755
! 1701:
! 1702: AC_CHECK_FUNCS(pstat_getproc)
! 1703: ;;
! 1704: *-*-hpux*)
! 1705: # AFS support needs -lBSD
! 1706: if test "$with_AFS" = "yes"; then
! 1707: AFS_LIBS="-lc -lBSD"
! 1708: fi
! 1709: : ${mansectsu='1m'}
! 1710: : ${mansectform='4'}
! 1711:
! 1712: # HP-UX does not clear /var/run so we need to do it
! 1713: INIT_SCRIPT=hpux.sh
! 1714: INIT_DIR=/sbin/init.d
! 1715: RC_LINK=/sbin/rc2.d/S900sudo
! 1716:
! 1717: # HP-UX shared libs must be executable
! 1718: SHLIB_MODE=0755
! 1719:
! 1720: # The HP bundled compiler cannot generate shared libs
! 1721: if test -z "$GCC"; then
! 1722: AC_CACHE_CHECK([for HP bundled C compiler],
! 1723: [sudo_cv_var_hpccbundled],
! 1724: [if $CC -V 2>&1 | grep '^(Bundled)' >/dev/null 2>&1; then
! 1725: sudo_cv_var_hpccbundled=yes
! 1726: else
! 1727: sudo_cv_var_hpccbundled=no
! 1728: fi]
! 1729: )
! 1730: if test "$sudo_cv_var_hpccbundled" = "yes"; then
! 1731: AC_MSG_ERROR([The HP bundled C compiler is unable to build Sudo, you must use gcc or the HP ANSI C compiler instead.])
! 1732: fi
! 1733: fi
! 1734:
! 1735: # Build PA-RISC1.1 objects for better portability
! 1736: case "$host_cpu" in
! 1737: hppa[[2-9]]*)
! 1738: _CFLAGS="$CFLAGS"
! 1739: if test -n "$GCC"; then
! 1740: portable_flag="-march=1.1"
! 1741: else
! 1742: portable_flag="+DAportable"
! 1743: fi
! 1744: CFLAGS="$CFLAGS $portable_flag"
! 1745: AC_CACHE_CHECK([whether $CC understands $portable_flag],
! 1746: [sudo_cv_var_daportable],
! 1747: [AC_LINK_IFELSE(
! 1748: [AC_LANG_PROGRAM([[]], [[]])],
! 1749: [sudo_cv_var_daportable=yes],
! 1750: [sudo_cv_var_daportable=no]
! 1751: )
! 1752: ]
! 1753: )
! 1754: if test X"$sudo_cv_var_daportable" != X"yes"; then
! 1755: CFLAGS="$_CFLAGS"
! 1756: fi
! 1757: ;;
! 1758: esac
! 1759:
! 1760: case "$host_os" in
! 1761: hpux[[1-8]].*)
! 1762: AC_DEFINE(BROKEN_SYSLOG)
! 1763: ;;
! 1764: hpux9.*)
! 1765: AC_DEFINE(BROKEN_SYSLOG)
! 1766:
! 1767: shadow_funcs="getspwuid"
! 1768:
! 1769: # DCE support (requires ANSI C compiler)
! 1770: if test "$with_DCE" = "yes"; then
! 1771: # order of libs in 9.X is important. -lc_r must be last
! 1772: SUDOERS_LIBS="${SUDOERS_LIBS} -ldce -lM -lc_r"
! 1773: LIBS="${LIBS} -ldce -lM -lc_r"
! 1774: SUDO_APPEND_CPPFLAGS(-D_REENTRANT)
! 1775: SUDO_APPEND_CPPFLAGS(-I/usr/include/reentrant)
! 1776: fi
! 1777: ;;
! 1778: hpux10.*)
! 1779: shadow_funcs="getprpwnam iscomsec"
! 1780: shadow_libs="-lsec"
! 1781: # HP-UX 10.20 libc has an incompatible getline
! 1782: ac_cv_func_getline="no"
! 1783: ;;
! 1784: *)
! 1785: shadow_funcs="getspnam iscomsec"
! 1786: shadow_libs="-lsec"
! 1787: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 1788: ;;
! 1789: esac
! 1790: AC_CHECK_FUNCS(pstat_getproc)
! 1791: ;;
! 1792: *-dec-osf*)
! 1793: # ignore envariables wrt dynamic lib path
! 1794: # XXX - sudo LDFLAGS instead?
! 1795: SUDOERS_LDFLAGS="${SUDOERS_LDFLAGS} -Wl,-no_library_replacement"
! 1796:
! 1797: : ${CHECKSIA='true'}
! 1798: AC_MSG_CHECKING(whether to disable sia support on Digital UNIX)
! 1799: AC_ARG_ENABLE(sia,
! 1800: [AS_HELP_STRING([--disable-sia], [Disable SIA on Digital UNIX])],
! 1801: [ case "$enableval" in
! 1802: yes) AC_MSG_RESULT(no)
! 1803: CHECKSIA=true
! 1804: ;;
! 1805: no) AC_MSG_RESULT(yes)
! 1806: CHECKSIA=false
! 1807: ;;
! 1808: *) AC_MSG_RESULT(no)
! 1809: AC_MSG_WARN([Ignoring unknown argument to --enable-sia: $enableval])
! 1810: ;;
! 1811: esac
! 1812: ], AC_MSG_RESULT(no))
! 1813:
! 1814: shadow_funcs="getprpwnam dispcrypt"
! 1815: # OSF/1 4.x and higher need -ldb too
! 1816: if test $OSMAJOR -lt 4; then
! 1817: shadow_libs="-lsecurity -laud -lm"
! 1818: else
! 1819: shadow_libs="-lsecurity -ldb -laud -lm"
! 1820: fi
! 1821:
! 1822: # use SIA by default, if we have it
! 1823: test "$CHECKSIA" = "true" && AUTH_EXCL_DEF="SIA"
! 1824:
! 1825: #
! 1826: # Some versions of Digital Unix ship with a broken
! 1827: # copy of prot.h, which we need for shadow passwords.
! 1828: # XXX - make should remove this as part of distclean
! 1829: #
! 1830: AC_MSG_CHECKING([for broken prot.h])
! 1831: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
! 1832: #include <sys/types.h>
! 1833: #include <sys/security.h>
! 1834: #include <prot.h>
! 1835: ]], [[exit(0);]])], [AC_MSG_RESULT(no)], [AC_MSG_RESULT([yes, fixing locally])
! 1836: sed 's:<acl.h>:<sys/acl.h>:g' < /usr/include/prot.h > prot.h
! 1837: ])
! 1838: # ":DEFAULT" must be appended to _RLD_LIST
! 1839: RTLD_PRELOAD_VAR="_RLD_LIST"
! 1840: RTLD_PRELOAD_DEFAULT="DEFAULT"
! 1841: : ${mansectsu='8'}
! 1842: : ${mansectform='4'}
! 1843: ;;
! 1844: *-*-irix*)
! 1845: OSDEFS="${OSDEFS} -D_BSD_TYPES"
! 1846: if test -z "$NROFFPROG"; then
! 1847: if test "$prefix" = "/usr/local" -a "$mandir" = '${datarootdir}/man'; then
! 1848: if test -d /usr/share/catman/local; then
! 1849: mandir="/usr/share/catman/local"
! 1850: else
! 1851: mandir="/usr/catman/local"
! 1852: fi
! 1853: fi
! 1854: # Compress cat pages with pack
! 1855: MANCOMPRESS='pack'
! 1856: MANCOMPRESSEXT='.z'
! 1857: else
! 1858: if test "$prefix" = "/usr/local" -a "$mandir" = '${datarootdir}/man'; then
! 1859: if test -d "/usr/share/man/local"; then
! 1860: mandir="/usr/share/man/local"
! 1861: else
! 1862: mandir="/usr/man/local"
! 1863: fi
! 1864: fi
! 1865: fi
! 1866: # IRIX <= 4 needs -lsun
! 1867: if test "$OSMAJOR" -le 4; then
! 1868: AC_CHECK_LIB(sun, getpwnam, [LIBS="${LIBS} -lsun"])
! 1869: fi
! 1870: # ":DEFAULT" must be appended to _RLD_LIST
! 1871: RTLD_PRELOAD_VAR="_RLD_LIST"
! 1872: RTLD_PRELOAD_DEFAULT="DEFAULT"
! 1873: : ${mansectsu='1m'}
! 1874: : ${mansectform='4'}
! 1875: ;;
! 1876: *-*-linux*|*-*-k*bsd*-gnu)
! 1877: OSDEFS="${OSDEFS} -D_GNU_SOURCE"
! 1878: # Some Linux versions need to link with -lshadow
! 1879: shadow_funcs="getspnam"
! 1880: shadow_libs_optional="-lshadow"
! 1881: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 1882: ;;
! 1883: *-convex-bsd*)
! 1884: OSDEFS="${OSDEFS} -D_CONVEX_SOURCE"
! 1885: if test -z "$GCC"; then
! 1886: CFLAGS="${CFLAGS} -D__STDC__"
! 1887: fi
! 1888:
! 1889: shadow_defs="-D_AUDIT -D_ACL -DSecureWare"
! 1890: shadow_funcs="getprpwnam"
! 1891: shadow_libs="-lprot"
! 1892: ;;
! 1893: *-*-ultrix*)
! 1894: OS="ultrix"
! 1895: shadow_funcs="getauthuid"
! 1896: shadow_libs="-lauth"
! 1897: ;;
! 1898: *-*-riscos*)
! 1899: LIBS="${LIBS} -lsun -lbsd"
! 1900: SUDO_APPEND_CPPFLAGS(-I/usr/include)
! 1901: SUDO_APPEND_CPPFLAGS(-I/usr/include/bsd)
! 1902: OSDEFS="${OSDEFS} -D_MIPS"
! 1903: : ${mansectsu='1m'}
! 1904: : ${mansectform='4'}
! 1905: ;;
! 1906: *-*-isc*)
! 1907: OSDEFS="${OSDEFS} -D_ISC"
! 1908: LIB_CRYPT=1
! 1909: SUDOERS_LIBS="${SUDOERS_LIBS} -lcrypt"
! 1910:
! 1911: shadow_funcs="getspnam"
! 1912: shadow_libs="-lsec"
! 1913:
! 1914: : ${mansectsu='1m'}
! 1915: : ${mansectform='4'}
! 1916: ;;
! 1917: *-*-sco*|*-sco-*)
! 1918: shadow_funcs="getprpwnam"
! 1919: shadow_libs="-lprot -lx"
! 1920: : ${mansectsu='1m'}
! 1921: : ${mansectform='4'}
! 1922: ;;
! 1923: m88k-motorola-sysv*)
! 1924: # motorolla's cc (a variant of gcc) does -O but not -O2
! 1925: CFLAGS=`echo $CFLAGS | sed 's/-O2/-O/g'`
! 1926: : ${mansectsu='1m'}
! 1927: : ${mansectform='4'}
! 1928: ;;
! 1929: *-sequent-sysv*)
! 1930: shadow_funcs="getspnam"
! 1931: shadow_libs="-lsec"
! 1932: : ${mansectsu='1m'}
! 1933: : ${mansectform='4'}
! 1934: ;;
! 1935: *-ncr-sysv4*|*-ncr-sysvr4*)
! 1936: AC_CHECK_LIB(c89, strcasecmp, [LIBS="${LIBS} -lc89"])
! 1937: : ${mansectsu='1m'}
! 1938: : ${mansectform='4'}
! 1939: ;;
! 1940: *-ccur-sysv4*|*-ccur-sysvr4*)
! 1941: LIBS="${LIBS} -lgen"
! 1942: : ${mansectsu='1m'}
! 1943: : ${mansectform='4'}
! 1944: ;;
! 1945: *-*-bsdi*)
! 1946: SKIP_SETREUID=yes
! 1947: # Check for newer BSD auth API
! 1948: if test -z "$with_bsdauth"; then
! 1949: AC_CHECK_FUNCS(auth_challenge, [AUTH_EXCL_DEF="BSD_AUTH"])
! 1950: fi
! 1951: ;;
! 1952: *-*-freebsd*)
! 1953: # FreeBSD has a real setreuid(2) starting with 2.1 and
! 1954: # backported to 2.0.5. We just take 2.1 and above...
! 1955: case "$OSREV" in
! 1956: 0.*|1.*|2.0*)
! 1957: SKIP_SETREUID=yes
! 1958: ;;
! 1959: esac
! 1960: OSDEFS="${OSDEFS} -D_BSD_SOURCE"
! 1961: if test "${with_skey-'no'}" = "yes"; then
! 1962: SUDOERS_LIBS="${SUDOERS_LIBS} -lmd"
! 1963: fi
! 1964: CHECKSHADOW="false"
! 1965: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 1966: : ${with_logincap='maybe'}
! 1967: ;;
! 1968: *-*-*openbsd*)
! 1969: # OpenBSD-specific initialization
! 1970: OS_INIT=os_init_openbsd
! 1971: SUDO_OBJS="${SUDO_OBJS} openbsd.o"
! 1972:
! 1973: # OpenBSD has a real setreuid(2) starting with 3.3 but
! 1974: # we will use setresuid(2) instead.
