- Timestamp:
- 11/17/2022 07:58:32 AM (18 months ago)
- Branches:
- 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/xf86-video-removal
- Children:
- 11c62aa
- Parents:
- 41f908a (diff), 84f972c1 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the(diff)
links above to see all the changes relative to each parent. - Location:
- postlfs
- Files:
-
- 9 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/filesystems/btrfs-progs.xml
r41f908a r4f406ea 7 7 <!ENTITY btrfs-progs-download-http "&kernel-dl;/linux/kernel/people/kdave/btrfs-progs/btrfs-progs-v&btrfs-progs-version;.tar.xz"> 8 8 <!ENTITY btrfs-progs-download-ftp " "> 9 <!ENTITY btrfs-progs-md5sum " ba2b1521efde9a257c4ad667fc1226b7">9 <!ENTITY btrfs-progs-md5sum "7ad375cc49428fcd86623ac335c4ac7f"> 10 10 <!ENTITY btrfs-progs-size "2.2 MB"> 11 11 <!ENTITY btrfs-progs-buildsize "52 MB (add 8.2 GB for tests)"> -
postlfs/filesystems/lvm2.xml
r41f908a r4f406ea 7 7 <!ENTITY lvm2-download-http "https://sourceware.org/ftp/lvm2/LVM2.&lvm2-version;.tgz"> 8 8 <!ENTITY lvm2-download-ftp "ftp://sourceware.org/pub/lvm2/LVM2.&lvm2-version;.tgz"> 9 <!ENTITY lvm2-md5sum " 6728bfc66ffc554ba9fc9ae47edd53c5">10 <!ENTITY lvm2-size "2. 5MB">11 <!ENTITY lvm2-buildsize " 37 MB (add 19MB for tests; transient files can grow up to around 800 MB in the /tmp directory during tests)">9 <!ENTITY lvm2-md5sum "cf6927fcf772b15d5b00f4db938f496a"> 10 <!ENTITY lvm2-size "2.6 MB"> 11 <!ENTITY lvm2-buildsize "45 MB (add 25 MB for tests; transient files can grow up to around 800 MB in the /tmp directory during tests)"> 12 12 <!-- My build size was 124 MB with tests, but I'll leave this here. -renodr 13 13 The files in /tmp are transient. I monitor /tmp with a loop during … … 175 175 176 176 <screen role="root" 177 remap="test"><userinput>LC_ALL=en_US.UTF-8 make S=lvconvert-repair-replacecheck_local</userinput></screen>178 179 <para> 180 The <command>S=...</command> option allows to skip tests. The181 <command> lvconvert-repair-replace</command> test has been reported182 to hang.177 remap="test"><userinput>LC_ALL=en_US.UTF-8 make check_local</userinput></screen> 178 179 <para> 180 Some tests may hang. In this case they can be skipped by adding 181 <command>S=<testname></command> to the <command>make</command> 182 command. 183 183 Other targets are available and can be listed with 184 184 <command>make -C test help</command>. The test timings are very dependent … … 206 206 Results for LVM2.2.03.16: 207 207 ### 395 tests: 241 passed, 145 skipped, 0 timed out, 1 warned, 8 failed 208 209 Results for LVM2.2.03.17: 210 ### 403 tests: 333 passed, 61 skipped, 0 timed out, 3 warned, 6 failed 208 211 --> 209 212 … … 250 253 251 254 <screen role="root" revision="sysv"><userinput>make install 252 rm /usr/lib/udev/rules.d/69-dm-lvm.rules</userinput></screen>255 rm -fv /usr/lib/udev/rules.d/69-dm-lvm.rules</userinput></screen> 253 256 254 257 <screen role="root" revision="systemd"><userinput>make install -
postlfs/filesystems/ntfs-3g.xml
r41f908a r4f406ea 8 8 "https://tuxera.com/opensource/ntfs-3g_ntfsprogs-&ntfs-3g-version;.tgz"> 9 9 <!ENTITY ntfs-3g-download-ftp " "> 10 <!ENTITY ntfs-3g-md5sum " 18a97a9a9e08f02f46fe447f611f16cb">10 <!ENTITY ntfs-3g-md5sum "a038af61be7584b79f8922ff11244090"> 11 11 <!ENTITY ntfs-3g-size "1.3 MB"> 12 12 <!ENTITY ntfs-3g-buildsize "22 MB"> … … 176 176 NTFS filesystems, instead of ntfs-3g (see the note at the start of 177 177 this page). However, if you want to use ntfs-3g to mount the NTFS 178 filesystems anyway, create a symlink for <command>mount</command>178 filesystems anyway, create a symlink for the <command>mount</command> 179 179 command: 180 180 </para> -
