source: archive/tcpwrappers.xml

trunk
Last change on this file was 45ab6c7, checked in by Xi Ruoyao <xry111@…>, 3 months ago

more SVN prop clean up

Remove "$LastChanged$" everywhere, and also some unused $Date$

  • Property mode set to 100644
File size: 8.7 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY tcpwrappers-download-http " ">
8 <!ENTITY tcpwrappers-download-ftp "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_&tcpwrappers-version;.tar.gz">
9 <!ENTITY tcpwrappers-md5sum "e6fa25f71226d090f34de3f6b122fb5a">
10 <!ENTITY tcpwrappers-size "97 KB">
11 <!ENTITY tcpwrappers-buildsize "1.09 MB">
12 <!ENTITY tcpwrappers-time "less than 0.1 SBU">
13]>
14
15<sect1 id="tcpwrappers" xreflabel="TCP Wrappers-&tcpwrappers-version;">
16 <?dbhtml filename="tcpwrappers.html"?>
17
18 <sect1info>
19 <date>$Date$</date>
20 </sect1info>
21
22 <title>TCP Wrappers-&tcpwrappers-version;</title>
23
24 <indexterm zone="tcpwrappers">
25 <primary sortas="a-TCP Wrapper">TCP Wrapper</primary>
26 </indexterm>
27
28 <sect2 role="package">
29 <title>Introduction to TCP Wrappers</title>
30
31 <para>The <application>TCP Wrapper</application> package provides daemon
32 wrapper programs that report the name of the client requesting network
33 services and the requested service. This capability is obsolete in
34 a modern environment, but several applications still use the library
35 and associated configuration files.</para>
36
37 &lfs70_checked;
38
39 <bridgehead renderas="sect3">Package Information</bridgehead>
40 <itemizedlist spacing="compact">
41 <listitem>
42 <para>Download (HTTP): <ulink url="&tcpwrappers-download-http;"/></para>
43 </listitem>
44 <listitem>
45 <para>Download (FTP): <ulink url="&tcpwrappers-download-ftp;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download MD5 sum: &tcpwrappers-md5sum;</para>
49 </listitem>
50 <listitem>
51 <para>Download size: &tcpwrappers-size;</para>
52 </listitem>
53 <listitem>
54 <para>Estimated disk space required: &tcpwrappers-buildsize;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated build time: &tcpwrappers-time;</para>
58 </listitem>
59 </itemizedlist>
60
61 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
62 <itemizedlist spacing='compact'>
63 <listitem>
64 <para>Required Patch (Fixes some build issues and adds building a
65 shared library): <ulink
66 url="&patch-root;/tcp_wrappers-&tcpwrappers-version;-shared_lib_plus_plus-1.patch"/></para>
67 </listitem>
68 </itemizedlist>
69
70 <para condition="html" role="usernotes">User Notes:
71 <ulink url="&blfs-wiki;/tcpwrappers"/></para>
72
73 </sect2>
74
75 <sect2 role="installation">
76 <title>Installation of TCP Wrappers</title>
77
78 <para>Install <application>TCP Wrapper</application> with the following
79 commands:</para>
80
81<screen><userinput>patch -Np1 -i ../tcp_wrappers-&tcpwrappers-version;-shared_lib_plus_plus-1.patch &amp;&amp;
82sed -i -e "s,^extern char \*malloc();,/* &amp; */," scaffold.c &amp;&amp;
83make REAL_DAEMON_DIR=/usr/sbin STYLE=-DPROCESS_OPTIONS linux</userinput></screen>
84
85 <para>This package does not come with a test suite.</para>
86
87 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
88
89<screen role="root"><userinput>make install</userinput></screen>
90
91 </sect2>
92
93 <sect2 role="commands">
94 <title>Command Explanations</title>
95
96 <para><command>sed -i -e ... scaffold.c</command>: This command removes an
97 obsolete C declaration which causes the build to fail if using
98 <application>GCC &gt;= 3.4.x</application>.</para>
99
100 </sect2>
101
102 <sect2 role="configuration">
103 <title>Configuring TCP Wrappers</title>
104
105 <sect3 id="tcpwrappers-config">
106 <title>Config Files</title>
107
108 <para><filename>/etc/hosts.allow</filename> and
109 <filename>/etc/hosts.deny</filename></para>
110
111 <indexterm zone="tcpwrappers tcpwrappers-config">
112 <primary sortas="e-etc-hosts.allow">/etc/hosts.allow</primary>
113 </indexterm>
114
115 <indexterm zone="tcpwrappers tcpwrappers-config">
116 <primary sortas="e-etc-hosts.deny">/etc/hosts.deny</primary>
117 </indexterm>
118<!--
119 <para>File protections: the wrapper, all files used by the wrapper,
120 and all directories in the path leading to those files, should be
121 accessible but not writable for unprivileged users (mode 755 or mode