! 1975: SKIP_SETREUID=yes
! 1976: OSDEFS="${OSDEFS} -D_BSD_SOURCE"
! 1977: CHECKSHADOW="false"
! 1978: # OpenBSD >= 3.0 supports BSD auth
! 1979: if test -z "$with_bsdauth"; then
! 1980: if test "$OSMAJOR" -ge 3; then
! 1981: AUTH_EXCL_DEF="BSD_AUTH"
! 1982: fi
! 1983: fi
! 1984: : ${with_logincap='maybe'}
! 1985: ;;
! 1986: *-*-*netbsd*)
! 1987: # NetBSD has a real setreuid(2) starting with 1.3.2
! 1988: case "$OSREV" in
! 1989: 0.9*|1.[[012]]*|1.3|1.3.1)
! 1990: SKIP_SETREUID=yes
! 1991: ;;
! 1992: esac
! 1993: CHECKSHADOW="false"
! 1994: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 1995: : ${with_logincap='maybe'}
! 1996: ;;
! 1997: *-*-dragonfly*)
! 1998: OSDEFS="${OSDEFS} -D_BSD_SOURCE"
! 1999: if test "${with_skey-'no'}" = "yes"; then
! 2000: SUDOERS_LIBS="${SUDOERS_LIBS} -lmd"
! 2001: fi
! 2002: CHECKSHADOW="false"
! 2003: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 2004: : ${with_logincap='yes'}
! 2005: ;;
! 2006: *-*-*bsd*)
! 2007: CHECKSHADOW="false"
! 2008: ;;
! 2009: *-*-darwin*)
! 2010: # Darwin has a real setreuid(2) starting with 9.0
! 2011: if test $OSMAJOR -lt 9; then
! 2012: SKIP_SETREUID=yes
! 2013: fi
! 2014: CHECKSHADOW="false"
! 2015: test -z "$with_pam" && AUTH_EXCL_DEF="PAM"
! 2016: : ${with_logincap='yes'}
! 2017: # Darwin has a broken poll()
! 2018: : ${enable_poll='no'}
! 2019: # Darwin 8 and above can interpose library symbols cleanly
! 2020: if test $OSMAJOR -ge 8; then
! 2021: AC_DEFINE(HAVE___INTERPOSE)
! 2022: dlyld_interpose=yes
! 2023: else
! 2024: RTLD_PRELOAD_ENABLE_VAR="DYLD_FORCE_FLAT_NAMESPACE"
! 2025: fi
! 2026: RTLD_PRELOAD_VAR="DYLD_INSERT_LIBRARIES"
! 2027: ;;
! 2028: *-*-nextstep*)
! 2029: # lockf() on is broken on the NeXT -- use flock instead
! 2030: ac_cv_func_lockf=no
! 2031: ac_cv_func_flock=yes
! 2032: RTLD_PRELOAD_VAR="DYLD_INSERT_LIBRARIES"
! 2033: RTLD_PRELOAD_ENABLE_VAR="DYLD_FORCE_FLAT_NAMESPACE"
! 2034: ;;
! 2035: *-*-*sysv4*)
! 2036: : ${mansectsu='1m'}
! 2037: : ${mansectform='4'}
! 2038: ;;
! 2039: *-*-sysv*)
! 2040: : ${mansectsu='1m'}
! 2041: : ${mansectform='4'}
! 2042: ;;
! 2043: *-gnu*)
! 2044: OSDEFS="${OSDEFS} -D_GNU_SOURCE"
! 2045: ;;
! 2046: esac
! 2047:
! 2048: dnl
! 2049: dnl Library preloading to support NOEXEC
! 2050: dnl
! 2051: if test -n "$with_noexec"; then
! 2052: SUDO_DEFINE_UNQUOTED(RTLD_PRELOAD_VAR, "$RTLD_PRELOAD_VAR")
! 2053: SUDO_DEFINE_UNQUOTED(RTLD_PRELOAD_DELIM, "$RTLD_PRELOAD_DELIM")
! 2054: if test -n "$RTLD_PRELOAD_DEFAULT"; then
! 2055: SUDO_DEFINE_UNQUOTED(RTLD_PRELOAD_DEFAULT, "$RTLD_PRELOAD_DEFAULT")
! 2056: fi
! 2057: if test -n "$RTLD_PRELOAD_ENABLE_VAR"; then
! 2058: SUDO_DEFINE_UNQUOTED(RTLD_PRELOAD_ENABLE_VAR, "$RTLD_PRELOAD_ENABLE_VAR")
! 2059: fi
! 2060: fi
! 2061:
! 2062: dnl
! 2063: dnl Check for mixing mutually exclusive and regular auth methods
! 2064: dnl
! 2065: AUTH_REG=${AUTH_REG# }
! 2066: AUTH_EXCL=${AUTH_EXCL# }
! 2067: if test -n "$AUTH_EXCL"; then
! 2068: set -- $AUTH_EXCL
! 2069: if test $# != 1; then
! 2070: AC_MSG_ERROR([More than one mutually exclusive authentication method specified: $AUTH_EXCL])
! 2071: fi
! 2072: if test -n "$AUTH_REG"; then
! 2073: AC_MSG_ERROR([Cannot mix mutually exclusive ($AUTH_EXCL) and regular ($AUTH_REG) authentication methods])
! 2074: fi
! 2075: fi
! 2076: dnl
! 2077: dnl Only one of S/Key and OPIE may be specified
! 2078: dnl
! 2079: if test X"${with_skey}${with_opie}" = X"yesyes"; then
! 2080: AC_MSG_ERROR(["cannot use both S/Key and OPIE"])
! 2081: fi
! 2082:
! 2083: dnl
! 2084: dnl Use BSD-style man sections by default
! 2085: dnl
! 2086: : ${mansectsu='8'}
! 2087: : ${mansectform='5'}
! 2088:
! 2089: dnl
! 2090: dnl Add in any libpaths or libraries specified via configure
! 2091: dnl
! 2092: if test -n "$with_libpath"; then
! 2093: for i in ${with_libpath}; do
! 2094: SUDO_APPEND_LIBPATH(LDFLAGS, [$i])
! 2095: done
! 2096: fi
! 2097: if test -n "$with_libraries"; then
! 2098: for i in ${with_libraries}; do
! 2099: case $i in
! 2100: -l*) ;;
! 2101: *.a) ;;
! 2102: *.o) ;;
! 2103: *) i="-l${i}";;
! 2104: esac
! 2105: LIBS="${LIBS} ${i}"
! 2106: done
! 2107: fi
! 2108:
! 2109: dnl
! 2110: dnl C compiler checks (to be done after os checks)
! 2111: dnl
! 2112: AC_PROG_GCC_TRADITIONAL
! 2113: AC_C_CONST
! 2114: AC_C_VOLATILE
! 2115: AC_MSG_CHECKING([for variadic macro support in cpp])
! 2116: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
! 2117: AC_INCLUDES_DEFAULT
! 2118: #if defined(__GNUC__) && __GNUC__ == 2
! 2119: # define sudo_fprintf(fp, fmt...) fprintf((fp), (fmt))
! 2120: #else
! 2121: # define sudo_fprintf(fp, ...) fprintf((fp), __VA_ARGS__)
! 2122: #endif
! 2123: ], [sudo_fprintf(stderr, "a %s", "test");])], [AC_MSG_RESULT([yes])],
! 2124: [AC_MSG_RESULT([no])
! 2125: AC_DEFINE([NO_VARIADIC_MACROS], [1], [Define if your C preprocessor does not support variadic macros.])
! 2126: AC_MSG_WARN([Your C preprocessor doesn't support variadic macros, debugging support will be limited])])
! 2127:
! 2128: dnl
! 2129: dnl Program checks
! 2130: dnl
! 2131: AC_PROG_YACC
! 2132: AC_PATH_PROG([FLEX], [flex], [flex])
! 2133: SUDO_PROG_MV
! 2134: SUDO_PROG_BSHELL
! 2135: if test -z "$with_sendmail"; then
! 2136: SUDO_PROG_SENDMAIL
! 2137: fi
! 2138: SUDO_PROG_VI
! 2139: dnl
! 2140: dnl Check for authpriv support in syslog
! 2141: dnl
! 2142: AC_MSG_CHECKING(which syslog facility sudo should log with)
! 2143: if test X"$with_logfac" = X""; then
! 2144: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <syslog.h>]], [[int i = LOG_AUTHPRIV; (void)i;]])], [logfac=authpriv])
! 2145: fi
! 2146: AC_DEFINE_UNQUOTED(LOGFAC, "$logfac", [The syslog facility sudo will use.])
! 2147: AC_MSG_RESULT($logfac)
! 2148: dnl
! 2149: dnl Header file checks
! 2150: dnl
! 2151: AC_HEADER_STDC
! 2152: AC_HEADER_DIRENT
! 2153: AC_HEADER_TIME
! 2154: AC_HEADER_STDBOOL
! 2155: AC_HEADER_MAJOR
! 2156: AC_CHECK_HEADERS(malloc.h netgroup.h paths.h spawn.h utime.h utmpx.h sys/sockio.h sys/bsdtypes.h sys/select.h sys/stropts.h sys/sysmacros.h)
! 2157: AC_CHECK_HEADERS([endian.h] [sys/endian.h] [machine/endian.h], [break])
! 2158: AC_CHECK_HEADERS([procfs.h] [sys/procfs.h], [AC_CHECK_MEMBERS(struct psinfo.pr_ttydev, [AC_CHECK_FUNCS(_ttyname_dev)], [], [AC_INCLUDES_DEFAULT
! 2159: #ifdef HAVE_PROCFS_H
! 2160: #include <procfs.h>
! 2161: #endif
! 2162: #ifdef HAVE_SYS_PROCFS_H
! 2163: #include <sys/procfs.h>
! 2164: #endif
! 2165: ])]
! 2166: break)
! 2167: #
! 2168: # Check for large file support.
! 2169: #
! 2170: AC_SYS_LARGEFILE
! 2171: #
! 2172: # HP-UX may need to define _XOPEN_SOURCE_EXTENDED to expose MSG_WAITALL.
! 2173: # Also, HP-UX 11.23 has a broken sys/types.h when large files support
! 2174: # is enabled and _XOPEN_SOURCE_EXTENDED is not also defined.
! 2175: # The following test will define _XOPEN_SOURCE_EXTENDED in either case.
! 2176: #
! 2177: case "$host_os" in
! 2178: hpux*)
! 2179: AC_CACHE_CHECK([whether sys/socket.h needs _XOPEN_SOURCE_EXTENDED for MSG_WAITALL], [sudo_cv_xopen_source_extended],
! 2180: [AC_COMPILE_IFELSE([AC_LANG_PROGRAM([AC_INCLUDES_DEFAULT
! 2181: # include <sys/socket.h>], [int a = MSG_WAITALL; return a;])],
! 2182: [sudo_cv_xopen_source_extended=no], [
! 2183: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([#define _XOPEN_SOURCE_EXTENDED
! 2184: AC_INCLUDES_DEFAULT
! 2185: # include <sys/socket.h>], [int a = MSG_WAITALL; return a;])],
! 2186: [sudo_cv_xopen_source_extended=yes],
! 2187: [sudo_cv_xopen_source_extended=error])
! 2188: ])])
! 2189: if test "$sudo_cv_xopen_source_extended" = "yes"; then
! 2190: OSDEFS="${OSDEFS} -D_XOPEN_SOURCE_EXTENDED"
! 2191: SUDO_DEFINE(_XOPEN_SOURCE_EXTENDED)
! 2192: fi
! 2193: ;;
! 2194: esac
! 2195: AC_SYS_POSIX_TERMIOS
! 2196: if test "$ac_cv_sys_posix_termios" != "yes"; then
! 2197: AC_MSG_ERROR([Must have POSIX termios to build sudo])
! 2198: fi
! 2199: SUDO_MAILDIR
! 2200: if test ${with_logincap-'no'} != "no"; then
! 2201: AC_CHECK_HEADERS(login_cap.h, [LOGINCAP_USAGE='[[-c class]] '; LCMAN=1
! 2202: case "$OS" in
! 2203: freebsd|netbsd)
! 2204: SUDO_LIBS="${SUDO_LIBS} -lutil"
! 2205: SUDOERS_LIBS="${SUDOERS_LIBS} -lutil"
! 2206: ;;
! 2207: esac
! 2208: ])
! 2209: fi
! 2210: if test ${with_project-'no'} != "no"; then
! 2211: AC_CHECK_HEADER(project.h, [
! 2212: AC_CHECK_LIB(project, setproject, [
! 2213: AC_DEFINE(HAVE_PROJECT_H)
! 2214: SUDO_LIBS="${SUDO_LIBS} -lproject"
! 2215: ])
! 2216: ], [])
! 2217: fi
! 2218: dnl
! 2219: dnl typedef checks
! 2220: dnl We need to define __STDC_WANT_LIB_EXT1__ for errno_t and rsize_t
! 2221: dnl
! 2222: SUDO_APPEND_CPPFLAGS(-D__STDC_WANT_LIB_EXT1__=1)
! 2223: AC_TYPE_MODE_T
! 2224: AC_TYPE_UID_T
! 2225: AC_CHECK_TYPE([clockid_t], [], [AC_DEFINE(clockid_t, int)], [#include <sys/types.h>
! 2226: #include <time.h>])
! 2227: AC_CHECK_TYPE([sig_atomic_t], [], [AC_DEFINE(sig_atomic_t, int)], [#include <sys/types.h>
! 2228: #include <signal.h>])
! 2229: AC_CHECK_TYPES([sigaction_t], [], [], [#include <sys/types.h>
! 2230: #include <signal.h>])
! 2231: AC_CHECK_TYPES([struct timespec], [], [], [#include <sys/types.h>
! 2232: #ifdef TIME_WITH_SYS_TIME
! 2233: # include <sys/time.h>
! 2234: #endif
! 2235: #include <time.h>])
! 2236: AC_CHECK_TYPES([struct in6_addr], [], [], [#include <sys/types.h>
! 2237: #include <netinet/in.h>])
! 2238: AC_TYPE_LONG_LONG_INT
! 2239: if test X"$ac_cv_type_long_long_int" != X"yes"; then
! 2240: AC_MSG_ERROR(["C compiler does not appear to support the long long int type"])
! 2241: fi
! 2242: AC_CHECK_SIZEOF([long int])
! 2243: AC_CHECK_TYPE(id_t, unsigned int)
! 2244: AC_CHECK_TYPE(size_t, unsigned int)
! 2245: AC_CHECK_TYPE(ssize_t, int)
! 2246: AC_CHECK_TYPE(dev_t, int)
! 2247: AC_CHECK_TYPE(ino_t, unsigned int)
! 2248: AC_CHECK_TYPE(uint8_t, unsigned char)
! 2249: AC_CHECK_TYPE(uint32_t, unsigned int)
! 2250: AC_CHECK_TYPE(uint64_t, unsigned long long)
! 2251: AC_CHECK_TYPE(socklen_t, [], [AC_DEFINE(socklen_t, unsigned int)], [
! 2252: AC_INCLUDES_DEFAULT
! 2253: #include <sys/socket.h>])
! 2254: AC_CHECK_TYPE(rsize_t, size_t)
! 2255: AC_CHECK_TYPE(errno_t, int)
! 2256: SUDO_UID_T_LEN
! 2257: SUDO_SOCK_SA_LEN
! 2258: SUDO_SOCK_SIN_LEN
! 2259: dnl
! 2260: dnl Check for utmp/utmpx struct members.
! 2261: dnl We need to include OSDEFS for glibc which only has __e_termination
! 2262: dnl visible when _GNU_SOURCE is *not* defined.
! 2263: dnl
! 2264: _CFLAGS="$CFLAGS"
! 2265: CFLAGS="$CFLAGS $OSDEFS"
! 2266: if test $ac_cv_header_utmpx_h = "yes"; then
! 2267: AC_CHECK_MEMBERS([struct utmpx.ut_id, struct utmpx.ut_pid, struct utmpx.ut_tv, struct utmpx.ut_type], [], [], [
! 2268: # include <sys/types.h>
! 2269: # include <utmpx.h>
! 2270: ])
! 2271: dnl
! 2272: dnl Check for ut_exit.__e_termination first, then ut_exit.e_termination
! 2273: dnl
! 2274: AC_CHECK_MEMBERS([struct utmpx.ut_exit.__e_termination], [AC_DEFINE(HAVE_STRUCT_UTMPX_UT_EXIT)], [
! 2275: AC_CHECK_MEMBERS([struct utmpx.ut_exit.e_termination], [AC_DEFINE(HAVE_STRUCT_UTMPX_UT_EXIT)], [], [
! 2276: # include <sys/types.h>
! 2277: # include <utmpx.h>
! 2278: ])
! 2279: ], [
! 2280: # include <sys/types.h>
! 2281: # include <utmpx.h>
! 2282: ])
! 2283: else
! 2284: AC_CHECK_MEMBERS([struct utmp.ut_id, struct utmp.ut_pid, struct utmp.ut_tv, struct utmp.ut_type, struct utmp.ut_user], [], [], [
! 2285: # include <sys/types.h>
! 2286: # include <utmp.h>
! 2287: ])
! 2288: dnl
! 2289: dnl Check for ut_exit.__e_termination first, then ut_exit.e_termination
! 2290: dnl
! 2291: AC_CHECK_MEMBERS([struct utmp.ut_exit.__e_termination], [AC_DEFINE(HAVE_STRUCT_UTMP_UT_EXIT)], [
! 2292: AC_CHECK_MEMBERS([struct utmp.ut_exit.e_termination], [AC_DEFINE(HAVE_STRUCT_UTMP_UT_EXIT)], [], [
! 2293: # include <sys/types.h>
! 2294: # include <utmp.h>
! 2295: ])
! 2296: ], [
! 2297: # include <sys/types.h>
! 2298: # include <utmp.h>
! 2299: ])
! 2300: fi
! 2301: CFLAGS="$_CFLAGS"
! 2302:
! 2303: dnl
! 2304: dnl Function checks
! 2305: dnl
! 2306: AC_FUNC_GETGROUPS
! 2307: AC_CHECK_FUNCS(glob nl_langinfo regcomp setenv strftime strrchr strtoll \
! 2308: sysconf tzset)
! 2309: AC_CHECK_FUNCS(getgrouplist, [], [
! 2310: case "$host_os" in
! 2311: aix*)
! 2312: AC_CHECK_FUNCS(getgrset)
! 2313: ;;
! 2314: *)
! 2315: AC_CHECK_FUNC(nss_search, [
! 2316: AC_CHECK_FUNC(_nss_XbyY_buf_alloc, [
! 2317: # Solaris
! 2318: AC_CHECK_FUNC(_nss_initf_group, [
! 2319: AC_CHECK_HEADERS(nss_dbdefs.h)
! 2320: AC_DEFINE([HAVE_NSS_SEARCH])
! 2321: AC_DEFINE([HAVE__NSS_XBYY_BUF_ALLOC])
! 2322: AC_DEFINE([HAVE__NSS_INITF_GROUP])
! 2323: ])
! 2324: ], [
! 2325: # HP-UX
! 2326: AC_CHECK_FUNC(__nss_XbyY_buf_alloc, [
! 2327: AC_CHECK_FUNC(__nss_initf_group, [
! 2328: AC_CHECK_HEADERS(nss_dbdefs.h)
! 2329: AC_DEFINE([HAVE_NSS_SEARCH])
! 2330: AC_DEFINE([HAVE___NSS_XBYY_BUF_ALLOC])
! 2331: AC_DEFINE([HAVE___NSS_INITF_GROUP])
! 2332: ])
! 2333: ])
! 2334: ])
! 2335: ])
! 2336: ;;
! 2337: esac
! 2338: AC_LIBOBJ(getgrouplist)
! 2339: ])
! 2340: AC_CHECK_FUNCS(getline, [], [
! 2341: AC_LIBOBJ(getline)
! 2342: AC_CHECK_FUNCS(fgetln)
! 2343: ])
! 2344: dnl
! 2345: dnl If libc supports _FORTIFY_SOURCE check functions, use it.