postlfs/security/libpwquality.xml
r41f908a r4f406ea 169 169 # use sha512 hash for encryption, use shadow, and use the 170 170 # authentication token (chosen password) set by pam_pwquality 171 # above (or any previous modules) 172 password required pam_unix.so sha512 shadow use_authtok 171 # above (or any previous modules). Also set the number of crypt rounds 172 # to the value used in shadow. 173 password required pam_unix.so sha512 shadow use_authtok \ 174 rounds=5000000 173 175 174 176 # End /etc/pam.d/system-password</literal> -
postlfs/security/linux-pam.xml
r41f908a r4f406ea 348 348 # use sha512 hash for encryption, use shadow, and try to use any previously 349 349 # defined authentication token (chosen password) set by any prior module 350 password required pam_unix.so sha512 shadow try_first_pass 350 # Use the same number of rounds as shadow. 351 password required pam_unix.so sha512 shadow try_first_pass \ 352 rounds=5000000 351 353 352 354 # End /etc/pam.d/system-password</literal> … … 368 370 is built in, and the PAM module is built. 369 371 --> 370 <!-- 372 <!-- WARNING: If for any reason the instructions below are reinstated be 373 careful with the number of rounds, which should match the one in shadow. 371 374 <para> 372 375 The remaining generic file depends on whether <xref -
postlfs/security/polkit.xml
r41f908a r4f406ea 7 7 <!ENTITY polkit-download-http "https://gitlab.freedesktop.org/polkit/polkit/-/archive/&polkit-version;/polkit-&polkit-version;.tar.gz"> 8 8 <!ENTITY polkit-download-ftp " "> 9 <!ENTITY polkit-md5sum " fa707b52578bc668ad834425090fc71e">9 <!ENTITY polkit-md5sum "bbe3e745fc5bc1a41f1b5044f09a0f26"> 10 10 <!ENTITY polkit-size "728 KB"> 11 <!ENTITY polkit-buildsize " 8.8MB (with tests)">11 <!ENTITY polkit-buildsize "7.0 MB (with tests)"> 12 12 <!ENTITY polkit-time "0.3 SBU (with tests, using parallelism=4)"> 13 13 ]> … … 134 134 <para role="optional"> 135 135 <xref linkend="gtk-doc"/>, 136 <xref linkend="js 91"/> (can be used in place of duktape), and136 <xref linkend="js102"/> (can be used in place of duktape), and 137 137 <xref linkend="python-dbusmock"/> (for tests) 138 138 </para> … … 280 280 <parameter>-Djs_engine=duktape</parameter>: This switch allows using the 281 281 <xref linkend="duktape"/> JavaScript engine. Replace with 282 <option>-Djs_engine=mozjs</option> for using the <xref linkend="js 91"/>282 <option>-Djs_engine=mozjs</option> for using the <xref linkend="js102"/> 283 283 JavaScript engine. 284 284 </para> -
postlfs/security/shadow.xml
r41f908a r4f406ea 7 7 <!ENTITY shadow-download-http "https://github.com/shadow-maint/shadow/releases/download/&shadow-version;/shadow-&shadow-version;.tar.xz"> 8 8 <!ENTITY shadow-download-ftp " "> 9 <!ENTITY shadow-md5sum " 710bcc89c39683609aacfef9f08bd854">9 <!ENTITY shadow-md5sum "b1ab01b5462ddcf43588374d57bec123"> 10 10 <!ENTITY shadow-size "1.7 MB"> 11 <!ENTITY shadow-buildsize " 36MB">11 <!ENTITY shadow-buildsize "45 MB"> 12 12 <!ENTITY shadow-time "0.2 SBU"> 13 13 ]> … … 139 139 140 140 sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \ 141 -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\1000@' \ 141 142 -e 's@/var/spool/mail@/var/mail@' \ 142 143 -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \ … … 188 189 <para> 189 190 <command>sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e 190 's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' 