1.PATH: ${.PARSEDIR:H:H}/security/mac_veriexec 2 3KMOD = mac_veriexec 4SRCS = \ 5 bus_if.h \ 6 device_if.h \ 7 vnode_if.h 8SRCS += \ 9 opt_capsicum.h \ 10 opt_global.h \ 11 opt_mac.h \ 12 opt_veriexec.h 13SRCS += \ 14 mac_veriexec.c \ 15 veriexec_fingerprint.c \ 16 veriexec_metadata.c 17 18EXPORT_SYMS+= ve_mutex \ 19 mac_veriexec_in_state \ 20 mac_veriexec_metadata_get_executable_flags 21 22.if defined(KERNBUILDDIR) 23MKDEP= -include ${KERNBUILDDIR}/opt_global.h 24.else 25CFLAGS+= -include opt_global.h 26MKDEP= -include opt_global.h 27opt_mac.h: 28 echo "#define MAC_DEBUG 1" >> ${.TARGET} 29opt_global.h: 30 echo "#define MAC 1" > ${.TARGET} 31.endif 32 33.ifndef WITHOUT_VERIEXEC_DEBUG 34CFLAGS+= -DVERIFIED_EXEC_DEBUG 35.endif 36 37.include <bsd.kmod.mk> 38 39