! 2346: dnl
! 2347: if test "$enable_hardening" != "no"; then
! 2348: O_CPPFLAGS="$CPPFLAGS"
! 2349: CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=2"
! 2350: AC_CHECK_FUNC(__sprintf_chk, [
! 2351: AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[char buf[4]; (void)sprintf(buf, "%s", "foo");]])], [OSDEFS="${OSDEFS} -D_FORTIFY_SOURCE=2"], [])
! 2352: ], [])
! 2353: CPPFLAGS="$O_CPPFLAGS"
! 2354: fi
! 2355:
! 2356: utmp_style=LEGACY
! 2357: AC_CHECK_FUNCS(getutxid getutid, [utmp_style=POSIX; break])
! 2358: if test "$utmp_style" = "LEGACY"; then
! 2359: AC_CHECK_FUNCS(getttyent ttyslot, [break])
! 2360: AC_CHECK_FUNCS(fseeko)
! 2361: fi
! 2362:
! 2363: AC_CHECK_FUNCS(sysctl, [AC_CHECK_MEMBERS([struct kinfo_proc.ki_tdev], [],
! 2364: [
! 2365: AC_CHECK_MEMBERS([struct kinfo_proc2.p_tdev], [], [
! 2366: AC_CHECK_MEMBERS([struct kinfo_proc.p_tdev], [], [
! 2367: AC_CHECK_MEMBERS([struct kinfo_proc.kp_eproc.e_tdev], [], [], [
! 2368: # include <sys/param.h>
! 2369: # include <sys/sysctl.h>
! 2370: ])
! 2371: ], [
! 2372: # include <sys/param.h>
! 2373: # include <sys/sysctl.h>
! 2374: ])
! 2375: ],
! 2376: [
! 2377: # include <sys/param.h>
! 2378: # include <sys/sysctl.h>
! 2379: ])
! 2380: ],
! 2381: [
! 2382: # include <sys/param.h>
! 2383: # include <sys/sysctl.h>
! 2384: # include <sys/user.h>
! 2385: ])
! 2386: ])
! 2387:
! 2388: AC_CHECK_FUNCS(openpty, [AC_CHECK_HEADERS(libutil.h util.h pty.h, [break])], [
! 2389: AC_CHECK_LIB(util, openpty, [
! 2390: AC_CHECK_HEADERS(libutil.h util.h pty.h, [break])
! 2391: case "$SUDO_LIBS" in
! 2392: *-lutil*) ;;
! 2393: *) SUDO_LIBS="${SUDO_LIBS} -lutil";;
! 2394: esac
! 2395: AC_DEFINE(HAVE_OPENPTY)
! 2396: ], [
! 2397: AC_CHECK_FUNCS(_getpty, [], [
! 2398: AC_CHECK_FUNCS(grantpt, [
! 2399: AC_CHECK_FUNCS(posix_openpt)
! 2400: ], [
! 2401: AC_CHECK_FUNCS(revoke)
! 2402: ])
! 2403: ])
! 2404: ])
! 2405: ])
! 2406: AC_CHECK_FUNCS(unsetenv, [SUDO_FUNC_UNSETENV_VOID], [])
! 2407: SUDO_FUNC_PUTENV_CONST
! 2408: if test -z "$SKIP_SETRESUID"; then
! 2409: AC_CHECK_FUNCS(setresuid, [
! 2410: SKIP_SETREUID=yes
! 2411: AC_CHECK_FUNCS(getresuid)
! 2412: ])
! 2413: fi
! 2414: if test -z "$SKIP_SETREUID"; then
! 2415: AC_CHECK_FUNCS(setreuid)
! 2416: fi
! 2417: AC_CHECK_FUNCS(seteuid)
! 2418: if test X"$with_interfaces" != X"no"; then
! 2419: AC_CHECK_FUNCS(getifaddrs, [AC_CHECK_FUNCS(freeifaddrs)])
! 2420: fi
! 2421: if test -z "$BROKEN_GETCWD"; then
! 2422: AC_REPLACE_FUNCS(getcwd)
! 2423: fi
! 2424: AC_CHECK_FUNCS(lockf flock, [break])
! 2425: AC_CHECK_FUNCS(innetgr _innetgr, [AC_CHECK_FUNCS(getdomainname) [break]])
! 2426: AC_CHECK_FUNCS(utimes, [AC_CHECK_FUNCS(futimes futimesat, [break])], [AC_CHECK_FUNCS(futime) AC_LIBOBJ(utimes)])
! 2427: AC_CHECK_FUNCS(killpg, [], [AC_LIBOBJ(killpg)])
! 2428: SUDO_FUNC_FNMATCH([AC_DEFINE(HAVE_FNMATCH)], [AC_LIBOBJ(fnmatch)
! 2429: COMPAT_TEST_PROGS="${COMPAT_TEST_PROGS}${COMPAT_TEST_PROGS+ }fnm_test"
! 2430: ])
! 2431: SUDO_FUNC_ISBLANK
! 2432: AC_REPLACE_FUNCS(memrchr memset_s pw_dup strlcpy strlcat strtonum)
! 2433: AC_CHECK_FUNCS(clock_gettime, [], [
! 2434: # On Solaris, clock_gettime is in librt
! 2435: AC_CHECK_LIB(rt, clock_gettime, [
! 2436: AC_DEFINE(HAVE_CLOCK_GETTIME)
! 2437: SUDOERS_LIBS="${SUDOERS_LIBS} -lrt"
! 2438: ], [AC_LIBOBJ(clock_gettime)])
! 2439: ])
! 2440: AC_CHECK_FUNCS(getopt_long, [], [AC_LIBOBJ(getopt_long)
! 2441: AC_MSG_CHECKING([for optreset])
! 2442: AC_CACHE_VAL(sudo_cv_optreset, [
! 2443: AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[extern int optreset; optreset = 1; return optreset;]])], [sudo_cv_optreset=yes], [sudo_cv_optreset=no])])
! 2444: if test "$sudo_cv_optreset" = "yes"; then
! 2445: AC_DEFINE(HAVE_OPTRESET)
! 2446: fi
! 2447: AC_MSG_RESULT($sudo_cv_optreset)
! 2448: ])
! 2449: AC_CHECK_FUNCS(closefrom, [], [AC_LIBOBJ(closefrom)
! 2450: AC_CHECK_DECL(F_CLOSEM, AC_DEFINE(HAVE_FCNTL_CLOSEM), [], [
! 2451: # include <limits.h>
! 2452: # include <fcntl.h> ])
! 2453: ])
! 2454: AC_CHECK_FUNCS(mkstemps mkdtemp, [], [
! 2455: AC_CHECK_FUNCS(random lrand48, [break])
! 2456: AC_LIBOBJ(mktemp)
! 2457: ])
! 2458: AX_FUNC_SNPRINTF
! 2459: AC_CHECK_FUNCS(asprintf vasprintf)
! 2460: if test X"$ac_cv_have_working_snprintf$ac_cv_have_working_vsnprintf" = X"yesyes"; then
! 2461: # Don't add snprintf to LIBOBJS if it is already present.
! 2462: if test X"$ac_cv_func_asprintf$ac_cv_func_vasprintf" != X"yesyes"; then
! 2463: AC_LIBOBJ(snprintf)
! 2464: fi
! 2465: fi
! 2466: # We wrap OpenBSD's strtonum() to get translatable error strings.
! 2467: AC_CHECK_FUNCS(strtonum)
! 2468: AC_LIBOBJ(strtonum)
! 2469: if test X"$ac_cv_type_struct_timespec" != X"no"; then
! 2470: AC_CHECK_MEMBER([struct stat.st_mtim], [AC_DEFINE(HAVE_ST_MTIM)]
! 2471: [AC_CHECK_MEMBER([struct stat.st_mtim.st__tim], AC_DEFINE(HAVE_ST__TIM))],
! 2472: [AC_CHECK_MEMBER([struct stat.st_mtimespec], AC_DEFINE([HAVE_ST_MTIMESPEC]))])
! 2473: fi
! 2474: dnl
! 2475: dnl Function checks for sudo_noexec
! 2476: dnl
! 2477: if test X"$with_noexec" != X"no"; then
! 2478: # Check for underscore versions of standard exec functions
! 2479: # unless we are using dyld symbole interposition
! 2480: if test X"$dlyld_interpose" != X"yes"; then
! 2481: AC_CHECK_FUNCS(_execl __execl)
! 2482: AC_CHECK_FUNCS(_execle __execle)
! 2483: AC_CHECK_FUNCS(_execlp __execlp)
! 2484: AC_CHECK_FUNCS(_execv __execv)
! 2485: AC_CHECK_FUNCS(_execve __execve)
! 2486: AC_CHECK_FUNCS(_execvp __execvp)
! 2487: fi
! 2488: # Check for non-standard exec functions including underscore versions
! 2489: AC_CHECK_FUNCS(exect, [
! 2490: if test X"$dlyld_interpose" != X"yes"; then
! 2491: AC_CHECK_FUNCS(_exect __exect)
! 2492: fi
! 2493: ])
! 2494: AC_CHECK_FUNCS(execvP, [
! 2495: if test X"$dlyld_interpose" != X"yes"; then
! 2496: AC_CHECK_FUNCS(_execvP __execvP)
! 2497: fi
! 2498: ])
! 2499: AC_CHECK_FUNCS(execvpe, [
! 2500: if test X"$dlyld_interpose" != X"yes"; then
! 2501: AC_CHECK_FUNCS(_execvpe __execvpe)
! 2502: fi
! 2503: ])
! 2504: AC_CHECK_FUNCS(fexecve, [
! 2505: if test X"$dlyld_interpose" != X"yes"; then
! 2506: AC_CHECK_FUNCS(_fexecve __fexecve)
! 2507: fi
! 2508: ])
! 2509: # Check for posix_spawn, posix_spawnp and any underscore versions
! 2510: AC_CHECK_FUNCS(posix_spawn, [
! 2511: if test X"$dlyld_interpose" != X"yes"; then
! 2512: AC_CHECK_FUNCS(_posix_spawn __posix_spawn)
! 2513: fi
! 2514: ])
! 2515: AC_CHECK_FUNCS(posix_spawnp, [
! 2516: if test X"$dlyld_interpose" != X"yes"; then
! 2517: AC_CHECK_FUNCS(_posix_spawnp __posix_spawnp)
! 2518: fi
! 2519: ])
! 2520: fi
! 2521:
! 2522: dnl
! 2523: dnl Check for the dirfd function/macro. If not found, look for dd_fd in DIR.
! 2524: dnl
! 2525: AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
! 2526: #include <$ac_header_dirent>]], [[DIR *d; (void)dirfd(d);]])], [AC_DEFINE(HAVE_DIRFD)], [AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
! 2527: #include <$ac_header_dirent>]], [[DIR d; memset(&d, 0, sizeof(d)); return(d.dd_fd);]])], [AC_DEFINE(HAVE_DD_FD)], [])])
! 2528: AC_CHECK_MEMBERS([struct dirent.d_type], [], [], [
! 2529: AC_INCLUDES_DEFAULT
! 2530: #include <$ac_header_dirent>
! 2531: ])
! 2532: dnl
! 2533: dnl If socket(2) not in libc, check -lsocket and -linet
! 2534: dnl May need to link with *both* -lnsl and -lsocket due to unresolved symbols
! 2535: dnl
! 2536: AC_CHECK_FUNC(socket, [], [
! 2537: for libs in "-lsocket" "-linet" "-lsocket -lnsl"; do
! 2538: _libs=
! 2539: for lib in $libs; do
! 2540: case "$NET_LIBS" in
! 2541: *"$lib"*) ;;
! 2542: *) _libs="$_libs $lib";;
! 2543: esac
! 2544: done
! 2545: libs="${_libs# }"
! 2546: test -z "$libs" && continue
! 2547: lib="`echo \"$libs\"|sed -e 's/^-l//' -e 's/ .*$//'`"
! 2548: extralibs="`echo \"$libs\"|sed 's/^-l[[^ ]]*//'`"
! 2549: SUDO_CHECK_LIB($lib, socket, [NET_LIBS="${NET_LIBS} $libs"; LIBS="${LIBS} $libs"; break], [], [$extralibs])
! 2550: done
! 2551: ])
! 2552: dnl
! 2553: dnl If inet_pton(3) not in libc, check -lnsl and -linet
! 2554: dnl May need to link with *both* -lnsl and -lsocket due to unresolved symbols
! 2555: dnl Some systems may have inet_pton() in libresolv.
! 2556: dnl
! 2557: AC_CHECK_FUNC(inet_pton, [], [
! 2558: for libs in "-lsocket" "-linet" "-lsocket -lnsl" "-lresolv"; do
! 2559: _libs=
! 2560: for lib in $libs; do
! 2561: case "$NET_LIBS" in
! 2562: *"$lib"*) ;;
! 2563: *) _libs="$_libs $lib";;
! 2564: esac
! 2565: done
! 2566: libs="${_libs# }"
! 2567: test -z "$libs" && continue
! 2568: lib="`echo \"$libs\"|sed -e 's/^-l//' -e 's/ .*$//'`"
! 2569: extralibs="`echo \"$libs\"|sed 's/^-l[[^ ]]*//'`"
! 2570: SUDO_CHECK_LIB($lib, inet_pton, [
! 2571: AC_DEFINE(HAVE_INET_PTON)
! 2572: NET_LIBS="${NET_LIBS} $libs"
! 2573: LIBS="${LIBS} $libs"
! 2574: break
! 2575: ], [], [$extralibs])
! 2576: done
! 2577: ])
! 2578: if test X"$ac_cv_func_inet_pton" != X"yes"; then
! 2579: AC_LIBOBJ(inet_pton)
! 2580: fi
! 2581: dnl
! 2582: dnl If syslog(3) not in libc, check -lsocket, -lnsl and -linet
! 2583: dnl
! 2584: AC_CHECK_FUNC(syslog, [], [
! 2585: for libs in "-lsocket" "-linet" "-lsocket -lnsl"; do
! 2586: _libs=
! 2587: for lib in $libs; do
! 2588: case "$NET_LIBS" in
! 2589: *"$lib"*) ;;
! 2590: *) _libs="$_libs $lib";;
! 2591: esac
! 2592: done
! 2593: libs="${_libs# }"
! 2594: test -z "$libs" && continue
! 2595: lib="`echo \"$libs\"|sed -e 's/^-l//' -e 's/ .*$//'`"
! 2596: extralibs="`echo \"$libs\"|sed 's/^-l[[^ ]]*//'`"
! 2597: SUDO_CHECK_LIB($lib, syslog, [NET_LIBS="${NET_LIBS} $libs"; LIBS="${LIBS} $libs"; break], [], [$extralibs])
! 2598: done
! 2599: ])
! 2600: #
! 2601: # Check for getaddrinfo and add any required libs to NET_LIBS
! 2602: #
! 2603: OLIBS="$LIBS"
! 2604: AX_FUNC_GETADDRINFO
! 2605: for lib in $LIBS; do
! 2606: case "$OLIBS" in
! 2607: *"$lib"*) ;;
! 2608: *) NET_LIBS="$NET_LIBS $lib";;
! 2609: esac
! 2610: done
! 2611: dnl
! 2612: dnl Check for getprogname() or __progname
! 2613: dnl
! 2614: AC_CHECK_FUNCS(getprogname, , [
! 2615: AC_MSG_CHECKING([for __progname])
! 2616: AC_CACHE_VAL(sudo_cv___progname, [
! 2617: AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[extern char *__progname; (void)puts(__progname);]])], [sudo_cv___progname=yes], [sudo_cv___progname=no])])
! 2618: if test "$sudo_cv___progname" = "yes"; then
! 2619: AC_DEFINE(HAVE___PROGNAME)
! 2620: fi
! 2621: AC_MSG_RESULT($sudo_cv___progname)
! 2622: ])
! 2623: dnl
! 2624: dnl Check for __func__ or __FUNCTION__
! 2625: dnl
! 2626: AC_MSG_CHECKING([for __func__])
! 2627: AC_CACHE_VAL(sudo_cv___func__, [
! 2628: AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[(void)puts(__func__);]])], [sudo_cv___func__=yes], [sudo_cv___func__=no])])
! 2629: AC_MSG_RESULT($sudo_cv___func__)
! 2630: if test "$sudo_cv___func__" = "yes"; then
! 2631: AC_DEFINE(HAVE___FUNC__)
! 2632: elif test -n "$GCC"; then
! 2633: AC_MSG_CHECKING([for __FUNCTION__])
! 2634: AC_CACHE_VAL(sudo_cv___FUNCTION__, [
! 2635: AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[(void)puts(__FUNCTION__);]])], [sudo_cv___FUNCTION__=yes], [sudo_cv___FUNCTION__=no])])
! 2636: AC_MSG_RESULT($sudo_cv___FUNCTION__)
! 2637: if test "$sudo_cv___FUNCTION__" = "yes"; then
! 2638: AC_DEFINE(HAVE___FUNC__)
! 2639: AC_DEFINE(__func__, __FUNCTION__, [Define to __FUNCTION__ if your compiler supports __FUNCTION__ but not __func__])
! 2640: fi
! 2641: fi
! 2642:
! 2643: # gettext() and friends may be located in libc (Linux and Solaris)
! 2644: # or in libintl. However, it is possible to have libintl installed
! 2645: # even when gettext() is present in libc. In the case of GNU libintl,
! 2646: # gettext() will be defined to gettext_libintl in libintl.h.
