Changes in networking/connect/dhcpcd.xml [f713df3:2115e38]

File:

• networking/connect/dhcpcd.xml (modified) (7 diffs)

networking/connect/dhcpcd.xml

@@ -23 +23 @@
   <?dbhtml filename="dhcpcd.html"?>
 
-  <sect1info>
-    <date>$Date$</date>
-  </sect1info>
 
   <title>dhcpcd-&dhcpcd-version;</title>
@@ -44 +41 @@
     </para>
 
-    &lfs110a_checked;
+    &lfs112_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
@@ -95 +92 @@
   </sect2>
 
-  <sect2 role="installation">
-    <title>Installation of dhcpcd</title>
-
-    <para>
-      Recent releases of <application>dhcpcd</application> implement privilege
-      separation. Additional installation steps are necessary to set up
-      the proper environment, which are performed by issuing the following
-      commands as the <systemitem class="username">root</systemitem> user:
+  <sect2 id='dhcpcd-privsep'>
+    <title>Privilege separation</title>
+
+    <para>
+      Recent releases of <application>dhcpcd</application> optionally support
+      privilege separation. As the practical security benefits of this are
+      unclear for a program like <application>dhcpcd</application> and the
+      setup is more complicated, the book currently defaults to disable it.
+    </para>
+    <para>
+      If you however would like to use privilege separation, additional
+      installation steps are necessary to set up the proper environment. Issue
+      the following commands as the
+      <systemitem class="username">root</systemitem> user:
     </para>
 
@@ -111 +114 @@
          -d /var/lib/dhcpcd  \
          -g dhcpcd           \
-         -s /bin/false     \
+         -s /bin/false       \
          -u 52 dhcpcd &amp;&amp;
 chown    -v dhcpcd:dhcpcd /var/lib/dhcpcd </userinput></screen>
 
-    <para>
-      Install <application>dhcpcd</application> by running the following
-      commands:
+  </sect2>
+
+  <sect2 role="installation">
+    <title>Installation of dhcpcd</title>
+
+    <para>Fix a runtime error caused by a change in glibc-2.36:</para>
+
+<screen><userinput>sed '/Deny everything else/i SECCOMP_ALLOW(__NR_getrandom),' \
+    -i src/privsep-linux.c</userinput></screen>
+
+    <para>
+      Build <application>dhcpcd</application> without privilege separation
+      by running the following command:
+    </para>
+
+<screen><userinput>./configure --prefix=/usr                \
+            --sysconfdir=/etc            \
+            --libexecdir=/usr/lib/dhcpcd \
+            --dbdir=/var/lib/dhcpcd      \
+            --runstatedir=/run           \
+            --disable-privsep         &amp;&amp;
+make</userinput></screen>
+
+    <para>
+      Build <application>dhcpcd</application> with privilege separation
+      by running the following commands:
     </para>
 
@@ -178 +204 @@
       build tree.
     </para>
+
+    <para>
+      <parameter>--disable-privsep</parameter>: Do not use privileg separation,
+      which is the default.
+    </para>
+
+    <para>
+      <parameter>--privsepuser=dhcpcd</parameter>: Use this unpriviled user
+      in a privilege separation setup.
+    </para>
+
+    <para>
+      <option>--with-hook=...</option>: You can optionally install more hooks,
+      for example to install some configuration files such as
+      <filename>ntp.conf</filename>. The set of hooks is in the
+      <filename class="directory">dhcpcd-hooks</filename> directory in the
+      build tree.
+    </para>
   </sect2>
 
@@ -232 +276 @@
           modifications to system files are done by hooks which are stored in
           <filename class="directory">/usr/lib/dhcpcd/dhcpcd-hooks</filename>.
-          Setup <command>dhcpcd</command> by removing or adding hooks from/to
+          Set up <command>dhcpcd</command> by removing or adding hooks from/to
           that directory.  The execution of hooks can be disabled by using
           the <option>--nohook</option> (<option>-C</option>) command line
@@ -334 +378 @@
           modifications to system configuration files are done by hooks which
           are stored in <filename class="directory">
-          /lib/dhcpcd/dhcpcd-hooks</filename>. Setup <command>dhcpcd</command>
+          /lib/dhcpcd/dhcpcd-hooks</filename>. Set up <command>dhcpcd</command>
           by removing or adding hooks from/to that directory. The execution
           of hooks can be disabled by using the <option>--nohook</option>