Changeset 305e60de


Ignore:
Timestamp:
01/27/2005 03:26:52 AM (19 years ago)
Author:
Randy McMurchy <randy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
852cd813
Parents:
48ecffe8
Message:

Added indexing tags to Tripwire; more Chapter 4 clean-up

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3344 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:
postlfs/security
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/cyrus-sasl.xml

    r48ecffe8 r305e60de  
    8383            --with-dbpath=/var/lib/sasl/sasldb2 \
    8484            --with-saslauthd=/var/run &amp;&amp;
    85 make &amp;&amp;
    86 make install &amp;&amp;
     85make</command></userinput></screen>
     86
     87<para>Now, as the root user:</para>
     88
     89<screen><userinput role='root'><command>make install &amp;&amp;
    8790install -m644 saslauthd/saslauthd.mdoc \
    8891    /usr/share/man/man8/saslauthd.8 &amp;&amp;
    … …  
    147150</indexterm>
    148151
    149 <screen><userinput><command>make install-cyrus-sasl</command></userinput></screen>
     152<screen><userinput role='root'><command>make install-cyrus-sasl</command></userinput></screen>
    150153
    151154<note><para>You'll need to modify the init script and replace the

  • postlfs/security/gnupg.xml

    r48ecffe8 r305e60de  
    5454<sect3><title><application>GnuPG</application> dependencies</title>
    5555<sect4><title>Optional</title>
    56 <para><xref linkend="openldap"/>, <ulink url="../server/mail.html">MTA</ulink>,
     56<para><xref linkend="openldap"/>,
     57<ulink url="../server/mail.html">MTA</ulink>,
    5758<xref linkend="docbook-utils"/> and <ulink
    5859url="http://www.oasis-open.org/docbook/tools/dtm/">docbook-to-man</ulink>
    … …  
    6970
    7071<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/lib &amp;&amp;
    71 make &amp;&amp;
    72 make install &amp;&amp;
     72make</command></userinput></screen>
     73
     74<para>Now, as the root user:</para>
     75
     76<screen><userinput role='root'><command>make install &amp;&amp;
    7377chmod 4755 /usr/bin/gpg</command></userinput></screen>
    7478
    … …  
    96100<seglistitem>
    97101<seg>gpg, gpgsplit and gpgv</seg>
    98 <seg>/usr/lib/gunpg and /usr/share/gnupg</seg>
     102<seg>/usr/lib/gnupg and /usr/share/gnupg</seg>
    99103</seglistitem>
    100104</segmentedlist>

  • postlfs/security/mitkrb.xml

    r48ecffe8 r305e60de  
    103103</para>
    104104
    105 <screen><userinput><command>make install &amp;&amp;
     105<screen><userinput role='root'><command>make install &amp;&amp;
    106106mv /bin/login /bin/login.shadow &amp;&amp;
    107107cp /usr/sbin/login.krb5 /bin/login &amp;&amp;
    … …  
    179179</para>
    180180
    181 <screen><userinput><command>cat &gt; /etc/krb5.conf &lt;&lt; "EOF"</command>
     181<screen><userinput role='root'><command>cat &gt; /etc/krb5.conf &lt;&lt; "EOF"</command>
    182182# Begin /etc/krb5.conf
    183183
    … …  
    235235</para>
    236236
    237 <screen><userinput><command>kdb5_util create -r <replaceable>[LFS.ORG]</replaceable> -s </command></userinput></screen>
     237<screen><userinput role='root'><command>kdb5_util create -r <replaceable>[LFS.ORG]</replaceable> -s </command></userinput></screen>
    238238
    239239<para>
    … …  
    242242</para>
    243243
    244 <screen><userinput><command>kadmin.local</command></userinput>
     244<screen><userinput role='root'><command>kadmin.local</command></userinput>
    245245<prompt>kadmin:</prompt><userinput><command>addprinc <replaceable>[loginname]</replaceable></command></userinput></screen>
    246246
    … …  
    250250</para>
    251251
    252 <screen><prompt>kadmin:</prompt><userinput><command>addprinc -randkey host/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
     252<screen><prompt>kadmin:</prompt><userinput role='root'><command>addprinc -randkey host/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
    253253
    254254<para>
    … …  
    257257</para>
    258258
    259 <screen><prompt>kadmin:</prompt><userinput><command>ktadd host/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
     259<screen><prompt>kadmin:</prompt><userinput role='root'><command>ktadd host/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
    260260
    261261<para>
    … …  
    272272</para>
    273273
    274 <screen><prompt>kadmin:</prompt><userinput><command>addprinc -randkey ftp/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput>
    275 <prompt>kadmin:</prompt><userinput><command>ktadd ftp/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
     274<screen><prompt>kadmin:</prompt><userinput role='root'><command>addprinc -randkey ftp/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput>
     275<prompt>kadmin:</prompt><userinput role='root'><command>ktadd ftp/<replaceable>[belgarath.lfs.org]</replaceable></command></userinput></screen>
    276276
    277277<para>
    … …  
    282282</para>
    283283
    284 <screen><userinput><command>/usr/sbin/krb5kdc &amp;</command></userinput></screen>
     284<screen><userinput role='root'><command>/usr/sbin/krb5kdc &amp;</command></userinput></screen>
    285285
    286286<para>
    … …  
    325325</para>
    326326
    327 <screen><userinput><command>make install-kerberos</command></userinput></screen>
     327<screen><userinput role='root'><command>make install-kerberos</command></userinput></screen>
    328328
    329329</sect4>