! 2647: # Since gcc prefers /usr/local/include to /usr/include, we need to
! 2648: # make sure we use the gettext() that matches the include file.
! 2649: if test "$enable_nls" != "no"; then
! 2650: if test "$enable_nls" != "yes"; then
! 2651: SUDO_APPEND_CPPFLAGS(-I${enable_nls}/include)
! 2652: SUDO_APPEND_LIBPATH(LDFLAGS, [$enable_nls/lib])
! 2653: fi
! 2654: OLIBS="$LIBS"
! 2655: for l in "libc" "-lintl" "-lintl -liconv"; do
! 2656: if test "$l" = "libc"; then
! 2657: # If user specified a dir for libintl ignore libc
! 2658: if test "$enable_nls" != "yes"; then
! 2659: continue
! 2660: fi
! 2661: gettext_name=sudo_cv_gettext
! 2662: AC_MSG_CHECKING([for gettext])
! 2663: else
! 2664: LIBS="$OLIBS $l"
! 2665: gettext_name=sudo_cv_gettext"`echo $l|sed -e 's/ //g' -e 's/-/_/g'`"
! 2666: AC_MSG_CHECKING([for gettext in $l])
! 2667: fi
! 2668: AC_CACHE_VAL($gettext_name, [
! 2669: AC_LINK_IFELSE(
! 2670: [
! 2671: AC_LANG_PROGRAM([[#include <libintl.h>]], [(void)gettext((char *)0);])
! 2672: ], [eval $gettext_name=yes], [eval $gettext_name=no]
! 2673: )
! 2674: ])
! 2675: eval gettext_result="\$$gettext_name"
! 2676: AC_MSG_RESULT($gettext_result)
! 2677: if test "$gettext_result" = "yes"; then
! 2678: AC_CHECK_FUNCS(ngettext)
! 2679: break
! 2680: fi
! 2681: done
! 2682: LIBS="$OLIBS"
! 2683:
! 2684: if test "$sudo_cv_gettext" = "yes"; then
! 2685: AC_DEFINE(HAVE_LIBINTL_H)
! 2686: SUDO_NLS=enabled
! 2687: # For Solaris we need links from lang to lang.UTF-8 in localedir
! 2688: case "$host_os" in
! 2689: solaris2*) LOCALEDIR_SUFFIX=".UTF-8";;
! 2690: esac
! 2691: elif test "$sudo_cv_gettext_lintl" = "yes"; then
! 2692: AC_DEFINE(HAVE_LIBINTL_H)
! 2693: SUDO_NLS=enabled
! 2694: LIBINTL="-lintl"
! 2695: elif test "$sudo_cv_gettext_lintl_liconv" = "yes"; then
! 2696: AC_DEFINE(HAVE_LIBINTL_H)
! 2697: SUDO_NLS=enabled
! 2698: LIBINTL="-lintl -liconv"
! 2699: fi
! 2700: fi
! 2701:
! 2702: dnl
! 2703: dnl Deferred zlib option processing.
! 2704: dnl By default we use the system zlib if it is present.
! 2705: dnl If a directory was specified for zlib (or we are use sudo's version),
! 2706: dnl prepend the include dir to make sure we get the right zlib header.
! 2707: dnl
! 2708: case "$enable_zlib" in
! 2709: yes)
! 2710: AC_CHECK_LIB(z, gzdopen, [
! 2711: AC_CHECK_HEADERS(zlib.h, [ZLIB="-lz"], [enable_zlib=builtin])
! 2712: ])
! 2713: ;;
! 2714: no)
! 2715: ;;
! 2716: system)
! 2717: AC_DEFINE(HAVE_ZLIB_H)
! 2718: ZLIB="-lz"
! 2719: ;;
! 2720: builtin)
! 2721: # handled below
! 2722: ;;
! 2723: *)
! 2724: AC_DEFINE(HAVE_ZLIB_H)
! 2725: SUDO_APPEND_CPPFLAGS(-I${enable_zlib}/include)
! 2726: SUDO_APPEND_LIBPATH(ZLIB, [$enable_zlib/lib])
! 2727: ZLIB="${ZLIB} -lz"
! 2728: ;;
! 2729: esac
! 2730: if test X"$enable_zlib" = X"builtin"; then
! 2731: AC_DEFINE(HAVE_ZLIB_H)
! 2732: CPPFLAGS='-I$(top_builddir)/zlib -I$(top_srcdir)/zlib '"${CPPFLAGS}"
! 2733: ZLIB="${ZLIB}"' $(top_builddir)/zlib/libz.la'
! 2734: ZLIB_SRC=zlib
! 2735: AC_CONFIG_HEADER([zlib/zconf.h])
! 2736: AC_CONFIG_FILES([zlib/Makefile])
! 2737: fi
! 2738:
! 2739: dnl
! 2740: dnl Check for errno declaration in errno.h
! 2741: dnl
! 2742: AC_CHECK_DECLS([errno], [], [], [
! 2743: AC_INCLUDES_DEFAULT
! 2744: #include <errno.h>
! 2745: ])
! 2746:
! 2747: dnl
! 2748: dnl Check for h_errno declaration in netdb.h
! 2749: dnl
! 2750: AC_CHECK_DECLS([h_errno], [], [], [
! 2751: AC_INCLUDES_DEFAULT
! 2752: #include <netdb.h>
! 2753: ])
! 2754:
! 2755: dnl
! 2756: dnl Check for strsignal() or sys_siglist
! 2757: dnl
! 2758: AC_CHECK_FUNCS(strsignal, [], [
! 2759: AC_LIBOBJ(strsignal)
! 2760: HAVE_SIGLIST="false"
! 2761: AC_CHECK_DECLS([sys_siglist, _sys_siglist, __sys_siglist], [
! 2762: HAVE_SIGLIST="true"
! 2763: break
! 2764: ], [ ], [
! 2765: AC_INCLUDES_DEFAULT
! 2766: #include <signal.h>
! 2767: ])
! 2768: if test "$HAVE_SIGLIST" != "true"; then
! 2769: AC_LIBOBJ(siglist)
! 2770: fi
! 2771: ])
! 2772:
! 2773: dnl
! 2774: dnl Check for sig2str(), sys_signame or sys_sigabbrev
! 2775: dnl
! 2776: AC_CHECK_FUNCS(sig2str, [], [
! 2777: AC_LIBOBJ(sig2str)
! 2778: HAVE_SIGNAME="false"
! 2779: AC_CHECK_DECLS([sys_signame, _sys_signame, __sys_signame, sys_sigabbrev], [
! 2780: HAVE_SIGNAME="true"
! 2781: break
! 2782: ], [ ], [
! 2783: AC_INCLUDES_DEFAULT
! 2784: #include <signal.h>
! 2785: ])
! 2786: if test "$HAVE_SIGNAME" != "true"; then
! 2787: AC_CACHE_CHECK([for undeclared sys_sigabbrev],
! 2788: [sudo_cv_var_sys_sigabbrev],
! 2789: [AC_LINK_IFELSE(
! 2790: [AC_LANG_PROGRAM([[extern char **sys_sigabbrev;]], [[return sys_sigabbrev[1];]])],
! 2791: [sudo_cv_var_sys_sigabbrev=yes],
! 2792: [sudo_cv_var_sys_sigabbrev=no]
! 2793: )
! 2794: ]
! 2795: )
! 2796: if test "$sudo_cv_var_sys_sigabbrev" = yes; then
! 2797: AC_DEFINE(HAVE_SYS_SIGABBREV)
! 2798: else
! 2799: AC_LIBOBJ(signame)
! 2800: fi
! 2801: fi
! 2802: ])
! 2803:
! 2804: dnl
! 2805: dnl nsswitch.conf and its equivalents
! 2806: dnl
! 2807: if test ${with_netsvc-"no"} != "no"; then
! 2808: SUDO_DEFINE_UNQUOTED(_PATH_NETSVC_CONF, "${with_netsvc-/etc/netsvc.conf}")
! 2809: netsvc_conf=${with_netsvc-/etc/netsvc.conf}
! 2810: elif test ${with_nsswitch-"yes"} != "no"; then
! 2811: SUDO_DEFINE_UNQUOTED(_PATH_NSSWITCH_CONF, "${with_nsswitch-/etc/nsswitch.conf}")
! 2812: nsswitch_conf=${with_nsswitch-/etc/nsswitch.conf}
! 2813: fi
! 2814:
! 2815: dnl
! 2816: dnl Mutually exclusive auth checks come first, followed by
! 2817: dnl non-exclusive ones. Note: passwd must be last of all!
! 2818: dnl
! 2819:
! 2820: dnl
! 2821: dnl Convert default authentication methods to with_* if
! 2822: dnl no explicit authentication scheme was specified.
! 2823: dnl
! 2824: if test -z "${AUTH_EXCL}${AUTH_REG}" -a -n "$AUTH_EXCL_DEF"; then
! 2825: for auth in $AUTH_EXCL_DEF; do
! 2826: case $auth in
! 2827: AIX_AUTH) with_aixauth=maybe;;
! 2828: BSD_AUTH) with_bsdauth=maybe;;
! 2829: PAM) with_pam=maybe;;
! 2830: SIA) CHECKSIA=true;;
! 2831: esac
! 2832: done
! 2833: fi
! 2834:
! 2835: dnl
! 2836: dnl PAM support. Systems that use PAM by default set with_pam=default
! 2837: dnl and we do the actual tests here.
! 2838: dnl
! 2839: if test ${with_pam-"no"} != "no"; then
! 2840: #
! 2841: # Check for pam_start() in libpam first, then for pam_appl.h.
! 2842: #
! 2843: found_pam_lib=no
! 2844: AC_CHECK_LIB(pam, pam_start, [found_pam_lib=yes], [], [$lt_cv_dlopen_libs])
! 2845: #
! 2846: # Some PAM implementations (MacOS X for example) put the PAM headers
! 2847: # in /usr/include/pam instead of /usr/include/security...
! 2848: #
! 2849: found_pam_hdrs=no
! 2850: AC_CHECK_HEADERS([security/pam_appl.h] [pam/pam_appl.h], [found_pam_hdrs=yes; break])
! 2851: if test "$found_pam_lib" = "yes" -a "$found_pam_hdrs" = "yes"; then
! 2852: # Found both PAM libs and headers
! 2853: with_pam=yes
! 2854: elif test "$with_pam" = "yes"; then
! 2855: if test "$found_pam_lib" = "no"; then
! 2856: AC_MSG_ERROR(["--with-pam specified but unable to locate PAM development library."])
! 2857: fi
! 2858: if test "$found_pam_hdrs" = "no"; then
! 2859: AC_MSG_ERROR(["--with-pam specified but unable to locate PAM development headers."])
! 2860: fi
! 2861: elif test "$found_pam_lib" != "$found_pam_hdrs"; then
! 2862: if test "$found_pam_lib" = "no"; then
! 2863: AC_MSG_ERROR(["found PAM headers but no PAM development library; specify --without-pam to build without PAM"])
! 2864: fi
! 2865: if test "$found_pam_hdrs" = "no"; then
! 2866: AC_MSG_ERROR(["found PAM library but no PAM development headers; specify --without-pam to build without PAM"])
! 2867: fi
! 2868: fi
! 2869:
! 2870: if test "$with_pam" = "yes"; then
! 2871: # Older PAM implementations lack pam_getenvlist
! 2872: OLIBS="$LIBS"
! 2873: LIBS="$LIBS -lpam $lt_cv_dlopen_libs"
! 2874: AC_CHECK_FUNCS(pam_getenvlist)
! 2875: LIBS="$OLIBS"
! 2876:
! 2877: # We already link with -ldl if needed (see LIBDL below)
! 2878: SUDOERS_LIBS="${SUDOERS_LIBS} -lpam"
! 2879: AC_DEFINE(HAVE_PAM)
! 2880: AUTH_OBJS="$AUTH_OBJS pam.lo";
! 2881: AUTH_EXCL=PAM
! 2882:
! 2883: AC_ARG_WITH(pam-login, [AS_HELP_STRING([--with-pam-login], [enable specific PAM session for sudo -i])],
! 2884: [case $with_pam_login in
! 2885: yes) AC_DEFINE([HAVE_PAM_LOGIN])
! 2886: AC_MSG_CHECKING(whether to use PAM login)
! 2887: AC_MSG_RESULT(yes)
! 2888: pam_login_service="sudo-i"
! 2889: ;;
! 2890: no) ;;
! 2891: *) AC_MSG_ERROR(["--with-pam-login does not take an argument."])
! 2892: ;;
! 2893: esac])
! 2894:
! 2895: AC_MSG_CHECKING(whether to use PAM session support)
! 2896: AC_ARG_ENABLE(pam_session,
! 2897: [AS_HELP_STRING([--disable-pam-session], [Disable PAM session support])],
! 2898: [ case "$enableval" in
! 2899: yes) AC_MSG_RESULT(yes)
! 2900: ;;
! 2901: no) AC_MSG_RESULT(no)
! 2902: AC_DEFINE(NO_PAM_SESSION)
! 2903: pam_session=off
! 2904: ;;
! 2905: *) AC_MSG_RESULT(no)
! 2906: AC_MSG_WARN([Ignoring unknown argument to --enable-pam-session: $enableval])
! 2907: ;;
! 2908: esac], AC_MSG_RESULT(yes))
! 2909: fi
! 2910: fi
! 2911:
! 2912: dnl
! 2913: dnl AIX general authentication
! 2914: dnl If set to "maybe" only enable if no other exclusive method in use.
! 2915: dnl
! 2916: if test ${with_aixauth-'no'} != "no"; then
! 2917: if test X"$with_aixauth" != X"maybe" -o X"$AUTH_EXCL" = X""; then
! 2918: AC_MSG_NOTICE([using AIX general authentication])
! 2919: AC_DEFINE(HAVE_AIXAUTH)
! 2920: AUTH_OBJS="$AUTH_OBJS aix_auth.lo";
! 2921: SUDOERS_LIBS="${SUDOERS_LIBS} -ls"
! 2922: AUTH_EXCL=AIX_AUTH
! 2923: fi
! 2924: fi
! 2925:
! 2926: dnl
! 2927: dnl BSD authentication
! 2928: dnl If set to "maybe" only enable if no other exclusive method in use.
