- Timestamp:
- 12/31/2008 06:15:54 AM (16 years ago)
- Branches:
- 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 12.2, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gimp3, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/for-12.3, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/spidermonkey128, xry111/test-20220226, xry111/xf86-video-removal
- Children:
- 12974d7
- Parents:
- 6ab3e99f
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
basicnet/netutils/traceroute.xml
r6ab3e99f r5074c6ba 5 5 %general-entities; 6 6 7 <!-- Inserted as a reminder to do this. The mention of a test suite 8 is usually right before the root user installation commands. Please 9 delete these 12 (including one blank) lines after you are done.--> 10 11 <!-- Use one of the two mentions below about a test suite, 12 delete the line that is not applicable. Of course, if the 13 test suite uses syntax other than "make check", revise the 14 line to reflect the actual syntax to run the test suite --> 15 16 <!-- <para>This package does not come with a test suite.</para> --> 17 <!-- <para>To test the results, issue: <command>make check</command>.</para> --> 18 19 <!ENTITY traceroute-download-http "http://gd.tuwien.ac.at/platform/sun/packages/solaris/freeware/SOURCES/traceroute-&traceroute-version;.tar.gz"> 20 <!ENTITY traceroute-download-ftp "ftp://ftp.ee.lbl.gov/traceroute-&traceroute-version;.tar.gz"> 21 <!ENTITY traceroute-md5sum "964d599ef696efccdeebe7721cd4828d"> 22 <!ENTITY traceroute-size "74 KB"> 23 <!ENTITY traceroute-buildsize "540 KB"> 24 <!ENTITY traceroute-time "0.01 SBU"> 7 <!ENTITY traceroute-download-http "&sourceforge-repo;/traceroute/traceroute-2.0.12.tar.gz"> 8 <!ENTITY traceroute-download-ftp " "> 9 <!ENTITY traceroute-md5sum "2262a9d30ae85f12b759a38ef827f8f7"> 10 <!ENTITY traceroute-size "68 KB"> 11 <!ENTITY traceroute-buildsize "548 KB"> 12 <!ENTITY traceroute-time "Less than 0.1 SBU"> 25 13 ]> 26 14 … … 81 69 commands:</para> 82 70 83 <screen><userinput> sed -i -e 's/-o bin/-o root/' Makefile.in &&84 ./configure --prefix=/usr && 85 make</userinput></screen>71 <screen><userinput>make</userinput></screen> 72 73 <para>This package does not come with a test suite.</para> 86 74 87 75 <para>Now, as the <systemitem class="username">root</systemitem> user:</para> 88 76 89 <screen role='root'><userinput>make install && 90 make install-man</userinput></screen> 91 92 </sect2> 93 94 <sect2 role="commands"> 95 <title>Command Explanations</title> 96 97 <para><command>sed 's/-o bin/-o root/' Makefile.in</command>: 98 Adjusts the <filename>Makefile</filename> so that the program is installed 99 with user <systemitem class='username'>root</systemitem> owning the files 100 instead of user <systemitem class='username'>bin</systemitem> 101 (which doesn't exist on a default LFS system).</para> 102 103 <para><command>make install</command>: Installs <command>traceroute</command> 104 with SUID set to <systemitem class="username">root</systemitem> in the 105 <filename class='directory'>/usr/sbin</filename> directory. This makes it 106 possible for all users to execute <command>traceroute</command>. For absolute 107 security, turn off the SUID bit in <command>traceroute</command>'s file permissions 108 with the command:</para> 109 110 <screen role='root'><userinput>chmod -v 0755 /usr/sbin/traceroute</userinput></screen> 111 112 <para>The risk is that if a security problem such as a buffer overflow was 113 ever found in the <application>Traceroute</application> code, a regular user 114 on your system could gain <systemitem class="username">root</systemitem> 115 access if the program is SUID <systemitem class="username">root</systemitem>. 116 Of course, removing the SUID permission also makes it impossible for users other 117 than <systemitem class="username">root</systemitem> to utilize 118 <command>traceroute</command>, so decide what's right for 119 your individual situation.</para> 120 121 <para>The goal of BLFS is to be completely FHS compliant, so if you do leave the 122 <command>traceroute</command> binary SUID <systemitem 123 class="username">root</systemitem>, then you should move 124 <filename>traceroute</filename> to <filename class='directory'>/usr/bin</filename> 125 with the following command:</para> 126 127 <screen role='root'><userinput>mv -v /usr/sbin/traceroute /usr/bin</userinput></screen> 128 129 <para>This ensures that the binary is in the path for non-root users.</para> 130 77 <screen role='root'><userinput>make prefix=/usr install</userinput></screen> 131 78 </sect2> 132 79
Note:
See TracChangeset
for help on using the changeset viewer.