diff options
| author | Daiki Ueno <dueno@redhat.com> | 2018-01-19 15:22:16 +0100 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2018-02-05 10:49:35 +0100 |
| commit | 9616790b9ad4147acd5b11de11d6d79bc9ad807f (patch) | |
| tree | 01041110e78ded2799fc4e26607ba21a618ca5d2 /trust/Makefile.am | |
| parent | 49d2ededb64197702a8708cb4a453497bc7eaecd (diff) | |
trust: Forcibly mark "Default Trust" read-only
The "Default Trust" token is typically mounted as $datadir, which is
considered as read-only on modern OSes.
Suggestd by Kai Engert in:
https://bugzilla.redhat.com/show_bug.cgi?id=1523630
Diffstat (limited to 'trust/Makefile.am')
| -rw-r--r-- | trust/Makefile.am | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/trust/Makefile.am b/trust/Makefile.am index 59df751..6e52c4d 100644 --- a/trust/Makefile.am +++ b/trust/Makefile.am @@ -46,6 +46,8 @@ module_LTLIBRARIES += \ p11-kit-trust.la p11_kit_trust_la_CFLAGS = \ + -DP11_DEFAULT_TRUST_PREFIX=DATA_DIR \ + -DP11_SYSTEM_TRUST_PREFIX=SYSCONFDIR \ $(LIBTASN1_CFLAGS) p11_kit_trust_la_LIBADD = \ @@ -70,6 +72,8 @@ libtrust_testable_la_LDFLAGS = \ libtrust_testable_la_SOURCES = $(TRUST_SRCS) libtrust_testable_la_CFLAGS = \ + -DP11_DEFAULT_TRUST_PREFIX=\"$(builddir)/trust/default\" \ + -DP11_SYSTEM_TRUST_PREFIX=\"$(builddir)/trust/system\" \ $(LIBTASN1_CFLAGS) libtrust_testable_la_LIBADD = \ @@ -125,7 +129,7 @@ asn: # Tests ---------------------------------------------------------------- trust_CFLAGS = \ - $(LIBTASN1_CFLAGS) \ + $(libtrust_testable_la_CFLAGS) \ $(NULL) trust_LIBS = \ |