! 2929: dnl
! 2930: if test ${with_bsdauth-'no'} != "no"; then
! 2931: AC_CHECK_HEADER(bsd_auth.h, AC_DEFINE(HAVE_BSD_AUTH_H)
! 2932: [AUTH_OBJS="$AUTH_OBJS bsdauth.lo"]
! 2933: [BSDAUTH_USAGE='[[-a type]] ']
! 2934: [AUTH_EXCL=BSD_AUTH; BAMAN=1],
! 2935: [AC_MSG_ERROR([BSD authentication was specified but bsd_auth.h could not be found])])
! 2936: fi
! 2937:
! 2938: dnl
! 2939: dnl SIA authentication for Tru64 Unix
! 2940: dnl
! 2941: if test ${CHECKSIA-'false'} = "true"; then
! 2942: AC_CHECK_FUNCS(sia_ses_init, [found=true], [found=false])
! 2943: if test "$found" = "true"; then
! 2944: AUTH_EXCL=SIA
! 2945: AUTH_OBJS="$AUTH_OBJS sia.lo"
! 2946: fi
! 2947: fi
! 2948:
! 2949: dnl
! 2950: dnl extra FWTK libs + includes
! 2951: dnl
! 2952: if test ${with_fwtk-'no'} != "no"; then
! 2953: if test "$with_fwtk" != "yes"; then
! 2954: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_fwtk}])
! 2955: SUDO_APPEND_CPPFLAGS(-I${with_fwtk})
! 2956: with_fwtk=yes
! 2957: fi
! 2958: SUDOERS_LIBS="${SUDOERS_LIBS} -lauth -lfwall"
! 2959: AUTH_OBJS="$AUTH_OBJS fwtk.lo"
! 2960: fi
! 2961:
! 2962: dnl
! 2963: dnl extra SecurID lib + includes
! 2964: dnl
! 2965: if test ${with_SecurID-'no'} != "no"; then
! 2966: if test "$with_SecurID" != "yes"; then
! 2967: :
! 2968: elif test -d /usr/ace/examples; then
! 2969: with_SecurID=/usr/ace/examples
! 2970: else
! 2971: with_SecurID=/usr/ace
! 2972: fi
! 2973: SUDO_APPEND_CPPFLAGS(-I${with_SecurID})
! 2974: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_SecurID}])
! 2975: SUDOERS_LIBS="${SUDOERS_LIBS} -laceclnt -lpthread"
! 2976: AUTH_OBJS="$AUTH_OBJS securid5.lo";
! 2977: fi
! 2978:
! 2979: dnl
! 2980: dnl Non-mutually exclusive auth checks come next.
! 2981: dnl Note: passwd must be last of all!
! 2982: dnl
! 2983:
! 2984: dnl
! 2985: dnl Convert default authentication methods to with_* if
! 2986: dnl no explicit authentication scheme was specified.
! 2987: dnl
! 2988: if test -z "${AUTH_EXCL}" -a -n "$AUTH_DEF"; then
! 2989: for auth in $AUTH_DEF; do
! 2990: case $auth in
! 2991: passwd) : ${with_passwd='maybe'};;
! 2992: esac
! 2993: done
! 2994: fi
! 2995:
! 2996: dnl
! 2997: dnl Kerberos V
! 2998: dnl There is an easy way and a hard way...
! 2999: dnl
! 3000: if test ${with_kerb5-'no'} != "no"; then
! 3001: AC_CHECK_PROG(KRB5CONFIG, krb5-config, yes, "")
! 3002: if test -n "$KRB5CONFIG"; then
! 3003: AC_DEFINE(HAVE_KERB5)
! 3004: AUTH_OBJS="$AUTH_OBJS kerb5.lo"
! 3005: CPPFLAGS="$CPPFLAGS `krb5-config --cflags`"
! 3006: SUDOERS_LIBS="$SUDOERS_LIBS `krb5-config --libs`"
! 3007: dnl
! 3008: dnl Try to determine whether we have Heimdal or MIT Kerberos
! 3009: dnl
! 3010: AC_MSG_CHECKING(whether we are using Heimdal)
! 3011: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <krb5.h>]], [[const char *tmp = heimdal_version;]])], [
! 3012: AC_MSG_RESULT(yes)
! 3013: AC_DEFINE(HAVE_HEIMDAL)
! 3014: ], [
! 3015: AC_MSG_RESULT(no)
! 3016: ]
! 3017: )
! 3018: else
! 3019: AC_DEFINE(HAVE_KERB5)
! 3020: dnl
! 3021: dnl Use the specified directory, if any, else search for correct inc dir
! 3022: dnl
! 3023: if test "$with_kerb5" = "yes"; then
! 3024: found=no
! 3025: O_CPPFLAGS="$CPPFLAGS"
! 3026: for dir in "" "kerberosV/" "krb5/" "kerberos5/" "kerberosv5/"; do
! 3027: CPPFLAGS="$O_CPPFLAGS -I/usr/include/${dir}"
! 3028: AC_PREPROC_IFELSE([AC_LANG_PROGRAM([[#include <krb5.h>]])], [found=yes; break])
! 3029: done
! 3030: if test X"$found" = X"no"; then
! 3031: CPPFLAGS="$O_CPPFLAGS"
! 3032: AC_MSG_WARN([Unable to locate Kerberos V include files, you will have to edit the Makefile and add -I/path/to/krb/includes to CPPFLAGS])
! 3033: fi
! 3034: else
! 3035: dnl XXX - try to include krb5.h here too
! 3036: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_kerb5}/lib])
! 3037: SUDO_APPEND_CPPFLAGS(-I${with_kerb5}/include)
! 3038: fi
! 3039:
! 3040: dnl
! 3041: dnl Try to determine whether we have Heimdal or MIT Kerberos
! 3042: dnl
! 3043: AC_MSG_CHECKING(whether we are using Heimdal)
! 3044: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <krb5.h>]], [[const char *tmp = heimdal_version;]])], [
! 3045: AC_MSG_RESULT(yes)
! 3046: AC_DEFINE(HAVE_HEIMDAL)
! 3047: # XXX - need to check whether -lcrypo is needed!
! 3048: SUDOERS_LIBS="${SUDOERS_LIBS} -lkrb5 -lcrypto -ldes -lcom_err -lasn1"
! 3049: AC_CHECK_LIB(roken, main, [SUDOERS_LIBS="${SUDOERS_LIBS} -lroken"])
! 3050: ], [
! 3051: AC_MSG_RESULT(no)
! 3052: SUDOERS_LIBS="${SUDOERS_LIBS} -lkrb5 -lk5crypto -lcom_err"
! 3053: AC_CHECK_LIB(krb5support, main, [SUDOERS_LIBS="${SUDOERS_LIBS} -lkrb5support"])
! 3054: ])
! 3055: AUTH_OBJS="$AUTH_OBJS kerb5.lo"
! 3056: fi
! 3057: _LIBS="$LIBS"
! 3058: LIBS="${LIBS} ${SUDOERS_LIBS}"
! 3059: AC_CHECK_FUNCS(krb5_verify_user krb5_init_secure_context)
! 3060: AC_CHECK_FUNCS(krb5_get_init_creds_opt_alloc, [
! 3061: AC_CACHE_CHECK([whether krb5_get_init_creds_opt_free takes a context],
! 3062: sudo_cv_krb5_get_init_creds_opt_free_two_args, [
! 3063: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <krb5.h>]],
! 3064: [[krb5_get_init_creds_opt_free(NULL, NULL);]]
! 3065: )],
! 3066: [sudo_cv_krb5_get_init_creds_opt_free_two_args=yes],
! 3067: [sudo_cv_krb5_get_init_creds_opt_free_two_args=no]
! 3068: )
! 3069: ]
! 3070: )
! 3071: ])
! 3072: if test X"$sudo_cv_krb5_get_init_creds_opt_free_two_args" = X"yes"; then
! 3073: AC_DEFINE(HAVE_KRB5_GET_INIT_CREDS_OPT_FREE_TWO_ARGS)
! 3074: fi
! 3075: LIBS="$_LIBS"
! 3076: AC_MSG_CHECKING(whether to use an instance name for Kerberos V)
! 3077: AC_ARG_ENABLE(kerb5-instance,
! 3078: [AS_HELP_STRING([--enable-kerb5-instance], [instance string to append to the username (separated by a slash)])],
! 3079: [ case "$enableval" in
! 3080: yes) AC_MSG_ERROR(["must give --enable-kerb5-instance an argument."])
! 3081: ;;
! 3082: no) AC_MSG_RESULT(no)
! 3083: ;;
! 3084: *) SUDO_DEFINE_UNQUOTED(SUDO_KRB5_INSTANCE, "$enableval")
! 3085: AC_MSG_RESULT([$enableval])
! 3086: ;;
! 3087: esac], AC_MSG_RESULT(no))
! 3088: fi
! 3089:
! 3090: dnl
! 3091: dnl extra AFS libs and includes
! 3092: dnl
! 3093: if test ${with_AFS-'no'} = "yes"; then
! 3094:
! 3095: # looks like the "standard" place for AFS libs is /usr/afsws/lib
! 3096: AFSLIBDIRS="/usr/lib/afs /usr/afsws/lib /usr/afsws/lib/afs"
! 3097: for i in $AFSLIBDIRS; do
! 3098: if test -d ${i}; then
! 3099: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [$i])
! 3100: FOUND_AFSLIBDIR=true
! 3101: fi
! 3102: done
! 3103: if test -z "$FOUND_AFSLIBDIR"; then
! 3104: AC_MSG_WARN([Unable to locate AFS libraries, you will have to edit the Makefile and add -L/path/to/afs/libs to SUDOERS_LDFLAGS or rerun configure with the --with-libpath options.])
! 3105: fi
! 3106:
! 3107: # Order is important here. Note that we build AFS_LIBS from right to left
! 3108: # since AFS_LIBS may be initialized with BSD compat libs that must go last
! 3109: AFS_LIBS="-laudit ${AFS_LIBS}"
! 3110: for i in $AFSLIBDIRS; do
! 3111: if test -f ${i}/util.a; then
! 3112: AFS_LIBS="${i}/util.a ${AFS_LIBS}"
! 3113: FOUND_UTIL_A=true
! 3114: break;
! 3115: fi
! 3116: done
! 3117: if test -z "$FOUND_UTIL_A"; then
! 3118: AFS_LIBS="-lutil ${AFS_LIBS}"
! 3119: fi
! 3120: AFS_LIBS="-lkauth -lprot -lubik -lauth -lrxkad -lsys -ldes -lrx -llwp -lcom_err ${AFS_LIBS}"
! 3121:
! 3122: # AFS includes may live in /usr/include on some machines...
! 3123: for i in /usr/afsws/include; do
! 3124: if test -d ${i}; then
! 3125: SUDO_APPEND_CPPFLAGS(-I${i})
! 3126: FOUND_AFSINCDIR=true
! 3127: fi
! 3128: done
! 3129:
! 3130: if test -z "$FOUND_AFSLIBDIR"; then
! 3131: AC_MSG_WARN([Unable to locate AFS include dir, you may have to edit the Makefile and add -I/path/to/afs/includes to CPPFLAGS or rerun configure with the --with-incpath options.])
! 3132: fi
! 3133:
! 3134: AUTH_OBJS="$AUTH_OBJS afs.lo"
! 3135: fi
! 3136:
! 3137: dnl
! 3138: dnl extra DCE obj + lib
! 3139: dnl Order of libs in HP-UX 10.x is important, -ldce must be last.
! 3140: dnl
! 3141: if test ${with_DCE-'no'} = "yes"; then
! 3142: DCE_OBJS="${DCE_OBJS} dce_pwent.o"
! 3143: SUDOERS_LIBS="${SUDOERS_LIBS} -ldce"
! 3144: AUTH_OBJS="$AUTH_OBJS dce.lo"
! 3145: fi
! 3146:
! 3147: dnl
! 3148: dnl extra S/Key lib and includes
! 3149: dnl
! 3150: if test "${with_skey-'no'}" = "yes"; then
! 3151: O_LDFLAGS="$LDFLAGS"
! 3152: if test "$with_skey" != "yes"; then
! 3153: SUDO_APPEND_CPPFLAGS(-I${with_skey}/include)
! 3154: LDFLAGS="$LDFLAGS -L${with_skey}/lib"
! 3155: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_skey}/lib])
! 3156: AC_CHECK_HEADER([skey.h], [found=yes], [found=no], [#include <stdio.h>])
! 3157: else
! 3158: found=no
! 3159: O_CPPFLAGS="$CPPFLAGS"
! 3160: for dir in "" "/usr/local" "/usr/contrib"; do
! 3161: test -n "$dir" && CPPFLAGS="$O_CPPFLAGS -I${dir}/include"
! 3162: AC_CHECK_HEADER([skey.h], [found=yes; break], [], [#include <stdio.h>])
! 3163: done
! 3164: if test "$found" = "no" -o -z "$dir"; then
! 3165: CPPFLAGS="$O_CPPFLAGS"
! 3166: else
! 3167: LDFLAGS="$LDFLAGS -L${dir}/lib"
! 3168: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${dir}/lib])
! 3169: fi
! 3170: if test "$found" = "no"; then
! 3171: AC_MSG_WARN([Unable to locate skey.h, you will have to edit the Makefile and add -I/path/to/skey/includes to CPPFLAGS])
! 3172: fi
! 3173: fi
! 3174: AC_CHECK_LIB(skey, main, [found=yes], [AC_MSG_WARN([Unable to locate libskey.a, you will have to edit the Makefile and add -L/path/to/skey/lib to SUDOERS_LDFLAGS])])
! 3175: AC_CHECK_LIB(skey, skeyaccess, AC_DEFINE(HAVE_SKEYACCESS))
! 3176:
! 3177: AC_MSG_CHECKING([for RFC1938-compliant skeychallenge])
! 3178: AC_COMPILE_IFELSE(
! 3179: [AC_LANG_PROGRAM([[
! 3180: # include <stdio.h>
! 3181: # include <skey.h>]],
! 3182: [[skeychallenge(NULL, NULL, NULL, 0);]]
! 3183: )], [
! 3184: AC_DEFINE(HAVE_RFC1938_SKEYCHALLENGE)
! 3185: AC_MSG_RESULT([yes])
! 3186: ], [
! 3187: AC_MSG_RESULT([no])
! 3188: ]
! 3189: )
! 3190:
! 3191: LDFLAGS="$O_LDFLAGS"
! 3192: SUDOERS_LIBS="${SUDOERS_LIBS} -lskey"
! 3193: AUTH_OBJS="$AUTH_OBJS rfc1938.lo"
! 3194: fi
! 3195:
! 3196: dnl
! 3197: dnl extra OPIE lib and includes
! 3198: dnl
! 3199: if test "${with_opie-'no'}" = "yes"; then
! 3200: O_LDFLAGS="$LDFLAGS"
! 3201: if test "$with_opie" != "yes"; then
! 3202: SUDO_APPEND_CPPFLAGS(-I${with_opie}/include)
! 3203: LDFLAGS="$LDFLAGS -L${with_opie}/lib"
! 3204: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_opie}/lib])
! 3205: AC_PREPROC_IFELSE([AC_LANG_PROGRAM([[#include <opie.h>]])], [found=yes], [found=no])
! 3206: else
! 3207: found=no
! 3208: O_CPPFLAGS="$CPPFLAGS"
! 3209: for dir in "" "/usr/local" "/usr/contrib"; do
! 3210: test -n "$dir" && CPPFLAGS="$O_CPPFLAGS -I${dir}/include"
! 3211: AC_PREPROC_IFELSE([AC_LANG_PROGRAM([[#include <opie.h>]])], [found=yes; break])
! 3212: done
! 3213: if test "$found" = "no" -o -z "$dir"; then
! 3214: CPPFLAGS="$O_CPPFLAGS"
! 3215: else
! 3216: LDFLAGS="$LDFLAGS -L${dir}/lib"
! 3217: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${dir}/lib])
! 3218: fi
! 3219: if test "$found" = "no"; then
! 3220: AC_MSG_WARN([Unable to locate opie.h, you will have to edit the Makefile and add -I/path/to/opie/includes to CPPFLAGS])
! 3221: fi
! 3222: fi
! 3223: AC_CHECK_LIB(opie, main, [found=yes], [AC_MSG_WARN([Unable to locate libopie.a, you will have to edit the Makefile and add -L/path/to/opie/lib to SUDOERS_LDFLAGS])])
! 3224: LDFLAGS="$O_LDFLAGS"
! 3225: SUDOERS_LIBS="${SUDOERS_LIBS} -lopie"
! 3226: AUTH_OBJS="$AUTH_OBJS rfc1938.lo"
! 3227: fi
! 3228:
! 3229: dnl
! 3230: dnl Check for shadow password routines if we have not already done so.
