Configure Travis-CI
Configure Travis-CI using before_script
configure.ac: use dnl for comments

"#" are shell comments while "dnl" are m4 comments.  This way
they don't get written to the generated configure file.

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
ignore more files

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
clean up clock_gettime check

Some C libraries (like uClibc or >=glibc-2.17) put clock_gettime into
-lc, so we don't want to force linking of -lrt when it is not needed.

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
fix openssl const warning

Building against dev-libs/openssl-1.0.1c results in:

src/tlsdate-helper.c: In function 'check_san':
src/tlsdate-helper.c:523:22: warning: assignment discards 'const'
	qualifier from pointer target type [enabled by default]

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
make hardened compiler flags optional

First note: the default behavior is unchanged.

For people building tlsdate themselves with a known toolchain env, the
checked flags can be redundant, or even harmful.  A compile/link check
for PIE behavior for example might not catch the full supported status
for some architectures/C libraries.

Further, the current code starts by throwing away the user's compiler
settings which can also be harmful.  Those often times include settings
related to ABI or target cpu selection and ignoring them can produce an
unusable binary.

So add a flag that people (including distros) can leverage to bypass
all of the checks.

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Merge pull request #57 from vapier/master

build clean ups (try 2)
add configure flags for setting droppriv user/group

In order to override the default user/group, you have to append your
CPPFLAGS before compiling.  Since you also have to pass along double
quotes, it can get ugly/messy fast in shell (due to the escaping).
Plus, the existing code always defines UNPRIV_USER to "nobody" which
leads to compile time warnings.

Add dedicated configure flags to make the interface simple for people
to control.

Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Merge pull request #58 from vapier/master

add configure flags for setting droppriv user/group
Add Seccomp-BPF policies to the repo.

These policies can be used with the Minijail tool
(http://git.chromium.org/gitweb/?p=chromiumos/platform/minijail.git)
to achieve kernel attack surface reduction.

(Also fix some trailing whitespace.)

BUG=chromium-os:36653
TEST=None

Change-Id: I35dd74702f7dfd701c86e1b25b0831d3925fbf96
Signed-off-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Merge pull request #59 from jlucangelio/add-seccomp-bpf-policies-v2

Add Seccomp-BPF policies to the repo. This needs documentation for use and so on.
Add changes by Jorge Lucangeli Obes to CHANGELOG
Add TODO items
Use /etc/tlsdate/ca-roots/tlsdate-ca-roots.conf for certs by default; allow setting file or dir
remove TÜRKTRUST from CA list post sub-ca mistakes
Update CHANGELOG
Add basic gcov/lcov build support/analysis output - thanks to Matt Hargett for the suggestion
tlsdated: add dbus announcement support

Announce over DBus whenever we change the system time.

Change-Id: Ic6cbab5f703bebe489f513025336c53240ccce35
Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #60 from elly/dbus-announce

tlsdated: add dbus announcement support