122 555). Do not install the wrapper set-uid.</para>
123
124 <para>As the <systemitem class="username">root</systemitem> user,
125 perform the following edits on the
126 <filename>/etc/inetd.conf</filename> configuration file:</para>
127
128 <indexterm zone="tcpwrappers tcpwrappers-config">
129 <primary sortas="e-etc-inetd.conf">/etc/inetd.conf</primary>
130 </indexterm>
131
132<screen><literal>finger stream tcp nowait nobody /usr/sbin/in.fingerd in.fingerd</literal></screen>
133
134 <para>becomes:</para>
135
136<screen><literal>finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd</literal></screen>
137
138 <note>
139 <para>The <command>finger</command> server is used as an example here.</para>
140 </note>
141
142 <para>Similar changes must be made if <application>xinetd</application> is
143 used, with the emphasis being on calling <command>/usr/sbin/tcpd</command>
144 instead of calling the service daemon directly, and passing the name of the
145 service daemon to <command>tcpd</command>.</para>
146
147 <indexterm zone="tcpwrappers tcpwrappers-config">
148 <primary sortas="e-etc-xinetd.conf">/etc/xinetd.conf</primary>
149 </indexterm>
150-->
151 </sect3>
152
153 </sect2>
154
155 <sect2 role="content">
156 <title>Contents</title>
157
158 <segmentedlist>
159 <segtitle>Installed Programs</segtitle>
160 <segtitle>Installed Library</segtitle>
161 <segtitle>Installed Directories</segtitle>
162
163 <seglistitem>
164 <seg>tcpd, tcpdchk, tcpdmatch, try-from, and safe_finger</seg>
165 <seg>libwrap.{so,a}</seg>
166 <seg>None</seg>
167 </seglistitem>
168 </segmentedlist>
169
170 <variablelist>
171 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
172 <?dbfo list-presentation="list"?>
173 <?dbhtml list-presentation="table"?>
174
175 <varlistentry id="tcpd">
176 <term><command>tcpd</command></term>
177 <listitem>
178 <para>is the main access control daemon for all Internet services,
179 which <command>inetd</command> or <command>xinetd</command>
180 will run instead of running the requested service daemon.</para>
181 <indexterm zone="tcpwrappers tcpd">
182 <primary sortas="b-tcpd">tcpd</primary>
183 </indexterm>
184 </listitem>
185 </varlistentry>
186
187 <varlistentry id="tcpdchk">
188 <term><command>tcpdchk</command></term>
189 <listitem>
190 <para>is a tool to examine a <command>tcpd</command> wrapper
191 configuration and report problems with it.</para>
192 <indexterm zone="tcpwrappers tcpdchk">
193 <primary sortas="b-tcpdchk">tcpdchk</primary>
194 </indexterm>
195 </listitem>
196 </varlistentry>
197
198 <varlistentry id="tcpdmatch">
199 <term><command>tcpdmatch</command></term>
200 <listitem>
201 <para>is used to predict how the TCP wrapper
202 would handle a specific request for a service.</para>
203 <indexterm zone="tcpwrappers tcpdmatch">
204 <primary sortas="b-tcpdmatch">tcpdmatch</primary>
205 </indexterm>
206 </listitem>
207 </varlistentry>
208
209 <varlistentry id="try-from">
210 <term><command>try-from</command></term>
211 <listitem>
212 <para>can be called via a remote shell command to find out if the
213 host name and address are properly recognized.</para>
214 <indexterm zone="tcpwrappers try-from">
215 <primary sortas="b-try-from">try-from</primary>
216 </indexterm>
217 </listitem>
218 </varlistentry>
219
220 <varlistentry id="safe_finger">
221 <term><command>safe_finger</command></term>
222 <listitem>
223 <para>is a wrapper for the <command>finger</command> utility, to
224 provide automatic reverse name lookups.</para>
225 <indexterm zone="tcpwrappers safe_finger">
226 <primary sortas="b-safe_finger">safe_finger</primary>
227 </indexterm>
228 </listitem>
229 </varlistentry>
230
231 <varlistentry id="libwrap">
232 <term><filename class='libraryfile'>libwrap.{so,a}</filename></term>
233 <listitem>
234 <para>contains the API functions required by
235 the <application>TCP Wrapper</application> programs as well as other programs
236 to become <quote><application>TCP Wrapper</application>-aware</quote>.</para>
237 <indexterm zone="tcpwrappers libwrap">
238 <primary sortas="c-libwrap">libwrap.{so,a}</primary>
239 </indexterm>
240 </listitem>
241 </varlistentry>
242
243 </variablelist>
244
245 </sect2>
246
247</sect1>
Note: See TracBrowser for help on using the repository browser.