! 3231: dnl If there is a specific list of functions to check we do that first.
! 3232: dnl Otherwise, we check for SVR4-style and then SecureWare-style.
! 3233: dnl
! 3234: if test ${with_passwd-'no'} != "no"; then
! 3235: dnl
! 3236: dnl if crypt(3) not in libc, look elsewhere
! 3237: dnl
! 3238: if test -z "$LIB_CRYPT"; then
! 3239: _LIBS="$LIBS"
! 3240: AC_SEARCH_LIBS([crypt], [crypt crypt_d ufc], [test -n "$ac_lib" && SUDOERS_LIBS="${SUDOERS_LIBS} $ac_res"])
! 3241: LIBS="$_LIBS"
! 3242: fi
! 3243:
! 3244: if test "$CHECKSHADOW" = "true" -a -n "$shadow_funcs"; then
! 3245: _LIBS="$LIBS"
! 3246: LIBS="$LIBS $shadow_libs"
! 3247: found=no
! 3248: AC_CHECK_FUNCS($shadow_funcs, [found=yes])
! 3249: if test "$found" = "yes"; then
! 3250: SUDOERS_LIBS="$SUDOERS_LIBS $shadow_libs"
! 3251: elif test -n "$shadow_libs_optional"; then
! 3252: LIBS="$LIBS $shadow_libs_optional"
! 3253: AC_CHECK_FUNCS($shadow_funcs, [found=yes])
! 3254: if test "$found" = "yes"; then
! 3255: SUDOERS_LIBS="$SUDOERS_LIBS $shadow_libs $shadow_libs_optional"
! 3256: fi
! 3257: fi
! 3258: if test "$found" = "yes"; then
! 3259: case "$shadow_funcs" in
! 3260: *getprpwnam*) SECUREWARE=1;;
! 3261: esac
! 3262: test -n "$shadow_defs" && OSDEFS="${OSDEFS} $shadow_defs"
! 3263: else
! 3264: LIBS="$_LIBS"
! 3265: fi
! 3266: CHECKSHADOW=false
! 3267: fi
! 3268: if test "$CHECKSHADOW" = "true"; then
! 3269: AC_SEARCH_LIBS([getspnam], [gen], [AC_DEFINE(HAVE_GETSPNAM)] [CHECKSHADOW=false; test -n "$ac_lib" && SUDOERS_LIBS="${SUDOERS_LIBS} $ac_res"])
! 3270: fi
! 3271: if test "$CHECKSHADOW" = "true"; then
! 3272: AC_SEARCH_LIBS([getprpwnam], [sec security prot], [AC_DEFINE(HAVE_GETPRPWNAM)] [CHECKSHADOW=false; SECUREWARE=1; test -n "$ac_lib" && SUDOERS_LIBS="${SUDOERS_LIBS} $ac_res"])
! 3273: fi
! 3274: if test -n "$SECUREWARE"; then
! 3275: AC_CHECK_FUNCS(bigcrypt set_auth_parameters initprivs)
! 3276: AUTH_OBJS="$AUTH_OBJS secureware.lo"
! 3277: fi
! 3278: fi
! 3279:
! 3280: dnl
! 3281: dnl Choose event subsystem backend: poll or select
! 3282: dnl
! 3283: if test X"$enable_poll" = X""; then
! 3284: AC_CHECK_FUNCS(poll, [enable_poll=yes], [enable_poll=no])
! 3285: elif test X"$enable_poll" = X"yes"; then
! 3286: AC_DEFINE(HAVE_POLL)
! 3287: fi
! 3288: if test "$enable_poll" = "yes"; then
! 3289: COMMON_OBJS="${COMMON_OBJS} event_poll.lo"
! 3290: else
! 3291: COMMON_OBJS="${COMMON_OBJS} event_select.lo"
! 3292: fi
! 3293:
! 3294: dnl
! 3295: dnl extra lib and .o file for LDAP support
! 3296: dnl
! 3297: if test ${with_ldap-'no'} != "no"; then
! 3298: O_LDFLAGS="$LDFLAGS"
! 3299: if test "$with_ldap" != "yes"; then
! 3300: SUDO_APPEND_LIBPATH(SUDOERS_LDFLAGS, [${with_ldap}/lib])
! 3301: LDFLAGS="$LDFLAGS -L${with_ldap}/lib"
! 3302: SUDO_APPEND_CPPFLAGS(-I${with_ldap}/include)
! 3303: with_ldap=yes
! 3304: fi
! 3305: SUDOERS_OBJS="${SUDOERS_OBJS} ldap.lo"
! 3306: LDAP=""
! 3307:
! 3308: _LIBS="$LIBS"
! 3309: LDAP_LIBS=""
! 3310: IBMLDAP_EXTRA=""
! 3311: found=no
! 3312: # On HP-UX, libibmldap has a hidden dependency on libCsup
! 3313: case "$host_os" in
! 3314: hpux*) AC_CHECK_LIB(Csup, main, [IBMLDAP_EXTRA=" -lCsup"]);;
! 3315: esac
! 3316: AC_SEARCH_LIBS(ldap_init, "ibmldap${IBMLDAP_EXTRA}" "ibmldap -lidsldif${IBMLDAP_EXTRA}" "ldap" "ldap -llber" "ldap -llber -lssl -lcrypto" "ibmldap${IBMLDAP_EXTRA}", [
! 3317: test "$ac_res" != "none required" && LDAP_LIBS="$ac_res"
! 3318: found=yes
! 3319: ])
! 3320: # If nothing linked, try -lldap and hope for the best
! 3321: if test "$found" = "no"; then
! 3322: LDAP_LIBS="-lldap"
! 3323: fi
! 3324: LIBS="${_LIBS} ${LDAP_LIBS}"
! 3325: dnl check if we need to link with -llber for ber_set_option
! 3326: OLIBS="$LIBS"
! 3327: AC_MSG_CHECKING([whether lber.h defines LBER_OPT_DEBUG_LEVEL])
! 3328: AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
! 3329: # include <lber.h>]], [[int opt=LBER_OPT_DEBUG_LEVEL;]])], [
! 3330: AC_MSG_RESULT([yes])
! 3331: AC_SEARCH_LIBS([ber_set_option], [lber], [found=yes], [found=no])
! 3332: if test X"$found" = X"yes" -a X"$LIBS" != X"$OLIBS"; then
! 3333: LDAP_LIBS="$LDAP_LIBS -llber"
! 3334: fi
! 3335: ], [
! 3336: AC_MSG_RESULT([no])
! 3337: ])
! 3338: dnl check if ldap.h includes lber.h for us
! 3339: AC_MSG_CHECKING([whether lber.h is needed])
! 3340: AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
! 3341: # include <ldap.h>]], [[(void)ldap_init(0, 0)]])], [AC_MSG_RESULT([no])], [
! 3342: AC_MSG_RESULT([yes])
! 3343: AC_DEFINE(HAVE_LBER_H)])
! 3344:
! 3345: AC_CHECK_HEADERS([sasl/sasl.h] [sasl.h], [
! 3346: AC_CHECK_FUNCS(ldap_sasl_interactive_bind_s)
! 3347: break
! 3348: ])
! 3349: AC_CHECK_HEADERS([ldap_ssl.h] [mps/ldap_ssl.h], [break], [], [#include <ldap.h>])
! 3350: AC_CHECK_FUNCS(ldap_initialize ldap_start_tls_s ldapssl_init ldapssl_set_strength ldap_unbind_ext_s ldap_str2dn ldap_create ldap_sasl_bind_s ldap_ssl_init ldap_ssl_client_init ldap_start_tls_s_np)
! 3351: AC_CHECK_FUNCS(ldap_search_ext_s ldap_search_st, [break])
! 3352:
! 3353: if test X"$check_gss_krb5_ccache_name" = X"yes"; then
! 3354: AC_CHECK_LIB(gssapi, gss_krb5_ccache_name,
! 3355: AC_DEFINE(HAVE_GSS_KRB5_CCACHE_NAME)
! 3356: [LDAP_LIBS="${LDAP_LIBS} -lgssapi"],
! 3357: AC_CHECK_LIB(gssapi_krb5, gss_krb5_ccache_name,
! 3358: AC_DEFINE(HAVE_GSS_KRB5_CCACHE_NAME)
! 3359: [LDAP_LIBS="${LDAP_LIBS} -lgssapi_krb5"])
! 3360: )
! 3361:
! 3362: # gssapi headers may be separate or part of Kerberos V
! 3363: found=no
! 3364: O_CPPFLAGS="$CPPFLAGS"
! 3365: for dir in "" "kerberosV" "krb5" "kerberos5" "kerberosv5"; do
! 3366: test X"$dir" != X"" && CPPFLAGS="$O_CPPFLAGS -I/usr/include/${dir}"
! 3367: AC_PREPROC_IFELSE([AC_LANG_PROGRAM([[#include <gssapi/gssapi.h>]])], [found="gssapi/gssapi.h"; break], [AC_PREPROC_IFELSE([AC_LANG_PROGRAM([[#include <gssapi.h>]])], [found="gssapi.h"; break])])
! 3368: done
! 3369: if test X"$found" != X"no"; then
! 3370: AC_CHECK_HEADERS([$found])
! 3371: if test X"$found" = X"gssapi/gssapi.h"; then
! 3372: AC_CHECK_HEADERS([gssapi/gssapi_krb5.h])
! 3373: fi
! 3374: else
! 3375: CPPFLAGS="$O_CPPFLAGS"
! 3376: AC_MSG_WARN([Unable to locate gssapi.h, you will have to edit the Makefile and add -I/path/to/gssapi/includes to CPPFLAGS])
! 3377: fi
! 3378: fi
! 3379:
! 3380: SUDOERS_LIBS="${SUDOERS_LIBS} ${LDAP_LIBS}"
! 3381: LIBS="$_LIBS"
! 3382: LDFLAGS="$O_LDFLAGS"
! 3383: fi
! 3384:
! 3385: #
! 3386: # How to do dynamic object loading.
! 3387: # We support dlopen() and sh_load(), else fall back to static loading.
! 3388: #
! 3389: case "$lt_cv_dlopen" in
! 3390: dlopen)
! 3391: AC_DEFINE(HAVE_DLOPEN)
! 3392: if test "$enable_static_sudoers" = "yes"; then
! 3393: AC_DEFINE(STATIC_SUDOERS_PLUGIN)
! 3394: SUDO_OBJS="${SUDO_OBJS} preload.o"
! 3395: STATIC_SUDOERS="\$(top_builddir)/plugins/sudoers/sudoers.la"
! 3396: SUDOERS_LDFLAGS="${SUDOERS_LDFLAGS} --tag=disable-shared -static"
! 3397: LT_STATIC=""
! 3398: else
! 3399: SUDO_OBJS="$SUDO_OBJS locale_stub.o"
! 3400: LT_STATIC="--tag=disable-static"
! 3401: fi
! 3402: ;;
! 3403: shl_load)
! 3404: AC_DEFINE(HAVE_SHL_LOAD)
! 3405: if test "$enable_static_sudoers" = "yes"; then
! 3406: AC_DEFINE(STATIC_SUDOERS_PLUGIN)
! 3407: SUDO_OBJS="${SUDO_OBJS} preload.o"
! 3408: STATIC_SUDOERS="\$(top_builddir)/plugins/sudoers/sudoers.la"
! 3409: SUDOERS_LDFLAGS="${SUDOERS_LDFLAGS} --tag=disable-shared -static"
! 3410: LT_STATIC=""
! 3411: else
! 3412: SUDO_OBJS="$SUDO_OBJS locale_stub.o"
! 3413: LT_STATIC="--tag=disable-static"
! 3414: fi
! 3415: ;;
! 3416: *)
! 3417: if test X"${ac_cv_func_dlopen}" = X"yes"; then
! 3418: AC_MSG_ERROR(["dlopen present but libtool doesn't appear to support your platform."])
! 3419: fi
! 3420: # Preload sudoers module symbols
! 3421: SUDO_OBJS="${SUDO_OBJS} preload.o"
! 3422: STATIC_SUDOERS="\$(top_builddir)/plugins/sudoers/sudoers.la"
! 3423: LT_STATIC=""
! 3424: ;;
! 3425: esac
! 3426:
! 3427: # On HP-UX, you cannot dlopen() a shared object that uses pthreads unless
! 3428: # the main program is linked against -lpthread. We have no knowledge of
! 3429: # what libraries a plugin may depend on (e.g. HP-UX LDAP which uses pthreads)
! 3430: # so always link against -lpthread on HP-UX if it is available.
! 3431: # This check should go after all other libraries tests.
! 3432: case "$host_os" in
! 3433: hpux*)
! 3434: AC_CHECK_LIB(pthread, main, [SUDO_LIBS="${SUDO_LIBS} -lpthread"])
! 3435: OSDEFS="${OSDEFS} -D_REENTRANT"
! 3436: ;;
! 3437: esac
! 3438:
! 3439: dnl
! 3440: dnl Check for log file, timestamp and iolog locations
! 3441: dnl
! 3442: if test "$utmp_style" = "LEGACY"; then
! 3443: SUDO_PATH_UTMP
! 3444: fi
! 3445: SUDO_LOGFILE
! 3446: SUDO_RUNDIR
! 3447: SUDO_VARDIR
! 3448: SUDO_IO_LOGDIR
! 3449:
! 3450: dnl
! 3451: dnl Turn warnings into errors.
! 3452: dnl All compiler/loader tests after this point will fail if
! 3453: dnl a warning is displayed (nornally, warnings are not fata).
! 3454: dnl
! 3455: AC_LANG_WERROR
! 3456:
! 3457: dnl
! 3458: dnl If compiler supports the -static-libgcc flag use it unless we have
! 3459: dnl GNU ld (which can avoid linking in libgcc when it is not needed).
! 3460: dnl This test relies on AC_LANG_WERROR
! 3461: dnl
! 3462: if test -n "$GCC" -a "$lt_cv_prog_gnu_ld" != "yes" -a -n "$GCC"; then
! 3463: AX_CHECK_COMPILE_FLAG([-static-libgcc], [LT_LDFLAGS="$LT_LDFLAGS -Wc,-static-libgcc"])
! 3464: fi
! 3465:
! 3466: dnl
! 3467: dnl Check for symbol visibility support.
! 3468: dnl This test relies on AC_LANG_WERROR
! 3469: dnl
! 3470: if test -n "$GCC"; then
! 3471: AX_CHECK_COMPILE_FLAG([-fvisibility=hidden], [
! 3472: AC_DEFINE(HAVE_DSO_VISIBILITY)
! 3473: CFLAGS="${CFLAGS} -fvisibility=hidden"
! 3474: LT_LDEXPORTS=
! 3475: LT_LDDEP=
! 3476: NO_VIZ=
! 3477: ])
! 3478: else
! 3479: case "$host_os" in
! 3480: hpux*)
! 3481: AX_CHECK_COMPILE_FLAG([-Bhidden_def], [
! 3482: AC_DEFINE(HAVE_DSO_VISIBILITY)
! 3483: CFLAGS="${CFLAGS} -Bhidden_def"
! 3484: LT_LDEXPORTS=
! 3485: LT_LDDEP=
! 3486: ])
! 3487: ;;
! 3488: solaris2*)
! 3489: AX_CHECK_COMPILE_FLAG([-xldscope=hidden], [
! 3490: AC_DEFINE(HAVE_DSO_VISIBILITY)
! 3491: CFLAGS="${CFLAGS} -xldscope=hidden"
! 3492: LT_LDEXPORTS=
! 3493: LT_LDDEP=
! 3494: ])
! 3495: ;;
! 3496: esac
! 3497: fi
! 3498:
! 3499: dnl
! 3500: dnl If the compiler doesn't have symbol visibility support, it may
! 3501: dnl support version scripts (only GNU and Solaris ld).
