[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Fri Jun 21 17:36:44 EEST 2013
New commits:
commit 2fbc9012f4a92a0aae9417b87dc2625a24fc8351
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:31:16 2013 -0400
pluto: Add and clarify ipsec status
Added:
- config setup options (natt, retransmits, uniqueids, nhelpers, etc)
- compile time paths (config, ipsecd, secrets, sbin, lib and libexec dirs)
- FIPS and SElinux status
Clarify:
- Added some spacers and headers to clearly mark the different sections
For some of this, plutomain's main() variables had to be pulled from main
and become a static global in plutomain.c. We also had to store some new
variables, that before we only read from optarg and did not remember at all.
commit d7cb94f97d26fd42f440c6653c89bd3db51a3fb8
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:30:54 2013 -0400
updated CHANGES
commit 7c4c80b977e586727261837cc274ed9693058cdc
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:25:19 2013 -0400
FIPS: Remove hardcoded /usr/libexec/ipsec path, use IPSEC_EXECDIR
Now that the makefile passes -DIPSEC_EXECDIR, we can use that to
properly determine the path for our helper programs that need to
be FIPS checked.
commit 97c9090f15d8416e3e175a52f6a88ba8449905ed
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:05:38 2013 -0400
building: Pass some variables to make using -D so programs/pluto can use it
Specifically: IPSEC_SBINDIR, IPSEC_LIBDIR and IPSEC_EXECDIR
This allows us to print their locations in "ipsec status", and will
also remove the need for the FIPS check to use hardcoded paths in
plutomain.c
commit c33c779cab608cd92580ea64be9de5e6661470d4
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:02:47 2013 -0400
building: Cleanup Makefile.inc
Allow more variables to be overridden by the user, by specifying these
as "?=" instead of "="
Removed obsoleted and unused variables: RPMKERNDIR,RPMTMPDIR,RPMDEST,
RPMBUILD and RH_KERNELSRC.
More information about the Swan-commit
mailing list