191 -i etc/login.defs</command>: Instead of using 192 the default 'DES' method, this command modifies the installation to use 193 the more secure 'SHA512' method of hashing passwords, which also allows 194 passwords longer than eight characters. It also changes the obsolete 195 <filename class="directory">/var/spool/mail</filename> location for user 196 mailboxes that <application>Shadow</application> uses by default to the 197 <filename class="directory">/var/mail</filename> location. It also 198 changes the default path to be consistent with that set in LFS. 191 's@#SHA_CRYPT_..._ROUNDS 5000@&000@' -e 192 's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' 193 -i etc/login.defs</command>: Instead of using the default 'DES' 194 method, this command modifies the installation to use the more secure 195 'SHA512' method of hashing passwords, which also allows passwords 196 longer than eight characters. The number of rounds is also increased 197 to prevent brute force pasword attacks. The command also changes the 198 obsolete <filename class="directory">/var/spool/mail</filename> location 199 for user mailboxes that <application>Shadow</application> uses by 200 default to the <filename class="directory">/var/mail</filename> 201 location. It also changes the default path to be consistent with that 202 set in LFS. 199 203 </para> 200 204 <!-- … … 554 558 <primary sortas="e-etc-security-access.conf">/etc/security/access.conf</primary> 555 559 </indexterm> 556 557 <screen role="root"><userinput>[ -f /etc/login.access ] && mv -v /etc/login.access{,.NOUSE}</userinput></screen> 560 <!-- to editors: it is a common belief that: 561 if <condition>; then <command>; fi 562 is equivalent to: 563 <condition> && <command> 564 This is not true in bash; try: 565 ([ 0 = 1 ] && echo not reachable); echo $? # echoes 1 566 vs 567 (if [ 0 = 1 ]; then echo not reachable; fi); echo $? # echoes 0 568 So in scripts that may call subshells (for example through sudo) and 569 that need error reporting, the outcome _is_ different. In all 570 cases, for bash, the "if" form should be preferred.--> 571 <screen role="root"><userinput>if [ -f /etc/login.access ]; then mv -v /etc/login.access{,.NOUSE}; fi</userinput></screen> 558 572 </sect4> 559 573 … … 574 588 </indexterm> 575 589 576 <screen role="root"><userinput> [ -f /etc/limits ] && mv -v /etc/limits{,.NOUSE}</userinput></screen>590 <screen role="root"><userinput>if [ -f /etc/limits ]; then mv -v /etc/limits{,.NOUSE}; fi</userinput></screen> 577 591 578 592 <caution> -
postlfs/security/stunnel.xml
r41f908a r4f406ea 10 10 <!-- Following ftp only has later release --> 11 11 <!-- "ftp://ftp.stunnel.org/stunnel/stunnel-&stunnel-version;.tar.gz"> --> 12 <!ENTITY stunnel-md5sum " 8712c71c4def6d4b267f02aaa71485d0">13 <!ENTITY stunnel-size "8 56KB">14 <!ENTITY stunnel-buildsize "6. 8MB">12 <!ENTITY stunnel-md5sum "c1ce9f45f0fb146d209f38a000c7efd8"> 13 <!ENTITY stunnel-size "864 KB"> 14 <!ENTITY stunnel-buildsize "6.9 MB"> 15 15 <!ENTITY stunnel-time "0.1 SBU"> 16 16 ]> -
postlfs/security/sudo.xml
r41f908a r4f406ea 7 7 <!ENTITY sudo-download-http "https://www.sudo.ws/dist/sudo-&sudo-version;.tar.gz"> 8 8 <!ENTITY sudo-download-ftp "ftp://ftp.sudo.ws/pub/sudo/sudo-&sudo-version;.tar.gz"> 9 <!ENTITY sudo-md5sum " 82187207e0d037861bc5acb54bc5090f">9 <!ENTITY sudo-md5sum "486ebd8ff62a8671f609d9067b0dd79b"> 10 10 <!ENTITY sudo-size "4.7 MB"> 11 11 <!ENTITY sudo-buildsize "49 MB (add 16 MB for tests)">
Note:
See TracChangeset
for help on using the changeset viewer.