! 3502: dnl This test relies on AC_LANG_WERROR
! 3503: dnl
! 3504: if test -n "$LT_LDEXPORTS"; then
! 3505: if test "$lt_cv_prog_gnu_ld" = "yes"; then
! 3506: AC_CACHE_CHECK([whether ld supports anonymous map files],
! 3507: [sudo_cv_var_gnu_ld_anon_map],
! 3508: [
! 3509: sudo_cv_var_gnu_ld_anon_map=no
! 3510: cat > conftest.map <<-EOF
! 3511: {
! 3512: global: foo;
! 3513: local: *;
! 3514: };
! 3515: EOF
! 3516: _CFLAGS="$CFLAGS"
! 3517: CFLAGS="$CFLAGS $lt_prog_compiler_pic"
! 3518: _LDFLAGS="$LDFLAGS"
! 3519: LDFLAGS="$LDFLAGS -fpic -shared -Wl,--version-script,./conftest.map"
! 3520: AC_LINK_IFELSE([AC_LANG_PROGRAM([[int foo;]], [[]])],
! 3521: [sudo_cv_var_gnu_ld_anon_map=yes])
! 3522: CFLAGS="$_CFLAGS"
! 3523: LDFLAGS="$_LDFLAGS"
! 3524: ]
! 3525: )
! 3526: if test "$sudo_cv_var_gnu_ld_anon_map" = "yes"; then
! 3527: LT_LDEXPORTS=; LT_LDDEP="\$(shlib_map)"; LT_LDMAP="-Wl,--version-script,\$(shlib_map)"
! 3528: fi
! 3529: else
! 3530: case "$host_os" in
! 3531: solaris2*)
! 3532: AC_CACHE_CHECK([whether ld supports anonymous map files],
! 3533: [sudo_cv_var_solaris_ld_anon_map],
! 3534: [
! 3535: sudo_cv_var_solaris_ld_anon_map=no
! 3536: cat > conftest.map <<-EOF
! 3537: {
! 3538: global: foo;
! 3539: local: *;
! 3540: };
! 3541: EOF
! 3542: _CFLAGS="$CFLAGS"
! 3543: CFLAGS="$CFLAGS $lt_prog_compiler_pic"
! 3544: _LDFLAGS="$LDFLAGS"
! 3545: LDFLAGS="$LDFLAGS -shared -Wl,-M,./conftest.map"
! 3546: AC_LINK_IFELSE([AC_LANG_PROGRAM([[int foo;]], [[]])],
! 3547: [sudo_cv_var_solaris_ld_anon_map=yes])
! 3548: CFLAGS="$_CFLAGS"
! 3549: LDFLAGS="$_LDFLAGS"
! 3550: ]
! 3551: )
! 3552: if test "$sudo_cv_var_solaris_ld_anon_map" = "yes"; then
! 3553: LT_LDEXPORTS=; LT_LDDEP="\$(shlib_map)"; LT_LDMAP="-Wl,-M,\$(shlib_map)"
! 3554: fi
! 3555: ;;
! 3556: hpux*)
! 3557: AC_CACHE_CHECK([whether ld supports controlling exported symbols],
! 3558: [sudo_cv_var_hpux_ld_symbol_export],
! 3559: [
! 3560: sudo_cv_var_hpux_ld_symbol_export=no
! 3561: echo "+e foo" > conftest.opt
! 3562: _CFLAGS="$CFLAGS"
! 3563: CFLAGS="$CFLAGS $lt_prog_compiler_pic"
! 3564: _LDFLAGS="$LDFLAGS"
! 3565: if test -n "$GCC"; then
! 3566: LDFLAGS="$LDFLAGS -shared -Wl,-c,./conftest.opt"
! 3567: else
! 3568: LDFLAGS="$LDFLAGS -Wl,-b -Wl,-c,./conftest.opt"
! 3569: fi
! 3570: AC_LINK_IFELSE([AC_LANG_PROGRAM([[int foo;]], [[]])],
! 3571: [sudo_cv_var_hpux_ld_symbol_export=yes])
! 3572: CFLAGS="$_CFLAGS"
! 3573: LDFLAGS="$_LDFLAGS"
! 3574: rm -f conftest.opt
! 3575: ]
! 3576: )
! 3577: if test "$sudo_cv_var_hpux_ld_symbol_export" = "yes"; then
! 3578: LT_LDEXPORTS=; LT_LDDEP="\$(shlib_opt)"; LT_LDOPT="-Wl,-c,\$(shlib_opt)"
! 3579: fi
! 3580: ;;
! 3581: esac
! 3582: fi
! 3583: fi
! 3584:
! 3585: dnl
! 3586: dnl Check for PIE executable support if using gcc.
! 3587: dnl This test relies on AC_LANG_WERROR
! 3588: dnl
! 3589: if test -n "$GCC"; then
! 3590: if test -z "$enable_pie"; then
! 3591: case "$host_os" in
! 3592: linux*)
! 3593: # Attempt to build with PIE support
! 3594: enable_pie="maybe"
! 3595: ;;
! 3596: esac
! 3597: fi
! 3598: if test -n "$enable_pie"; then
! 3599: if test "$enable_pie" = "no"; then
! 3600: AX_CHECK_COMPILE_FLAG([-fno-pie], [
! 3601: _CFLAGS="$CFLAGS"
! 3602: CFLAGS="$CFLAGS -fno-pie"
! 3603: AX_CHECK_LINK_FLAG([-nopie], [
! 3604: PIE_CFLAGS="-fno-pie"
! 3605: PIE_LDFLAGS="-nopie"
! 3606: ])
! 3607: CFLAGS="$_CFLAGS"
! 3608: ])
! 3609: else
! 3610: AX_CHECK_COMPILE_FLAG([-fPIE], [
! 3611: _CFLAGS="$CFLAGS"
! 3612: CFLAGS="$CFLAGS -fPIE"
! 3613: AX_CHECK_LINK_FLAG([-pie], [
! 3614: if test "$enable_pie" = "maybe"; then
! 3615: SUDO_WORKING_PIE([enable_pie=yes], [])
! 3616: fi
! 3617: if test "$enable_pie" = "yes"; then
! 3618: PIE_CFLAGS="-fPIE"
! 3619: PIE_LDFLAGS="-Wc,-fPIE -pie"
! 3620: fi
! 3621: ])
! 3622: CFLAGS="$_CFLAGS"
! 3623: ])
! 3624: fi
! 3625: fi
! 3626: fi
! 3627: if test "$enable_pie" != "yes"; then
! 3628: # Solaris 11.1 and higher supports tagging binaries to use ASLR
! 3629: case "$host_os" in
! 3630: solaris2.1[[1-9]]|solaris2.[[2-9]][[0-9]])
! 3631: AX_CHECK_LINK_FLAG([-Wl,-z,aslr], [PIE_LDFLAGS="${PIE_LDFLAGS}${PIE_LDFLAGS+ }-Wl,-z,aslr"])
! 3632: ;;
! 3633: esac
! 3634: fi
! 3635:
! 3636: dnl
! 3637: dnl Check for -fstack-protector and -z relro support
! 3638: dnl This test relies on AC_LANG_WERROR
! 3639: dnl
! 3640: if test "$enable_hardening" != "no"; then
! 3641: if test -n "$GCC"; then
! 3642: AX_CHECK_COMPILE_FLAG([-fstack-protector-strong], [
! 3643: AX_CHECK_LINK_FLAG([-fstack-protector-strong], [
! 3644: SSP_CFLAGS="-fstack-protector-strong"
! 3645: SSP_LDFLAGS="-Wc,-fstack-protector-strong"
! 3646: ])
! 3647: ])
! 3648: if test -z "$SSP_CFLAGS"; then
! 3649: AX_CHECK_COMPILE_FLAG([-fstack-protector-all], [
! 3650: AX_CHECK_LINK_FLAG([-fstack-protector-all], [
! 3651: SSP_CFLAGS="-fstack-protector-all"
! 3652: SSP_LDFLAGS="-Wc,-fstack-protector-all"
! 3653: ])
! 3654: ])
! 3655: if test -z "$SSP_CFLAGS"; then
! 3656: AX_CHECK_COMPILE_FLAG([-fstack-protector], [
! 3657: AX_CHECK_LINK_FLAG([-fstack-protector], [
! 3658: SSP_CFLAGS="-fstack-protector"
! 3659: SSP_LDFLAGS="-Wc,-fstack-protector"
! 3660: ])
! 3661: ])
! 3662: fi
! 3663: fi
! 3664: fi
! 3665: AX_CHECK_LINK_FLAG([-Wl,-z,relro], [LDFLAGS="${LDFLAGS} -Wl,-z,relro"])
! 3666: fi
! 3667:
! 3668: dnl
! 3669: dnl Use passwd auth module?
! 3670: dnl
! 3671: case "$with_passwd" in
! 3672: yes|maybe)
! 3673: AUTH_OBJS="$AUTH_OBJS getspwuid.lo passwd.lo"
! 3674: ;;
! 3675: *)
! 3676: AC_DEFINE(WITHOUT_PASSWD)
! 3677: if test -z "$AUTH_OBJS"; then
! 3678: AC_MSG_ERROR([no authentication methods defined.])
! 3679: fi
! 3680: ;;
! 3681: esac
! 3682: AUTH_OBJS=${AUTH_OBJS# }
! 3683: _AUTH=`echo "$AUTH_OBJS" | sed -e 's/\.lo//g' -e 's/getspwuid *//'`
! 3684: AC_MSG_NOTICE([using the following authentication methods: $_AUTH])
! 3685:
! 3686: dnl
! 3687: dnl LIBS may contain duplicates from SUDO_LIBS, SUDOERS_LIBS, or NET_LIBS
! 3688: dnl
! 3689: if test -n "$LIBS"; then
! 3690: L="$LIBS"
! 3691: LIBS=
! 3692: for l in ${L}; do
! 3693: dupe=0
! 3694: for sl in ${SUDO_LIBS} ${SUDOERS_LIBS} ${NET_LIBS}; do
! 3695: test $l = $sl && dupe=1
! 3696: done
! 3697: test $dupe = 0 && LIBS="${LIBS} $l"
! 3698: done
! 3699: fi
! 3700:
! 3701: dnl
! 3702: dnl OS-specific initialization
! 3703: dnl
! 3704: AC_DEFINE_UNQUOTED(os_init, $OS_INIT, [Define to an OS-specific initialization function or `os_init_common'.])
! 3705:
! 3706: dnl
! 3707: dnl We add -Wall and -Werror after all tests so they don't cause failures
! 3708: dnl
! 3709: if test -n "$GCC"; then
! 3710: if test X"$enable_warnings" = X"yes" -o X"$with_devel" = X"yes"; then
! 3711: CFLAGS="${CFLAGS} -Wall -Wsign-compare -Wold-style-definition -Wpointer-arith"
! 3712: fi
! 3713: if test X"$enable_werror" = X"yes"; then
! 3714: CFLAGS="${CFLAGS} -Werror"
! 3715: fi
! 3716: fi
! 3717:
! 3718: dnl
! 3719: dnl Skip regress tests and sudoers sanity check if cross compiling.
! 3720: dnl
! 3721: CROSS_COMPILING="$cross_compiling"
! 3722:
! 3723: dnl
! 3724: dnl Set exec_prefix
! 3725: dnl
! 3726: test "$exec_prefix" = "NONE" && exec_prefix='$(prefix)'
! 3727:
! 3728: dnl
! 3729: dnl Defer setting _PATH_SUDO_NOEXEC until after exec_prefix is set
! 3730: dnl XXX - this is gross!
! 3731: dnl
! 3732: if test X"$with_noexec" != X"no" -o X"$with_selinux" != X"no" -o "$enabled_shared" != X"no"; then
! 3733: oexec_prefix="$exec_prefix"
! 3734: if test "$exec_prefix" = '$(prefix)'; then
! 3735: if test "$prefix" = "NONE"; then
! 3736: exec_prefix="$ac_default_prefix"
! 3737: else
! 3738: exec_prefix="$prefix"
! 3739: fi
! 3740: fi
! 3741: if test X"$with_noexec" != X"no"; then
! 3742: PROGS="${PROGS} libsudo_noexec.la"
! 3743: INSTALL_NOEXEC="install-noexec"
! 3744:
! 3745: noexec_file="$with_noexec"
! 3746: _noexec_file=
! 3747: while test X"$noexec_file" != X"$_noexec_file"; do
! 3748: _noexec_file="$noexec_file"
! 3749: eval noexec_file="$_noexec_file"
! 3750: done
! 3751: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_NOEXEC, "$noexec_file", [The fully qualified pathname of sudo_noexec.so])
! 3752: fi
! 3753: if test X"$with_selinux" != X"no"; then
! 3754: sesh_file="$libexecdir/sudo/sesh"
! 3755: _sesh_file=
! 3756: while test X"$sesh_file" != X"$_sesh_file"; do
! 3757: _sesh_file="$sesh_file"
! 3758: eval sesh_file="$_sesh_file"
! 3759: done
! 3760: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_SESH, "$sesh_file")
! 3761: fi
! 3762: if test X"$enable_shared" != X"no"; then
! 3763: PLUGINDIR="$with_plugindir"
! 3764: _PLUGINDIR=
! 3765: while test X"$PLUGINDIR" != X"$_PLUGINDIR"; do
! 3766: _PLUGINDIR="$PLUGINDIR"
! 3767: eval PLUGINDIR="$_PLUGINDIR"
! 3768: done
! 3769: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_PLUGIN_DIR, "$PLUGINDIR/")
! 3770: fi
! 3771: exec_prefix="$oexec_prefix"
! 3772: fi
! 3773: if test X"$with_selinux" = X"no"; then
! 3774: SUDO_DEFINE_UNQUOTED(_PATH_SUDO_SESH, NULL)
! 3775: fi
! 3776:
! 3777: dnl
! 3778: dnl Add -R options to LDFLAGS, etc.
! 3779: dnl
! 3780: if test X"$LDFLAGS_R" != X""; then
! 3781: LDFLAGS="$LDFLAGS $LDFLAGS_R"
! 3782: fi
! 3783: if test X"$SUDOERS_LDFLAGS_R" != X""; then
! 3784: SUDOERS_LDFLAGS="$SUDOERS_LDFLAGS $SUDOERS_LDFLAGS_R"
! 3785: fi
! 3786: if test X"$ZLIB_R" != X""; then
! 3787: ZLIB="$ZLIB_R $ZLIB"
! 3788: fi
! 3789:
! 3790: dnl
! 3791: dnl Override default configure dirs for the Makefile
! 3792: dnl
! 3793: if test X"$prefix" = X"NONE"; then
! 3794: test "$mandir" = '${datarootdir}/man' && mandir='$(prefix)/man'
! 3795: else
! 3796: test "$mandir" = '${datarootdir}/man' && mandir='$(datarootdir)/man'
! 3797: fi
! 3798: test "$bindir" = '${exec_prefix}/bin' && bindir='$(exec_prefix)/bin'
! 3799: test "$sbindir" = '${exec_prefix}/sbin' && sbindir='$(exec_prefix)/sbin'
! 3800: test "$libexecdir" = '${exec_prefix}/libexec' && libexecdir='$(exec_prefix)/libexec'
! 3801: test "$includedir" = '${prefix}/include' && includedir='$(prefix)/include'
! 3802: test "$datarootdir" = '${prefix}/share' && datarootdir='$(prefix)/share'
! 3803: test "$docdir" = '${datarootdir}/doc/${PACKAGE_TARNAME}' && docdir='$(datarootdir)/doc/$(PACKAGE_TARNAME)'
! 3804: test "$localedir" = '${datarootdir}/locale' && localedir='$(datarootdir)/locale'
! 3805: test "$localstatedir" = '${prefix}/var' && localstatedir='$(prefix)/var'
! 3806: test "$sysconfdir" = '${prefix}/etc' -a X"$with_stow" != X"yes" && sysconfdir='/etc'
! 3807:
! 3808: dnl
! 3809: dnl Substitute into the Makefile and man pages
! 3810: dnl
! 3811: AC_CONFIG_FILES([Makefile common/Makefile compat/Makefile doc/Makefile include/Makefile init.d/aix.sh init.d/hpux.sh src/sudo_usage.h src/Makefile plugins/sample/Makefile plugins/group_file/Makefile plugins/system_group/Makefile plugins/sudoers/Makefile plugins/sudoers/sudoers])
! 3812: AC_OUTPUT
! 3813:
! 3814: dnl
! 3815: dnl Spew any text the user needs to know about
! 3816: dnl
! 3817: if test "$with_pam" = "yes"; then
! 3818: case $host_os in
! 3819: hpux*)
! 3820: if test -f /usr/lib/security/libpam_hpsec.so.1; then
! 3821: AC_MSG_NOTICE([You may wish to add the following line to /etc/pam.conf])
! 3822: AC_MSG_NOTICE([sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login])
! 3823: fi
! 3824: ;;
! 3825: linux*)
! 3826: AC_MSG_NOTICE([You will need to customize sample.pam and install it as /etc/pam.d/sudo])
! 3827: ;;
! 3828: esac
! 3829: fi
! 3830: dnl
! 3831: dnl Warn user if they may need to clear rundir manually.
