1 2.PATH: ${.PARSEDIR:H:H}/security/mac_veriexec 3 4KMOD = mac_veriexec 5SRCS = \ 6 bus_if.h \ 7 device_if.h \ 8 vnode_if.h 9SRCS += \ 10 opt_capsicum.h \ 11 opt_global.h \ 12 opt_mac.h \ 13 opt_veriexec.h 14SRCS += \ 15 mac_veriexec.c \ 16 veriexec_fingerprint.c \ 17 veriexec_metadata.c 18 19EXPORT_SYMS+= ve_mutex \ 20 mac_veriexec_in_state \ 21 mac_veriexec_metadata_get_executable_flags 22 23.if defined(KERNBUILDDIR) 24MKDEP= -include ${KERNBUILDDIR}/opt_global.h 25.else 26CFLAGS+= -include opt_global.h 27MKDEP= -include opt_global.h 28opt_mac.h: 29 echo "#define MAC_DEBUG 1" >> ${.TARGET} 30opt_global.h: 31 echo "#define MAC 1" > ${.TARGET} 32.endif 33 34.ifndef WITHOUT_VERIEXEC_DEBUG 35CFLAGS+= -DVERIFIED_EXEC_DEBUG 36.endif 37 38.include <bsd.kmod.mk> 39 40