Changeset 5443006d


Ignore:
Timestamp:
03/11/2012 12:39:56 PM (12 years ago)
Author:
Krejzi <krejzi@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
14aeac4
Parents:
b7a53c2
Message:

shadow 4.1.5

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@9670 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
3 edited

Legend:

Unmodified
Added
Removed

  • general.ent

    rb7a53c2 r5443006d  
    44-->
    55
    6 <!ENTITY day          "10">                   <!-- Always 2 digits -->
     6<!ENTITY day          "11">                   <!-- Always 2 digits -->
    77<!ENTITY month        "03">                   <!-- Always 2 digits -->
    88<!ENTITY year         "2012">
    … …  
    5656<!ENTITY lfs-m4-version               "1.4.14">
    5757<!ENTITY lfs-perl-version             "5.12.1">
    58 <!ENTITY lfs-shadow-version           "4.1.4.2">
     58<!ENTITY lfs-shadow-version           "4.1.5">
    5959<!ENTITY lfs-vim-version              "7.3">
    6060<!-- End LFS versions -->
    … …  
    137137<!ENTITY polkit-version               "0.104">
    138138<!ENTITY polkit-gnome-version         "0.104">
    139 <!ENTITY shadow-version               "4.1.4.3">
     139<!ENTITY shadow-version               "4.1.5">
    140140<!ENTITY stunnel-version              "4.52">
    141141<!ENTITY sudo-version                 "1.8.2">

  • introduction/welcome/changelog.xml

    rb7a53c2 r5443006d  
    4343-->
    4444    <listitem>
     45      <para>March 11th, 2012</para>
     46      <itemizedlist>
     47        <listitem>
     48          <para>[krejzi] - shadow 4.1.5.</para>
     49        </listitem>
     50      </itemizedlist>
     51    </listitem>
     52
     53    <listitem>
    4554      <para>March 10th, 2012</para>
    4655      <itemizedlist>

  • postlfs/security/shadow.xml

    rb7a53c2 r5443006d  
    77  <!ENTITY shadow-download-http "http://pkg-shadow.alioth.debian.org/releases/shadow-&shadow-version;.tar.bz2 ">
    88  <!ENTITY shadow-download-ftp  " ">
    9   <!ENTITY shadow-md5sum        "b8608d8294ac88974f27b20f991c0e79">
    10   <!ENTITY shadow-size          "1.8 MB">
    11   <!ENTITY shadow-buildsize     "30 MB">
     9  <!ENTITY shadow-md5sum        "d5f7a588fadb79faeb4b08b1eee82e9a">
     10  <!ENTITY shadow-size          "2.1 MB">
     11  <!ENTITY shadow-buildsize     "35 MB">
    1212  <!ENTITY shadow-time          "0.3 SBU">
    1313]>
    … …  
    4747        <para>Download (HTTP): <ulink url="&shadow-download-http;"/></para>
    4848      </listitem>
    49       <listitem>
     49<!--      <listitem>
    5050        <para>Download (FTP): <ulink url="&shadow-download-ftp;"/></para>
    51       </listitem>
     51      </listitem> -->
    5252      <listitem>
    5353        <para>Download MD5 sum: &shadow-md5sum;</para>
    … …  
    6464    </itemizedlist>
    6565
    66     <!-- <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     66    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    6767    <itemizedlist spacing='compact'>
    6868      <listitem>
    6969        <para>Required patch: <ulink
    70         url="&patch-root;/shadow-&shadow-version;-useradd_fix-2.patch"/></para>
     70        url="http://www.&lfs-domainname;/patches/lfs/development/shadow-&shadow-version;-nscd-1.patch"/>
     71        </para>
    7172      </listitem>
    72     </itemizedlist> -->
     73    </itemizedlist>
    7374
    7475    <bridgehead renderas="sect3">Shadow Dependencies</bridgehead>
    7576
    7677    <bridgehead renderas="sect4">Required</bridgehead>
    77     <para role="required"><xref linkend="linux-pam"/> and/or
     78    <para role="required"><xref linkend="linux-pam"/> or
    7879    <xref linkend="cracklib"/></para>
    7980
    … …  
    107108    commands:</para>
    108109
    109 <screen><userinput>sed -i 's/groups$(EXEEXT) //' src/Makefile.in                   &amp;&amp;
     110<screen><userinput>sed -i 's/groups$(EXEEXT) //' src/Makefile.in &amp;&amp;
    110111find man -name Makefile.in -exec sed -i 's/groups\.1 / /' {} \; &amp;&amp;
    111 sed -i -e 's/ ko//' -e 's/ zh_CN zh_TW//' man/Makefile.in       &amp;&amp;
     112sed -i -e 's/ ko//' -e 's/ zh_CN zh_TW//' man/Makefile.in &amp;&amp;
    112113
    113114sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \
    114        -e 's@/var/spool/mail@/var/mail@' etc/login.defs         &amp;&amp;
    115 
    116 ./configure --sysconfdir=/etc                                   &amp;&amp;
     115       -e 's@/var/spool/mail@/var/mail@' etc/login.defs &amp;&amp;
     116
     117sed -i -e 's@PATH=/sbin:/bin:/usr/sbin:/usr/bin@&amp;:/usr/local/sbin:/usr/local/bin@' \
     118       -e 's@PATH=/bin:/usr/bin@&amp;:/usr/local/bin@' etc/login.defs &amp;&amp;
     119
     120patch -Np1 -i ../shadow-&shadow-version;-nscd-1.patch &amp;&amp;
     121
     122./configure --prefix=/usr --sysconfdir=/etc \
     123            --without-acl --without-attr &amp;&amp;
    117124make</userinput></screen>
    118125
    … …  
    144151    <application>Man-DB</application> cannot format them properly.</para>
    145152
    146     <para><command>sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512'
     153    <para><command>sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@'
    147154    -e 's@/var/spool/mail@/var/mail@' etc/login.defs</command>:
    148     Instead of using the default 'crypt' method, this command modifies the
     155    Instead of using the default 'DES' method, this command modifies the
    149156    installation to use the more secure 'SHA512' method of hashing passwords,
    150157    which also allows passwords longer than eight characters. It also changes
    … …  
    153160    default to the <filename class="directory">/var/mail</filename>
    154161    location.</para>
     162
     163    <para><command>sed -i -e
     164    's@PATH=/sbin:/bin:/usr/sbin:/usr/bin@&amp;:/usr/local/sbin:/usr/local/bin@'
     165    -e 's@PATH=/bin:/usr/bin@&amp;:/usr/local/bin@' etc/login.defs</command>:
     166    This sed expands PATH to <filename class="directory">/usr/local/bin</filename>
     167    for normal and <systemitem class="username">root</systemitem> user and to
     168    <filename class="directory">/usr/local/sbin</filename> for
     169    <systemitem class="username">root</systemitem> user only.</para>
     170
     171    <para><command>--without-acl</command>: Disables linking with <xref linkend="acl"/>
     172    since <application>Shadow</application> fails to compile if it is present.</para>
     173
     174    <para><command>--without-attr</command>: Disables linking with <xref linkend="attr"/>
     175    since <application>Shadow</application> fails to compile if it is present.</para>
    155176
    156177    <para><command>mv -v /usr/bin/passwd /bin</command>: The
    … …  
    228249      <application>Shadow</application>, <application>Linux-PAM</application>
    229250      and <application>CrackLib</application>, you can visit the following
    230       links:</para>
     251      link:</para>
    231252
    232253      <itemizedlist spacing="compact">
    233       <listitem>
    234         <para><ulink
    235         url="http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-pam_cracklib.html"/></para>
    236       </listitem>
    237254      <listitem>
    238255        <para><ulink
    … …  
    258275
    259276<screen role="root"><userinput>install -v -m644 /etc/login.defs /etc/login.defs.orig &amp;&amp;
    260 for FUNCTION in LASTLOG_ENAB MAIL_CHECK_ENAB \
    261                 PORTTIME_CHECKS_ENAB CONSOLE \
    262                 MOTD_FILE NOLOGINS_FILE PASS_MIN_LEN \
    263                 SU_WHEEL_ONLY MD5_CRYPT_ENAB \
    264                 CONSOLE_GROUPS ENVIRON_FILE \
    265                 ULIMIT ENV_TZ ENV_HZ ENV_SUPATH \
    266                 ENV_PATH QMAIL_DIR MAIL_DIR MAIL_FILE \
    267                 CHFN_AUTH FAILLOG_ENAB QUOTAS_ENAB FTMP_FILE \
    268                 OBSCURE_CHECKS_ENAB CRACKLIB_DICTPATH \
    269                 PASS_CHANGE_TRIES PASS_ALWAYS_WARN ISSUE_FILE
     277for FUNCTION in FAIL_DELAY LASTLOG_ENAB \
     278                MAIL_CHECK_ENAB \
     279                OBSCURE_CHECKS_ENAB \
     280                PORTTIME_CHECKS_ENAB \
     281                CONSOLE MOTD_FILE \
     282                NOLOGINS_FILE ENV_HZ \
     283                SU_WHEEL_ONLY \
     284                CRACKLIB_DICTPATH \
     285                SYS_UID_MIN SYS_UID_MAX \
     286                SYS_GID_MIN SYS_GID_MAX \
     287                PASS_CHANGE_TRIES \
     288                PASS_ALWAYS_WARN \
     289                CHFN_AUTH ENVIRON_FILE
    270290do
    271291    sed -i "s/^$FUNCTION/# &amp;/" /etc/login.defs
    … …  
    420440#session   optional    pam_mail.so      standard quiet
    421441
    422 # Use xauth keys (if available)
    423 session   optional    pam_xauth.so
    424 
    425442# include the default session and password settings
    426443session   include     system-session
    … …  
    457474# include the default account settings
    458475account   include     system-account
    459 
    460 # Use xauth keys (if available)
    461 session   optional    pam_xauth.so
    462476
    463477# Set default environment variables for the service user
    … …  
    596610      </sect4>
    597611
    598       <sect4 id="pam-env">
    599         <title>Configuring Default Environment</title>
    600 
    601           <para>During previous configuration, several items were removed from
    602           <filename>/etc/login.defs</filename>.  Some of these items are now
    603           controlled by the <filename class='libraryfile'>pam_env.so</filename>
    604           module and the <filename>/etc/security/pam_env.conf</filename>
    605           configuration file.  In particular, the default path has been
    606           changed.  To recover your default path, execute the following
    607           commands:</para>
    608 
    609 <screen role="root"><userinput>ENV_PATH=`grep '^ENV_PATH' /etc/login.defs.orig | \
    610     awk '{ print $2 }' | sed 's/PATH=//'` &amp;&amp;
    611 echo 'PATH        DEFAULT='`echo "${ENV_PATH}"`\
    612 '        OVERRIDE=${PATH}' \
    613     >> /etc/security/pam_env.conf &amp;&amp;
    614 unset ENV_PATH</userinput></screen>
    615 
    616           <note>
    617             <para>The ENV_SUPATH option used to modify root's default path
    618             does not work with PAM. You have to set the path in root's login
    619             scripts instead.
    620             </para>
    621           </note>
    622 
    623       </sect4>
    624 
    625612    </sect3>
    626613
Note: See TracChangeset for help on using the changeset viewer.