! 3832: dnl
! 3833: case "$rundir" in
! 3834: /var/run*)
! 3835: clear_rundir=0
! 3836: ;;
! 3837: *)
! 3838: clear_rundir=1
! 3839: ;;
! 3840: esac
! 3841: if test $clear_rundir -eq 1; then
! 3842: AC_MSG_NOTICE([Warning: the $rundir/ts directory must be cleared at boot time.])
! 3843: AC_MSG_NOTICE([ You may need to create a startup item to do this.])
! 3844: fi
! 3845:
! 3846: dnl
! 3847: dnl Autoheader templates
! 3848: dnl
! 3849: AH_TEMPLATE(BROKEN_SYSLOG, [Define to 1 if the `syslog' function returns a non-zero int to denote failure.])
! 3850: AH_TEMPLATE(CLASSIC_INSULTS, [Define to 1 if you want the insults from the "classic" version sudo.])
! 3851: AH_TEMPLATE(CSOPS_INSULTS, [Define to 1 if you want insults culled from the twisted minds of CSOps.])
! 3852: AH_TEMPLATE(DONT_LEAK_PATH_INFO, [Define to 1 if you want sudo to display "command not allowed" instead of "command not found" when a command cannot be found.])
! 3853: AH_TEMPLATE(ENV_DEBUG, [Define to 1 to enable environment function debugging.])
! 3854: AH_TEMPLATE(ENV_EDITOR, [Define to 1 if you want visudo to honor the EDITOR and VISUAL env variables.])
! 3855: AH_TEMPLATE(FQDN, [Define to 1 if you want to require fully qualified hosts in sudoers.])
! 3856: AH_TEMPLATE(ENV_RESET, [Define to 1 to enable environment resetting by default.])
! 3857: AH_TEMPLATE(GOONS_INSULTS, [Define to 1 if you want insults from the "Goon Show".])
! 3858: AH_TEMPLATE(HAL_INSULTS, [Define to 1 if you want 2001-like insults.])
! 3859: AH_TEMPLATE(HAVE_AFS, [Define to 1 if you use AFS.])
! 3860: AH_TEMPLATE(HAVE_AIXAUTH, [Define to 1 if you use AIX general authentication.])
! 3861: AH_TEMPLATE(HAVE_BSD_AUTH_H, [Define to 1 if you use BSD authentication.])
! 3862: AH_TEMPLATE(HAVE_BSM_AUDIT, [Define to 1 to enable BSM audit support.])
! 3863: AH_TEMPLATE(HAVE_DCE, [Define to 1 if you use OSF DCE.])
! 3864: AH_TEMPLATE(HAVE_DD_FD, [Define to 1 if your `DIR' contains dd_fd.])
! 3865: AH_TEMPLATE(HAVE_DIRFD, [Define to 1 if you have the `dirfd' function or macro.])
! 3866: AH_TEMPLATE(HAVE_DISPCRYPT, [Define to 1 if you have the `dispcrypt' function.])
! 3867: AH_TEMPLATE(HAVE_DLOPEN, [Define to 1 if you have the `dlopen' function.])
! 3868: AH_TEMPLATE(HAVE_FCNTL_CLOSEM, [Define to 1 if your system has the F_CLOSEM fcntl.])
! 3869: AH_TEMPLATE(HAVE_FNMATCH, [Define to 1 if you have the `fnmatch' function.])
! 3870: AH_TEMPLATE(HAVE_FWTK, [Define to 1 if you use the FWTK authsrv daemon.])
! 3871: AH_TEMPLATE(HAVE_GETAUTHUID, [Define to 1 if you have the `getauthuid' function. (ULTRIX 4.x shadow passwords).])
! 3872: AH_TEMPLATE(HAVE_GETPRPWNAM, [Define to 1 if you have the `getprpwnam' function. (SecureWare-style shadow passwords).])
! 3873: AH_TEMPLATE(HAVE_GETPWANAM, [Define to 1 if you have the `getpwanam' function. (SunOS 4.x shadow passwords).])
! 3874: AH_TEMPLATE(HAVE_GETSPNAM, [Define to 1 if you have the `getspnam' function (SVR4-style shadow passwords).])
! 3875: AH_TEMPLATE(HAVE_GETSPWUID, [Define to 1 if you have the `getspwuid' function. (HP-UX <= 9.X shadow passwords).])
! 3876: AH_TEMPLATE(HAVE_GSS_KRB5_CCACHE_NAME, [Define to 1 if you have the `gss_krb5_ccache_name' function.])
! 3877: AH_TEMPLATE(HAVE_HEIMDAL, [Define to 1 if your Kerberos is Heimdal.])
! 3878: AH_TEMPLATE(HAVE_INET_PTON, [Define to 1 if you have the `inet_pton' function.])
! 3879: AH_TEMPLATE(HAVE_ISCOMSEC, [Define to 1 if you have the `iscomsec' function. (HP-UX >= 10.x check for shadow enabled).])
! 3880: AH_TEMPLATE(HAVE_ISSECURE, [Define to 1 if you have the `issecure' function. (SunOS 4.x check for shadow enabled).])
! 3881: AH_TEMPLATE(HAVE_KERB5, [Define to 1 if you use Kerberos V.])
! 3882: AH_TEMPLATE(HAVE_KRB5_GET_INIT_CREDS_OPT_ALLOC, [Define to 1 if you have the `krb5_get_init_creds_opt_alloc' function.])
! 3883: AH_TEMPLATE(HAVE_KRB5_GET_INIT_CREDS_OPT_FREE_TWO_ARGS, [Define to 1 if your `krb5_get_init_creds_opt_free' function takes two arguments.])
! 3884: AH_TEMPLATE(HAVE_KRB5_INIT_SECURE_CONTEXT, [Define to 1 if you have the `krb5_init_secure_context' function.])
! 3885: AH_TEMPLATE(HAVE_KRB5_VERIFY_USER, [Define to 1 if you have the `krb5_verify_user' function.])
! 3886: AH_TEMPLATE(HAVE_LBER_H, [Define to 1 if your LDAP needs <lber.h>. (OpenLDAP does not).])
! 3887: AH_TEMPLATE(HAVE_LDAP, [Define to 1 if you use LDAP for sudoers.])
! 3888: AH_TEMPLATE(HAVE_LIBINTL_H, [Define to 1 if you have the <libintl.h> header file.])
! 3889: AH_TEMPLATE(HAVE_LINUX_AUDIT, [Define to 1 to enable Linux audit support.])
! 3890: AH_TEMPLATE(HAVE_SSSD, [Define to 1 to enable SSSD support.])
! 3891: AH_TEMPLATE(HAVE_OPIE, [Define to 1 if you use NRL OPIE.])
! 3892: AH_TEMPLATE(HAVE_OPTRESET, [Define to 1 if you have the `optreset' symbol.])
! 3893: AH_TEMPLATE(HAVE_PAM, [Define to 1 if you use PAM authentication.])
! 3894: AH_TEMPLATE(HAVE_PAM_LOGIN, [Define to 1 if you use a specific PAM session for sudo -i.])
! 3895: AH_TEMPLATE(HAVE_PROJECT_H, [Define to 1 if you have the <project.h> header file.])
! 3896: AH_TEMPLATE(HAVE_SECURID, [Define to 1 if you use SecurID for authentication.])
! 3897: AH_TEMPLATE(HAVE_SELINUX, [Define to 1 to enable SELinux RBAC support.])
! 3898: AH_TEMPLATE(HAVE_SETKEYCREATECON, [Define to 1 if you have the `setkeycreatecon' function.])
! 3899: AH_TEMPLATE(HAVE_SHL_LOAD, [Define to 1 if you have the `shl_load' function.])
! 3900: AH_TEMPLATE(HAVE_SKEY, [Define to 1 if you use S/Key.])
! 3901: AH_TEMPLATE(HAVE_SKEYACCESS, [Define to 1 if your S/Key library has skeyaccess().])
! 3902: AH_TEMPLATE(HAVE_RFC1938_SKEYCHALLENGE, [Define to 1 if the skeychallenge() function is RFC1938-compliant and takes 4 arguments.])
! 3903: AH_TEMPLATE(HAVE_ST__TIM, [Define to 1 if your struct stat uses an st__tim union.])
! 3904: AH_TEMPLATE(HAVE_ST_MTIM, [Define to 1 if your struct stat has an st_mtim member.])
! 3905: AH_TEMPLATE(HAVE_ST_MTIMESPEC, [Define to 1 if your struct stat has an st_mtimespec member.])
! 3906: AH_TEMPLATE(HAVE___PROGNAME, [Define to 1 if your crt0.o defines the __progname symbol for you.])
! 3907: AH_TEMPLATE(HOST_IN_LOG, [Define to 1 if you want the hostname to be entered into the log file.])
! 3908: AH_TEMPLATE(IGNORE_DOT_PATH, [Define to 1 if you want to ignore '.' and empty PATH elements.])
! 3909: AH_TEMPLATE(LOGGING, [Define to SLOG_SYSLOG, SLOG_FILE, or SLOG_BOTH.])
! 3910: AH_TEMPLATE(LONG_OTP_PROMPT, [Define to 1 if you want a two line OTP (S/Key or OPIE) prompt.])
! 3911: AH_TEMPLATE(NO_AUTHENTICATION, [Define to 1 if you don't want sudo to prompt for a password by default.])
! 3912: AH_TEMPLATE(NO_LECTURE, [Define to 1 if you don't want users to get the lecture the first they user sudo.])
! 3913: AH_TEMPLATE(NO_PAM_SESSION, [Define to 1 if you don't want to use sudo's PAM session support.])
! 3914: AH_TEMPLATE(NO_ROOT_MAILER, [Define to avoid runing the mailer as root.])
! 3915: AH_TEMPLATE(NO_ROOT_SUDO, [Define to 1 if root should not be allowed to use sudo.])
! 3916: AH_TEMPLATE(NO_TTY_TICKETS, [Define to 1 if you want a single ticket file instead of per-tty files.])
! 3917: AH_TEMPLATE(PC_INSULTS, [Define to 1 to replace politically incorrect insults with less offensive ones.])
! 3918: AH_TEMPLATE(SECURE_PATH, [Define to 1 to override the user's path with a built-in one.])
! 3919: AH_TEMPLATE(SEND_MAIL_WHEN_NOT_OK, [Define to 1 to send mail when the user is not allowed to run a command.])
! 3920: AH_TEMPLATE(SEND_MAIL_WHEN_NO_HOST, [Define to 1 to send mail when the user is not allowed to run sudo on this host.])
! 3921: AH_TEMPLATE(SEND_MAIL_WHEN_NO_USER, [Define to 1 to send mail when the user is not in the sudoers file.])
! 3922: AH_TEMPLATE(SHELL_IF_NO_ARGS, [Define to 1 if you want sudo to start a shell if given no arguments.])
! 3923: AH_TEMPLATE(SHELL_SETS_HOME, [Define to 1 if you want sudo to set $HOME in shell mode.])
! 3924: AH_TEMPLATE(STATIC_SUDOERS_PLUGIN, [Define to 1 to compile the sudoers plugin statically into the sudo binary.])
! 3925: AH_TEMPLATE(STUB_LOAD_INTERFACES, [Define to 1 if the code in interfaces.c does not compile for you.])
! 3926: AH_TEMPLATE(UMASK_OVERRIDE, [Define to 1 to use the umask specified in sudoers even when it is less restrictive than the invoking user's.])
! 3927: AH_TEMPLATE(USE_ADMIN_FLAG, [Define to 1 if you want to create ~/.sudo_as_admin_successful if the user is in the admin group the first time they run sudo.])
! 3928: AH_TEMPLATE(USE_INSULTS, [Define to 1 if you want to insult the user for entering an incorrect password.])
! 3929: AH_TEMPLATE(USE_STOW, [Define to 1 if you use GNU stow packaging.])
! 3930: AH_TEMPLATE(WITHOUT_PASSWD, [Define to avoid using the passwd/shadow file for authentication.])
! 3931: AH_TEMPLATE(clockid_t, [Define to `int' if <time.h> does not define.])
! 3932: AH_TEMPLATE(sig_atomic_t, [Define to `int' if <signal.h> does not define.])
! 3933: AH_TEMPLATE(socklen_t, [Define to `unsigned int' if <sys/socket.h> doesn't define.])
! 3934: AH_TEMPLATE(HAVE_STRUCT_UTMP_UT_EXIT, [Define to 1 if `ut_exit' is a member of `struct utmp'.])
! 3935: AH_TEMPLATE(HAVE_STRUCT_UTMPX_UT_EXIT, [Define to 1 if `ut_exit' is a member of `struct utmpx'.])
! 3936: AH_TEMPLATE(HAVE___FUNC__, [Define to 1 if the compiler supports the C99 __func__ variable.])
! 3937: AH_TEMPLATE(HAVE___INTERPOSE, [Define to 1 if you have dyld with __interpose attribute support.])
! 3938: AH_TEMPLATE(SUDO_KRB5_INSTANCE, [An instance string to append to the username (separated by a slash) for Kerberos V authentication.])
! 3939: AH_TEMPLATE(RTLD_PRELOAD_VAR, [The environment variable that controls preloading of dynamic objects.])
! 3940: AH_TEMPLATE(RTLD_PRELOAD_ENABLE_VAR, [An extra environment variable that is required to enable preloading (if any).])
! 3941: AH_TEMPLATE(RTLD_PRELOAD_DELIM, [The delimiter to use when defining multiple preloaded objects.])
! 3942: AH_TEMPLATE(RTLD_PRELOAD_DEFAULT, [The default value of preloaded objects (if any).])
! 3943: AH_TEMPLATE(HAVE_DSO_VISIBILITY, [Define to 1 if the compiler supports the __visibility__ attribute.])
! 3944: AH_TEMPLATE(HAVE_SYS_SIGABBREV, [Define to 1 if your libc has the `sys_sigabbrev' symbol.])
! 3945: AH_TEMPLATE(HAVE_NSS_SEARCH, [Define to 1 if you have the `nss_search' function.])
! 3946: AH_TEMPLATE(HAVE__NSS_INITF_GROUP, [Define to 1 if you have the `_nss_initf_group' function.])
! 3947: AH_TEMPLATE(HAVE___NSS_INITF_GROUP, [Define to 1 if you have the `__nss_initf_group' function.])
! 3948: AH_TEMPLATE(HAVE__NSS_XBYY_BUF_ALLOC, [Define to 1 if you have the `_nss_XbyY_buf_alloc' function.])
! 3949: AH_TEMPLATE(HAVE___NSS_XBYY_BUF_ALLOC, [Define to 1 if you have the `__nss_XbyY_buf_alloc' function.])
! 3950:
! 3951: dnl
! 3952: dnl Bits to copy verbatim into config.h.in
! 3953: dnl
! 3954: AH_TOP([#ifndef _SUDO_CONFIG_H
! 3955: #define _SUDO_CONFIG_H])
! 3956:
! 3957: AH_BOTTOM([/* BSD compatibility on some SVR4 systems. */
! 3958: #ifdef __svr4__
! 3959: # define BSD_COMP
! 3960: #endif /* __svr4__ */
! 3961:
! 3962: #endif /* _SUDO_CONFIG_H */])
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to configure.ac CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo