From nobody Tue Feb 10 11:16:15 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1623151687; cv=none; d=zohomail.com; s=zohoarc; b=EPZ7CNHg+zJgTeqyeJjLvwlo5fMUj4O4bcyOVycZFkbXmUMzipoMSiW9bwkwmOctmaWXkl8+k16iWZRdj54LhyIX+WL2tlAGdvZBmoAwB11sFRUubv+yJzGSldSmidKHhJNYmRQh2S2jHB/O3CciflSocqp2fk4eaMoEfZ8CpLc= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1623151687; h=Content-Transfer-Encoding:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=57UsR0DTUAS02KZLVE5DyliFV/++/zkdaZfMUJMA7R8=; b=n89Xfe4cGhV64kQw7aiJOVTSBIvkU7hhSO5+W4X/9klrz598HBi8ATXsiyUnJckuRIT2y4in4zNFXxcohL0TLlNM1Fu3/+WuYJsbQooQWFyC/jkLkJ2vW2liJyh5rlTSDE7eheQZ2mjl3r1N/F8dwwG+vsCxYmWLafAvPHls3yI= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1623151687898312.80030056433725; Tue, 8 Jun 2021 04:28:07 -0700 (PDT) Received: from localhost ([::1]:43402 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lqZtu-0006gh-O8 for importer@patchew.org; Tue, 08 Jun 2021 07:28:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:43510) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lqZp9-0006Sv-OI for qemu-devel@nongnu.org; Tue, 08 Jun 2021 07:23:11 -0400 Received: from mail-wr1-x429.google.com ([2a00:1450:4864:20::429]:45700) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lqZp6-0007wZ-ND for qemu-devel@nongnu.org; Tue, 08 Jun 2021 07:23:10 -0400 Received: by mail-wr1-x429.google.com with SMTP id z8so21121587wrp.12 for ; Tue, 08 Jun 2021 04:23:08 -0700 (PDT) Received: from avogadro.lan ([2001:b07:6468:f312:5e2c:eb9a:a8b6:fd3e]) by smtp.gmail.com with ESMTPSA id i9sm15388621wrn.54.2021.06.08.04.23.06 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Jun 2021 04:23:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=57UsR0DTUAS02KZLVE5DyliFV/++/zkdaZfMUJMA7R8=; b=JeNiydQ6U2wUff40ScujQepEKqTwHBBFdVPeAMtXpbYIG2cdJ9HXhTZnnRDuJMTTff uzRzp+PwiAmkGKOtRqrDTy+CLTK15PqTi+CBgP6Sa/8HTlfot5V0kEGsjsq5D7zv6aVt uSYC9PFim3LwvHWXBY9NTGyQImywzPa6Xm4SCgZwWxh9XuSA0NLYQJHhfq4DxpjS1KY+ UDSssND966sDFYf8DMSz1mH/+UAT0UVLBJ+HN7div/f1Db3RqdH7xjxKqU5GKgXaaj6w W0UNaPm5dLimb99zWv6MfZjzL+4QYGGsfkksoQtQ+AkXnrj1/9rNtpXWvK7zNakAXArb dYaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:subject:date:message-id :in-reply-to:references:mime-version:content-transfer-encoding; bh=57UsR0DTUAS02KZLVE5DyliFV/++/zkdaZfMUJMA7R8=; b=IOOAjog56PIYN6qKukX7qio0rjYshoNlYl9Ja14bP1qSwmV026ILdRVu4Ly5/iwyNH puhgJmV8B17XRdhfWftmTrXaW3SG/BFf+fW543qWi1JRkOT82otap2z14SyhDOi8B/nQ 9VRQBdw4LQJhGpgDh086KSA6hZYEsNaQVJGergWP6KmYXjX3yPIV0NxIm93GBTZNO3RF M/HixEdkSAmBTSVEM9a0Q6K60xNeANAEopupVrEZThwgzsEay3HuI8jCy3FPYHRiadSM CkU+FLguPc9EWBy0cCe68buPR976h6O/DbaPdcFhXfRCiUsiCkdNVMU2/E+4aSnMzhvV 61dw== X-Gm-Message-State: AOAM533oHiMNnOJXTNGctFLicnL8K9pn26FQTRDCLGrRQ5LlnKomBaj3 uekhE8rjMqCTI2LEUFbmkbYZ/lhYkqxEFw== X-Google-Smtp-Source: ABdhPJzYhRROQjWjIWp2Pp5zUMbuF7L24cD0FqgYV86N3EwwCRX1LayX4SBgGQumjwTFXv92PJWNoQ== X-Received: by 2002:adf:e4cf:: with SMTP id v15mr22227553wrm.162.1623151387487; Tue, 08 Jun 2021 04:23:07 -0700 (PDT) From: Paolo Bonzini To: qemu-devel@nongnu.org Subject: [PATCH 05/26] configure, meson: convert pam detection to meson Date: Tue, 8 Jun 2021 13:22:40 +0200 Message-Id: <20210608112301.402434-6-pbonzini@redhat.com> X-Mailer: git-send-email 2.31.1 In-Reply-To: <20210608112301.402434-1-pbonzini@redhat.com> References: <20210608112301.402434-1-pbonzini@redhat.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=2a00:1450:4864:20::429; envelope-from=paolo.bonzini@gmail.com; helo=mail-wr1-x429.google.com X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.248, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" X-ZohoMail-DKIM: fail (Header signature does not verify) Content-Type: text/plain; charset="utf-8" Signed-off-by: Paolo Bonzini Reviewed-by: Daniel P. Berrang=C3=A9 --- authz/meson.build | 2 +- configure | 38 ++++---------------------------------- meson.build | 30 +++++++++++++++++++++++++----- meson_options.txt | 2 ++ tests/unit/meson.build | 2 +- 5 files changed, 33 insertions(+), 41 deletions(-) diff --git a/authz/meson.build b/authz/meson.build index 88fa7769cb..42a1ec0ff6 100644 --- a/authz/meson.build +++ b/authz/meson.build @@ -6,4 +6,4 @@ authz_ss.add(files( 'simple.c', )) =20 -authz_ss.add(when: ['CONFIG_AUTH_PAM', pam], if_true: files('pamacct.c')) +authz_ss.add(when: pam, if_true: files('pamacct.c')) diff --git a/configure b/configure index ebe327b592..d3c2e8ccaf 100755 --- a/configure +++ b/configure @@ -407,7 +407,7 @@ tls_priority=3D"NORMAL" gnutls=3D"auto" nettle=3D"auto" gcrypt=3D"auto" -auth_pam=3D"$default_feature" +auth_pam=3D"auto" vte=3D"$default_feature" virglrenderer=3D"$default_feature" tpm=3D"$default_feature" @@ -1383,9 +1383,9 @@ for opt do ;; --enable-gcrypt) gcrypt=3D"enabled" ;; - --disable-auth-pam) auth_pam=3D"no" + --disable-auth-pam) auth_pam=3D"disabled" ;; - --enable-auth-pam) auth_pam=3D"yes" + --enable-auth-pam) auth_pam=3D"enabled" ;; --enable-rdma) rdma=3D"yes" ;; @@ -2799,33 +2799,6 @@ EOF fi fi =20 -########################################## -# PAM probe - -if test "$auth_pam" !=3D "no"; then - cat > $TMPC < -#include -int main(void) { - const char *service_name =3D "qemu"; - const char *user =3D "frank"; - const struct pam_conv pam_conv =3D { 0 }; - pam_handle_t *pamh =3D NULL; - pam_start(service_name, user, &pam_conv, &pamh); - return 0; -} -EOF - if compile_prog "" "-lpam" ; then - auth_pam=3Dyes - else - if test "$auth_pam" =3D "yes"; then - feature_not_found "PAM" "Install PAM development package" - else - auth_pam=3Dno - fi - fi -fi - ########################################## # VTE probe =20 @@ -5538,9 +5511,6 @@ if test "$gdbus_codegen" !=3D "" ; then echo "GDBUS_CODEGEN=3D$gdbus_codegen" >> $config_host_mak fi echo "CONFIG_TLS_PRIORITY=3D\"$tls_priority\"" >> $config_host_mak -if test "$auth_pam" =3D "yes" ; then - echo "CONFIG_AUTH_PAM=3Dy" >> $config_host_mak -fi if test "$have_broken_size_max" =3D "yes" ; then echo "HAVE_BROKEN_SIZE_MAX=3Dy" >> $config_host_mak fi @@ -6250,7 +6220,7 @@ if test "$skip_meson" =3D no; then -Dcurl=3D$curl -Dglusterfs=3D$glusterfs -Dbzip2=3D$bzip2 -Dlibiscs= i=3D$libiscsi \ -Dlibnfs=3D$libnfs -Diconv=3D$iconv -Dcurses=3D$curses -Dlibudev= =3D$libudev\ -Drbd=3D$rbd -Dlzo=3D$lzo -Dsnappy=3D$snappy -Dlzfse=3D$lzfse \ - -Dgnutls=3D$gnutls -Dnettle=3D$nettle -Dgcrypt=3D$gcrypt \ + -Dgnutls=3D$gnutls -Dnettle=3D$nettle -Dgcrypt=3D$gcrypt -Dauth_pa= m=3D$auth_pam \ -Dzstd=3D$zstd -Dseccomp=3D$seccomp -Dvirtfs=3D$virtfs -Dcap_ng=3D= $cap_ng \ -Dattr=3D$attr -Ddefault_devices=3D$default_devices \ -Ddocs=3D$docs -Dsphinx_build=3D$sphinx_build -Dinstall_blobs=3D$b= lobs \ diff --git a/meson.build b/meson.build index 305b750ced..0d4b6fff16 100644 --- a/meson.build +++ b/meson.build @@ -325,10 +325,6 @@ if have_system or have_tools pixman =3D dependency('pixman-1', required: have_system, version:'>=3D0.= 21.8', method: 'pkg-config', kwargs: static_kwargs) endif -pam =3D not_found -if 'CONFIG_AUTH_PAM' in config_host - pam =3D cc.find_library('pam') -endif libaio =3D cc.find_library('aio', required: false) zlib =3D dependency('zlib', required: true, kwargs: static_kwargs) linux_io_uring =3D not_found @@ -907,6 +903,30 @@ if get_option('vnc').enabled() endif endif =20 +pam =3D not_found +if not get_option('auth_pam').auto() or have_system + pam =3D cc.find_library('pam', has_headers: ['security/pam_appl.h'], + required: get_option('auth_pam'), + kwargs: static_kwargs) +endif +if pam.found() and not cc.links(''' + #include + int main(void) { + const char *service_name =3D "qemu"; + const char *user =3D "frank"; + const struct pam_conv pam_conv =3D { 0 }; + pam_handle_t *pamh =3D NULL; + pam_start(service_name, user, &pam_conv, &pamh); + return 0; + }''', dependencies: pam) + pam =3D not_found + if get_option('auth_pam').enabled() + error('could not link libpam') + else + warning('could not link libpam, disabling') + endif +endif + snappy =3D not_found if not get_option('snappy').auto() or have_system snappy =3D cc.find_library('snappy', has_headers: ['snappy-c.h'], @@ -2743,7 +2763,7 @@ summary_info +=3D {'VTE support': config_host.h= as_key('CONFIG_VTE')} # TODO: add back version summary_info +=3D {'slirp support': slirp_opt =3D=3D 'disabled' ? fals= e : slirp_opt} summary_info +=3D {'libtasn1': tasn1.found()} -summary_info +=3D {'PAM': config_host.has_key('CONFIG_AUTH_P= AM')} +summary_info +=3D {'PAM': pam.found()} summary_info +=3D {'iconv support': iconv.found()} summary_info +=3D {'curses support': curses.found()} # TODO: add back version diff --git a/meson_options.txt b/meson_options.txt index 343ffffb7c..ac6e90da07 100644 --- a/meson_options.txt +++ b/meson_options.txt @@ -52,6 +52,8 @@ option('multiprocess', type: 'feature', value: 'auto', =20 option('attr', type : 'feature', value : 'auto', description: 'attr/xattr support') +option('auth_pam', type : 'feature', value : 'auto', + description: 'PAM access control') option('brlapi', type : 'feature', value : 'auto', description: 'brlapi character device driver') option('bzip2', type : 'feature', value : 'auto', diff --git a/tests/unit/meson.build b/tests/unit/meson.build index 4c1ebc06ac..3e0504dd21 100644 --- a/tests/unit/meson.build +++ b/tests/unit/meson.build @@ -94,7 +94,7 @@ if have_block 'test-io-channel-tls': ['io-channel-helpers.c', 'crypto-tls-x509-hel= pers.c', 'pkix_asn1_tab.c', tasn1, io, crypto, gnutls]} endif - if 'CONFIG_AUTH_PAM' in config_host + if pam.found() tests +=3D {'test-authz-pam': [authz]} endif if xts =3D=3D 'private' --=20 2.31.1