  • postlfs/security/stunnel.xml

    r48ecffe8 r305e60de  
    6868<command>chroot</command> jail by an unprivileged user. Create the new user,
    6969group and <command>chroot</command> home directory structure using the
    70 following commands:</para>
    71 
    72 <screen><userinput><command>groupadd stunnel &amp;&amp;
     70following commands as the root user:</para>
     71
     72<screen><userinput role='root'><command>groupadd stunnel &amp;&amp;
    7373useradd -c "Stunnel Daemon" -d /var/lib/stunnel \
    7474        -g stunnel -s /bin/false stunnel &amp;&amp;
    … …  
    9494<screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc \
    9595    --localstatedir=/var/lib/stunnel &amp;&amp;
    96 make &amp;&amp;
    97 make install</command></userinput></screen>
     96make</command></userinput></screen>
     97
     98<para>Now, as the root user:</para>
     99
     100<screen><userinput role='root'><command>make install</command></userinput></screen>
    98101
    99102</sect2>
    … …  
    138141configuration file using the following commands:</para>
    139142
    140 <screen><userinput><command>cat &gt;/etc/stunnel/stunnel.conf &lt;&lt; "EOF"</command>
     143<screen><userinput role='root'><command>cat &gt;/etc/stunnel/stunnel.conf &lt;&lt; "EOF"</command>
    141144# File: /etc/stunnel/stunnel.conf
    142145
    … …  
    152155configuration file. The format is as follows:</para>
    153156
    154 <screen><userinput>[<replaceable>[service]</replaceable>]
     157<screen><userinput role='root'>[<replaceable>[service]</replaceable>]
    155158accept  = <replaceable>[hostname:portnumber]</replaceable>
    156159connect = <replaceable>[hostname:portnumber]</replaceable></userinput></screen>
    … …  
    176179<primary sortas="f-stunnel.init">stunnel</primary></indexterm>
    177180
    178 <screen><userinput><command>make install-stunnel</command></userinput></screen>
     181<screen><userinput role='root'><command>make install-stunnel</command></userinput></screen>
    179182</sect3>
    180183

