Changeset 4f406ea for postlfs


Ignore:
Timestamp:
11/17/2022 07:58:32 AM (18 months ago)
Author:
Pierre Labastie <pierre.labastie@…>
Branches:
11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/xf86-video-removal
Children:
11c62aa
Parents:
41f908a (diff), 84f972c1 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.
Message:

Merge branch 'trunk' into plabs/python-mods

Location:
postlfs
Files:
9 edited

Legend:

Unmodified
Added
Removed
  • postlfs/filesystems/btrfs-progs.xml

    r41f908a r4f406ea  
    77  <!ENTITY btrfs-progs-download-http "&kernel-dl;/linux/kernel/people/kdave/btrfs-progs/btrfs-progs-v&btrfs-progs-version;.tar.xz">
    88  <!ENTITY btrfs-progs-download-ftp  " ">
    9   <!ENTITY btrfs-progs-md5sum        "ba2b1521efde9a257c4ad667fc1226b7">
     9  <!ENTITY btrfs-progs-md5sum        "7ad375cc49428fcd86623ac335c4ac7f">
    1010  <!ENTITY btrfs-progs-size          "2.2 MB">
    1111  <!ENTITY btrfs-progs-buildsize     "52 MB (add 8.2 GB for tests)">
  • postlfs/filesystems/lvm2.xml

    r41f908a r4f406ea  
    77  <!ENTITY lvm2-download-http "https://sourceware.org/ftp/lvm2/LVM2.&lvm2-version;.tgz">
    88  <!ENTITY lvm2-download-ftp  "ftp://sourceware.org/pub/lvm2/LVM2.&lvm2-version;.tgz">
    9   <!ENTITY lvm2-md5sum        "6728bfc66ffc554ba9fc9ae47edd53c5">
    10   <!ENTITY lvm2-size          "2.5 MB">
    11   <!ENTITY lvm2-buildsize     "37 MB (add 19 MB for tests; transient files can grow up to around 800 MB in the /tmp directory during tests)">
     9  <!ENTITY lvm2-md5sum        "cf6927fcf772b15d5b00f4db938f496a">
     10  <!ENTITY lvm2-size          "2.6 MB">
     11  <!ENTITY lvm2-buildsize     "45 MB (add 25 MB for tests; transient files can grow up to around 800 MB in the /tmp directory during tests)">
    1212  <!-- My build size was 124 MB with tests, but I'll leave this here. -renodr
    1313       The files in /tmp are transient. I monitor /tmp with a loop during
     
    175175
    176176<screen role="root"
    177         remap="test"><userinput>LC_ALL=en_US.UTF-8 make S=lvconvert-repair-replace check_local</userinput></screen>
    178 
    179     <para>
    180       The <command>S=...</command> option allows to skip tests. The
    181       <command>lvconvert-repair-replace</command> test has been reported
    182       to hang.
     177        remap="test"><userinput>LC_ALL=en_US.UTF-8 make check_local</userinput></screen>
     178
     179    <para>
     180      Some tests may hang. In this case they can be skipped by adding
     181      <command>S=&lt;testname&gt;</command> to the <command>make</command>
     182      command.
    183183      Other targets are available and can be listed with
    184184      <command>make -C test help</command>. The test timings are very dependent
     
    206206    Results for LVM2.2.03.16:
    207207    ### 395 tests: 241 passed, 145 skipped, 0 timed out, 1 warned, 8 failed
     208
     209    Results for LVM2.2.03.17:
     210    ### 403 tests: 333 passed, 61 skipped, 0 timed out, 3 warned, 6 failed
    208211    -->
    209212
     
    250253
    251254<screen role="root" revision="sysv"><userinput>make install
    252 rm /usr/lib/udev/rules.d/69-dm-lvm.rules</userinput></screen>
     255rm -fv /usr/lib/udev/rules.d/69-dm-lvm.rules</userinput></screen>
    253256
    254257<screen role="root" revision="systemd"><userinput>make install
  • postlfs/filesystems/ntfs-3g.xml

    r41f908a r4f406ea  
    88           "https://tuxera.com/opensource/ntfs-3g_ntfsprogs-&ntfs-3g-version;.tgz">
    99  <!ENTITY ntfs-3g-download-ftp  " ">
    10   <!ENTITY ntfs-3g-md5sum        "18a97a9a9e08f02f46fe447f611f16cb">
     10  <!ENTITY ntfs-3g-md5sum        "a038af61be7584b79f8922ff11244090">
    1111  <!ENTITY ntfs-3g-size          "1.3 MB">
    1212  <!ENTITY ntfs-3g-buildsize     "22 MB">
     
    176176      NTFS filesystems, instead of ntfs-3g (see the note at the start of
    177177      this page).  However, if you want to use ntfs-3g to mount the NTFS
    178       filesystems anyway, create a symlink for <command>mount</command>
     178      filesystems anyway, create a symlink for the <command>mount</command>
    179179      command:
    180180    </para>
  • postlfs/security/libpwquality.xml

    r41f908a r4f406ea  
    169169# use sha512 hash for encryption, use shadow, and use the
    170170# authentication token (chosen password) set by pam_pwquality
    171 # above (or any previous modules)
    172 password  required    pam_unix.so        sha512 shadow use_authtok
     171# above (or any previous modules). Also set the number of crypt rounds
     172# to the value used in shadow.
     173password  required    pam_unix.so        sha512 shadow use_authtok \
     174                                         rounds=5000000
    173175
    174176# End /etc/pam.d/system-password</literal>
  • postlfs/security/linux-pam.xml

    r41f908a r4f406ea  
    348348# use sha512 hash for encryption, use shadow, and try to use any previously
    349349# defined authentication token (chosen password) set by any prior module
    350 password  required    pam_unix.so       sha512 shadow try_first_pass
     350# Use the same number of rounds as shadow.
     351password  required    pam_unix.so       sha512 shadow try_first_pass \
     352                                        rounds=5000000
    351353
    352354# End /etc/pam.d/system-password</literal>
     
    368370     is built in, and the PAM module is built.
    369371-->
    370 <!--
     372<!-- WARNING: If for any reason the instructions below are reinstated be
     373     careful with the number of rounds, which should match the one in shadow.
    371374      <para>
    372375        The remaining generic file depends on whether <xref
  • postlfs/security/polkit.xml

    r41f908a r4f406ea  
    77  <!ENTITY polkit-download-http "https://gitlab.freedesktop.org/polkit/polkit/-/archive/&polkit-version;/polkit-&polkit-version;.tar.gz">
    88  <!ENTITY polkit-download-ftp  " ">
    9   <!ENTITY polkit-md5sum        "fa707b52578bc668ad834425090fc71e">
     9  <!ENTITY polkit-md5sum        "bbe3e745fc5bc1a41f1b5044f09a0f26">
    1010  <!ENTITY polkit-size          "728 KB">
    11   <!ENTITY polkit-buildsize     "8.8 MB (with tests)">
     11  <!ENTITY polkit-buildsize     "7.0 MB (with tests)">
    1212  <!ENTITY polkit-time          "0.3 SBU (with tests, using parallelism=4)">
    1313]>
     
    134134    <para role="optional">
    135135      <xref linkend="gtk-doc"/>,
    136       <xref linkend="js91"/> (can be used in place of duktape), and
     136      <xref linkend="js102"/> (can be used in place of duktape), and
    137137      <xref linkend="python-dbusmock"/> (for tests)
    138138    </para>
     
    280280      <parameter>-Djs_engine=duktape</parameter>: This switch allows using the
    281281      <xref linkend="duktape"/> JavaScript engine. Replace with
    282       <option>-Djs_engine=mozjs</option> for using the <xref linkend="js91"/>
     282      <option>-Djs_engine=mozjs</option> for using the <xref linkend="js102"/>
    283283      JavaScript engine.
    284284    </para>
  • postlfs/security/shadow.xml

    r41f908a r4f406ea  
    77  <!ENTITY shadow-download-http "https://github.com/shadow-maint/shadow/releases/download/&shadow-version;/shadow-&shadow-version;.tar.xz">
    88  <!ENTITY shadow-download-ftp  " ">
    9   <!ENTITY shadow-md5sum        "710bcc89c39683609aacfef9f08bd854">
     9  <!ENTITY shadow-md5sum        "b1ab01b5462ddcf43588374d57bec123">
    1010  <!ENTITY shadow-size          "1.7 MB">
    11   <!ENTITY shadow-buildsize     "36 MB">
     11  <!ENTITY shadow-buildsize     "45 MB">
    1212  <!ENTITY shadow-time          "0.2 SBU">
    1313]>
     
    139139
    140140sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \
     141    -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\1000@'      \
    141142    -e 's@/var/spool/mail@/var/mail@'                 \
    142143    -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'                \
     
