source: x/installing/x7server.xml@ dc77783f

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since dc77783f was dc77783f, checked in by Dan Nichilson <dnicholson@…>, 18 years ago

Patches security vulnerabilities in Xorg-7.1. Closes ticket #2100.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6281 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 6.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
3 "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY xorg-server-download-http "http://xorg.freedesktop.org/releases/individual/xserver/xorg-server-&xorg-server-version;.tar.bz2">
8 <!ENTITY xorg-server-download-ftp " ">
9 <!ENTITY xorg-server-md5sum "d070c58a598fb52c5cb86344725c4ad6">
10 <!ENTITY xorg-server-size "6.1 MB">
11 <!ENTITY xorg-server-buildsize "424 MB">
12 <!ENTITY xorg-server-time "5.6 SBU">
13
14]>
15
16<sect1 id="xorg7-server" xreflabel="Xorg-Server-&xorg-server-version;">
17 <?dbhtml filename="x7server.html"?>
18
19 <sect1info>
20 <othername>$LastChangedBy: dj $</othername>
21 <date>$Date: 2006-04-15 23:04:51 -0500 (Sat, 15 Apr 2006) $</date>
22 </sect1info>
23
24 <title>Xorg-Server-&xorg-server-version;</title>
25
26 <indexterm zone="xorg7-server">
27 <primary sortas="a-xorg7-server">Xorg Server</primary>
28 </indexterm>
29
30 <para>The <application>Xorg</application> Server is the core
31 of the X Window system.</para>
32
33 <bridgehead renderas="sect3">Package Information</bridgehead>
34 <itemizedlist spacing="compact">
35 <listitem>
36 <para>Download (HTTP): <ulink url="&xorg-server-download-http;"/></para>
37 </listitem>
38 <listitem>
39 <para>Download (FTP): <ulink url="&xorg-server-download-ftp;"/></para>
40 </listitem>
41 <listitem>
42 <para>Download MD5 sum: &xorg-server-md5sum;</para>
43 </listitem>
44 <listitem>
45 <para>Download size: &xorg-server-size;</para>
46 </listitem>
47 <listitem>
48 <para>Estimated disk space required: &xorg-server-buildsize;</para>
49 </listitem>
50 <listitem>
51 <para>Estimated build time: &xorg-server-time;</para>
52 </listitem>
53 </itemizedlist>
54
55 <!-- Following patch is security related and should be
56 fixed for Xorg-7.2 -->
57 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
58 <itemizedlist spacing="compact">
59 <listitem>
60 <para>Required patch: <ulink
61 url="&patch-root;/xorg-server-1.1.0-setuid-2.patch"/></para>
62 </listitem>
63 </itemizedlist>
64
65 <bridgehead renderas="sect3">Xorg Server Dependencies</bridgehead>
66
67 <bridgehead renderas="sect4">Required</bridgehead>
68 <para role="required"><xref linkend="xorg7-font"/></para>
69
70 <bridgehead renderas="sect4">Optional</bridgehead>
71 <para role="optional"><xref linkend="mesalib"/> and
72 <xref linkend="luit"/></para>
73
74 <para condition="html" role="usernotes">User Notes:
75 <ulink url='&blfs-wiki;/Xorg7Server'/></para>
76
77 <sect2 role="installation">
78 <title>Installation of Xorg Server</title>
79
80 <note>
81 <para>If you intend to build with <application>Mesa</application>,
82 you must have the <application>Mesa</application> source
83 directory available when building the
84 <application>Xorg-server</application>.</para>
85 </note>
86
87<!-- To be removed if/when proposed glibc patch is added to LFS SVN
88 Leave in in for a couple of weeks with 'you may need' and a testcase
89 around it to save the support list silly questions. Should remove in
90 a couple of weeks
91 <para>Recent <application>Glibc</application> may have a problem with its
92 installed <filename>sys/kd.h</filename> file. This has recently been
93 fixed in LFS SVN. Execute the following commands to work around a
94 broken <filename>kd.h</filename> file. The commands will only make the
95 modification if needed:</para>
96
97<screen><userinput>grep "__undef_LINUX" \
98 /usr/include/sys/kd.h 2&gt;&amp;1 &gt; /dev/null || \
99 sed -i.bak '/CONFIG_H/i #include &lt;linux/types.h&gt;' \
100 hw/xfree86/os-support/linux/lnx_agp.c</userinput></screen>
101 End remove -->
102
103 <para>A <ulink url='http://wiki.x.org/wiki/SecurityPage'>security
104 vulnerability</ulink> has been identified in the xorg-server
105 packages. Apply a patch to fix this vulnerability with the following
106 command:</para>
107
108<screen><userinput>patch -Np1 -i ../xorg-server-1.1.0-setuid-2.patch</userinput></screen>
109
110 <para>Install the server by running the following commands:</para>
111
112<screen><userinput>sed -i \
113 's@-I$(top_builddir)/include@-I$(top_builddir)/GL/mesa/main@8' \
114 GL/glx/Makefile.in &amp;&amp;
115sed -i \
116 's@-I$(top_builddir)/include@-I$(top_builddir)/GL/mesa/glapi@7' \
117 GL/glx/Makefile.in &amp;&amp;
118./configure $XORG_CONFIG \
119 --with-mesa-source='<replaceable>&lt;/path/to&gt;</replaceable>/Mesa-&mesalib-version;' \
120 --with-fontdir=$XORG_PREFIX/lib/X11/fonts \
121 --with-module-dir=$XORG_PREFIX/lib/X11/modules \
122 --with-dri-driver-path=$XORG_PREFIX/lib/X11/modules/dri \
123 --enable-install-setuid &amp;&amp;
124make</userinput></screen>
125
126 <para>This package does not come with a test suite.</para>
127
128 <para>Now as the <systemitem class="username">root</systemitem>
129 user:</para>
130
131<screen><userinput role="root">make install</userinput></screen>
132
133 </sect2>
134
135 <sect2 role="commands">
136 <title>Command Explanations</title>
137
138 <para><command>sed -i '...' GL/glx/Makefile.in</command>: These commands
139 correct the search path for the <application>Mesa</application> headers.
140 The 8th and 7th instance of '-I$(top_builddir)' in the existing search
141 search path are replaced with <application>Mesa</application> paths.</para>
142
143 <para><parameter>--with-mesa-source=...</parameter>: This switch directs
144 the build system to the location of the <application>Mesa</application>
145 source directory. If you wish to build without
146 <application>Mesa</application>, omit this switch.</para>
147
148 <para><parameter>--with-module-dir=...</parameter>: This parameter
149 sets the destination for the installed modules.</para>
150
151 <para><parameter>--with-dri-driver-path=...</parameter>: This is the
152 location of the <application>Mesa</application> DRI drivers.</para>
153
154 <para><parameter>--enable-install-setuid</parameter>: The Xorg binary must
155 run as the root user. This switch ensures that the binary is installed
156 setuid when <command>make</command> is run by an unprivileged user.</para>
157
158 <para><parameter>--disable-glx</parameter>: Disable building of the GLX
159 extension. This parameter is required if building without
160 <application>Mesa</application>.</para>
161
162 <para><parameter>--disable-dri</parameter>: Disable building of the DRI
163 extension. This parameter is required if building without
164 <application>Mesa</application>.</para>
165
166 <para><parameter>--disable-xprint</parameter>: Disable building of
167 the <application>Xprint</application> extension and server. This
168 parameter is required if building without
169 <application>Mesa</application>.</para>
170
171 </sect2>
172
173</sect1>
Note: See TracBrowser for help on using the repository browser.