  • postlfs/security/tripwire.xml

    r48ecffe8 r305e60de  
    1919<?dbhtml filename="tripwire.html"?>
    2020<title>Tripwire-&tripwire-version;</title>
     21<indexterm zone="tripwire-portable">
     22<primary sortas="a-Tripwire">Tripwire</primary>
     23</indexterm>
    2124
    2225<sect2>
    … …  
    4144<sect3><title><application>Tripwire</application> dependencies</title>
    4245<sect4><title>Optional</title>
    43 <para><acronym>MTA</acronym> (See <xref linkend="server-mail"/>)</para></sect4>
     46<para><acronym>MTA</acronym> (See <xref linkend="server-mail"/>)</para>
     47</sect4>
    4448</sect3>
    4549
    … …  
    5458<screen><userinput><command>sed -i -e 's@TWDB="${prefix}@TWDB="/var@' install/install.cfg &amp;&amp;
    5559./configure --prefix=/usr --sysconfdir=/etc/tripwire &amp;&amp;
    56 make &amp;&amp;
    57 make install &amp;&amp;
     60make</command></userinput></screen>
     61
     62<para>Now, as the root user:</para>
     63
     64<screen><userinput role='root'><command>make install &amp;&amp;
    5865cp policy/*.txt /usr/share/doc/tripwire</command></userinput></screen>
    5966
    … …  
    8693<title>Configuring <application>Tripwire</application></title>
    8794
    88 <sect3><title>Config files</title>
     95<sect3 id="tripwire-config"><title>Config files</title>
    8996<para><filename>/etc/tripwire/*</filename></para>
     97<indexterm zone="tripwire-portable tripwire-config">
     98<primary sortas="e-etc-tripwire">/etc/tripwire/*</primary>
     99</indexterm>
    90100</sect3>
    91101
    … …  
    120130configuration steps:</para>
    121131
    122 <screen><userinput><command>twadmin --create-polfile --site-keyfile /etc/tripwire/site.key \
     132<screen><userinput role='root'><command>twadmin --create-polfile --site-keyfile /etc/tripwire/site.key \
    123133    /etc/tripwire/twpol.txt &amp;&amp;
    124134tripwire --init</command></userinput></screen>
    … …  
    130140to run a report, use the following command:</para>
    131141
    132 <screen><userinput><command>tripwire --check &gt; /etc/tripwire/report.txt</command></userinput></screen>
     142<screen><userinput role='root'><command>tripwire --check &gt; /etc/tripwire/report.txt</command></userinput></screen>
    133143
    134144<para>View the output to check the integrity of your files. An automatic
    … …  
    149159substitutions for <replaceable>[?]</replaceable>:</para>
    150160
    151 <screen><userinput><command>tripwire --update -twrfile \
     161<screen><userinput role='root'><command>tripwire --update -twrfile \
    152162    /var/lib/tripwire/report/linux-<replaceable>[???????]</replaceable>-<replaceable>[??????]</replaceable>.twr</command></userinput></screen>
    153163
    … …  
    166176commands:</para>
    167177
    168 <screen><userinput><command>twadmin --create-polfile /etc/tripwire/twpol.txt &amp;&amp;
     178<screen><userinput role='root'><command>twadmin --create-polfile /etc/tripwire/twpol.txt &amp;&amp;
    169179tripwire --init</command></userinput></screen>
    170 
    171180</sect3>
    172181
    … …  
    177186<segmentedlist>
    178187  <segtitle>Installed Programs</segtitle>
     188  <segtitle>Installed Directories</segtitle>
    179189  <seglistitem>
    180190    <seg>siggen, tripwire, twadmin and twprint.</seg>
     191    <seg>/etc/tripwire, /usr/share/doc/tripwire and /var/lib/tripwire</seg>
    181192  </seglistitem>
    182193</segmentedlist>
    … …  
    190201    <listitem><para>is a signature gathering utility that displays
    191202      the hash function values for the specified files.</para>
     203    <indexterm zone="tripwire-portable siggen">
     204      <primary sortas="b-siggen">siggen</primary>
     205    </indexterm>
    192206    </listitem>
    193207  </varlistentry>
    … …  
    195209  <varlistentry id='tripwire'>
    196210    <term><command>tripwire</command></term>
    197     <listitem><para>is the main file integrity checking program.</para></listitem>
     211    <listitem><para>is the main file integrity checking program.</para>
     212    <indexterm zone="tripwire-portable tripwire">
     213      <primary sortas="b-tripwire">tripwire</primary>
     214    </indexterm>
     215    </listitem>
    198216  </varlistentry>
    199217
    … …  
    202220    <listitem><para>administrative and utility tool used to perform
    203221      certain administrative functions related to
    204       <application>Tripwire</application> files and configuration options.</para>
     222      <application>Tripwire</application> files and configuration
     223        options.</para>
     224    <indexterm zone="tripwire-portable twadmin">
     225      <primary sortas="b-twadmin">twadmin</primary>
     226    </indexterm>
    205227    </listitem>
    206228  </varlistentry>
    … …  
    210232    <listitem><para>prints <application>Tripwire</application>
    211233      database and report files in clear text format.</para>
     234    <indexterm zone="tripwire-portable twprint">
     235      <primary sortas="b-twprint">twprint</primary>
     236    </indexterm>
    212237    </listitem>
    213238  </varlistentry>
Note: See TracChangeset for help on using the changeset viewer.