    188189    <para>
    189190      <command>sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e
    190       's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'
    191       -i etc/login.defs</command>: Instead of using
    192       the default 'DES' method, this command modifies the installation to use
    193       the more secure 'SHA512' method of hashing passwords, which also allows
    194       passwords longer than eight characters. It also changes the obsolete
    195       <filename class="directory">/var/spool/mail</filename> location for user
    196       mailboxes that <application>Shadow</application> uses by default to the
    197       <filename class="directory">/var/mail</filename> location. It also
    198       changes the default path to be consistent with that set in LFS.
     191        's@#SHA_CRYPT_..._ROUNDS 5000@&amp;000@' -e
     192        's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'
     193        -i etc/login.defs</command>: Instead of using the default 'DES'
     194      method, this command modifies the installation to use the more secure
     195      'SHA512' method of hashing passwords, which also allows passwords
     196      longer than eight characters. The number of rounds is also increased
     197      to prevent brute force pasword attacks. The command also changes the
     198      obsolete <filename class="directory">/var/spool/mail</filename> location
     199      for user mailboxes that <application>Shadow</application> uses by
     200      default to the <filename class="directory">/var/mail</filename>
     201      location. It also changes the default path to be consistent with that
     202      set in LFS.
    199203    </para>
    200204<!--
     
    554558          <primary sortas="e-etc-security-access.conf">/etc/security/access.conf</primary>
    555559        </indexterm>
    556 
    557 <screen role="root"><userinput>[ -f /etc/login.access ] &amp;&amp; mv -v /etc/login.access{,.NOUSE}</userinput></screen>
     560<!-- to editors: it is a common belief that:
     561        if <condition>; then <command>; fi
     562     is equivalent to:
     563        <condition> && <command>
     564     This is not true in bash; try:
     565        ([ 0 = 1 ] && echo not reachable); echo $? # echoes 1
     566     vs
     567        (if [ 0 = 1 ]; then echo not reachable; fi); echo $? # echoes 0
     568     So in scripts that may call subshells (for example through sudo) and
     569     that need error reporting, the outcome _is_ different. In all
     570     cases, for bash, the "if" form should be preferred.-->
     571<screen role="root"><userinput>if [ -f /etc/login.access ]; then mv -v /etc/login.access{,.NOUSE}; fi</userinput></screen>
    558572      </sect4>
    559573
     
    574588        </indexterm>
    575589
    576 <screen role="root"><userinput>[ -f /etc/limits ] &amp;&amp; mv -v /etc/limits{,.NOUSE}</userinput></screen>
     590<screen role="root"><userinput>if [ -f /etc/limits ]; then mv -v /etc/limits{,.NOUSE}; fi</userinput></screen>
    577591
    578592        <caution>
  • postlfs/security/stunnel.xml

    r41f908a r4f406ea  
    1010  <!-- Following ftp only has later release -->
    1111<!--   "ftp://ftp.stunnel.org/stunnel/stunnel-&stunnel-version;.tar.gz"> -->
    12   <!ENTITY stunnel-md5sum        "8712c71c4def6d4b267f02aaa71485d0">
    13   <!ENTITY stunnel-size          "856 KB">
    14   <!ENTITY stunnel-buildsize     "6.8 MB">
     12  <!ENTITY stunnel-md5sum        "c1ce9f45f0fb146d209f38a000c7efd8">
     13  <!ENTITY stunnel-size          "864 KB">
     14  <!ENTITY stunnel-buildsize     "6.9 MB">
    1515  <!ENTITY stunnel-time          "0.1 SBU">
    1616]>
  • postlfs/security/sudo.xml

    r41f908a r4f406ea  
    77  <!ENTITY sudo-download-http "https://www.sudo.ws/dist/sudo-&sudo-version;.tar.gz">
    88  <!ENTITY sudo-download-ftp  "ftp://ftp.sudo.ws/pub/sudo/sudo-&sudo-version;.tar.gz">
    9   <!ENTITY sudo-md5sum        "82187207e0d037861bc5acb54bc5090f">
     9  <!ENTITY sudo-md5sum        "486ebd8ff62a8671f609d9067b0dd79b">
    1010  <!ENTITY sudo-size          "4.7 MB">
    1111  <!ENTITY sudo-buildsize     "49 MB (add 16 MB for tests)">
Note: See TracChangeset for help on using the changeset viewer.