Changeset 5f2eb36


Ignore:
Timestamp:
10/28/2011 06:57:13 PM (13 years ago)
Author:
Bruce Dubbs <bdubbs@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
9b79af7
Parents:
873faf2
Message:

Update to to vsftpd-2.3.4.
Tweak firewall instructions.
Touchup Python instructions.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@8922 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
5 edited

Legend:

Unmodified
Added
Removed
  • general.ent

    r873faf2 r5f2eb36  
    44-->
    55
    6 <!ENTITY day          "26">                   <!-- Always 2 digits -->
     6<!ENTITY day          "28">                   <!-- Always 2 digits -->
    77<!ENTITY month        "10">                   <!-- Always 2 digits -->
    88<!ENTITY year         "2011">
     
    5656<!-- End LFS versions -->
    5757
    58 <!ENTITY blfs-bootscripts-version     "20111026">
     58<!ENTITY blfs-bootscripts-version     "20111028">
    5959<!ENTITY blfs-bootscripts-download    "&downloads-root;/blfs-bootscripts-&blfs-bootscripts-version;.tar.bz2">
    6060
     
    485485<!ENTITY proftpd-version              "1.3.0">
    486486<!-- samba3 (chapter 18) -->
    487 <!ENTITY vsftpd-version               "2.0.5">
     487<!ENTITY vsftpd-version               "2.3.4">
    488488<!ENTITY xinetd-version               "2.3.14">
    489489
  • general/prog/python.xml

    r873faf2 r5f2eb36  
    66
    77  <!ENTITY python-download-http "http://www.python.org/ftp/python/&Python-version;/Python-&Python-version;.tar.xz">
    8   <!ENTITY python-download-ftp  "&gentoo-ftp-repo;/Python-&Python-version;.tar.bz2">
     8  <!ENTITY python-download-ftp  "&gentoo-ftp-repo;/Python-&Python-version;.tar.xz">
    99  <!ENTITY python-md5sum        "3720ce9460597e49264bbb63b48b946d">
    1010  <!ENTITY python-size          "8.5 MB">
     
    6666
    6767    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    68     <itemizedlist spacing='compact'>
    69       <listitem>
     68    <!--<itemizedlist spacing='compact'>
     69       <listitem>
    7070        <para>Required patch: <ulink
    7171        url="&patch-root;/Python-&Python-version;-bdb_4.8-1.patch"/></para>
    72       </listitem>
    73     </itemizedlist>
     72      </listitem> 
     73    </itemizedlist>-->
    7474
    7575    <itemizedlist spacing='compact'>
  • introduction/welcome/changelog.xml

    r873faf2 r5f2eb36  
    4141
    4242-->
     43
     44    <listitem>
     45      <para>October 26th, 2011</para>
     46      <itemizedlist>
     47        <listitem>
     48          <para>[bdubbs] - Updated to vsftpd-2.3.4.</para>
     49        </listitem>
     50      </itemizedlist>
     51    </listitem>
    4352
    4453    <listitem>
  • postlfs/security/firewalling.xml

    r873faf2 r5f2eb36  
    203203
    204204# Disable ICMP Redirect Acceptance
    205 echo 0 &gt; /proc/sys/net/ipv4/conf/all/accept_redirects
    206 
    207 # Don't send Redirect Messages
     205echo 0 &gt; /proc/sys/net/ipv4/conf/default/accept_redirects
     206
     207# Do not send Redirect Messages
    208208echo 0 &gt; /proc/sys/net/ipv4/conf/all/send_redirects
    209209echo 0 &gt; /proc/sys/net/ipv4/conf/default/send_redirects
     
    331331
    332332# Don¹t send Redirect Messages
    333 echo 0 &gt; /proc/sys/net/ipv4/conf/all/send_redirects
     333echo 0 &gt; /proc/sys/net/ipv4/conf/default/send_redirects
    334334
    335335# Drop Spoofed Packets coming in on an interface where responses
    336336# would result in the reply going out a different interface.
    337 echo 1 &gt; /proc/sys/net/ipv4/conf/all/rp_filter
     337echo 1 &gt; /proc/sys/net/ipv4/conf/default/rp_filter
    338338
    339339# Log packets with impossible addresses.
     
    375375# Log everything for debugging
    376376# (last of all rules, but before policy rules)
    377 iptables -A INPUT   -j LOG --log-prefix "FIREWALL:INPUT  "
    378 iptables -A FORWARD -j LOG --log-prefix "FIREWALL:FORWARD"
     377iptables -A INPUT   -j LOG --log-prefix "FIREWALL:INPUT "
     378iptables -A FORWARD -j LOG --log-prefix "FIREWALL:FORWARD "
    379379iptables -A OUTPUT  -j LOG --log-prefix "FIREWALL:OUTPUT "
    380380
     
    498498
    499499<screen><literal>iptables -I INPUT -p tcp -m state --state INVALID \
    500   -j LOG --log-prefix "FIREWALL:INVALID"
     500  -j LOG --log-prefix "FIREWALL:INVALID "
    501501iptables -I INPUT -p tcp -m state --state INVALID -j DROP</literal></screen>
    502502
  • server/major/vsftpd.xml

    r873faf2 r5f2eb36  
    66
    77  <!ENTITY vsftpd-download-http " ">
    8   <!ENTITY vsftpd-download-ftp  "ftp://vsftpd.beasts.org/users/cevans/vsftpd-&vsftpd-version;.tar.gz">
    9   <!ENTITY vsftpd-md5sum        "146062e8b2f93af43ff6c2c770feea94">
    10   <!ENTITY vsftpd-size          "152 KB">
    11   <!ENTITY vsftpd-buildsize     "1.5 MB">
     8  <!ENTITY vsftpd-download-ftp  "https://security.appspot.com/downloads//vsftpd-&vsftpd-version;.tar.gz">
     9  <!ENTITY vsftpd-md5sum        "2ea5d19978710527bb7444d93b67767a">
     10  <!ENTITY vsftpd-size          "188 KB">
     11  <!ENTITY vsftpd-buildsize     "1.8 MB">
    1212  <!ENTITY vsftpd-time          "less than 0.1 SBU">
    1313]>
     
    3333    secure and very small FTP daemon. This is useful for serving files
    3434    over a network.</para>
     35
     36    &lfs70_checked;
    3537
    3638    <bridgehead renderas="sect3">Package Information</bridgehead>
     
    7880
    7981<screen role="root"><userinput>install -v -d -m 0755 /var/ftp/empty &amp;&amp;
    80 install -v -d -m 0755 /home/ftp &amp;&amp;
    81 groupadd -g 47 vsftpd &amp;&amp;
    82 useradd -d /dev/null -c "vsftpd User" -g vsftpd -s /bin/false \
    83         -u 47 vsftpd &amp;&amp;
    84 groupadd -g 45 ftp &amp;&amp;
    85 useradd -c anonymous_user -d /home/ftp -g ftp -s /bin/false -u 45 ftp</userinput></screen>
     82install -v -d -m 0755 /home/ftp      &amp;&amp;
     83groupadd -g 47 vsftpd                &amp;&amp;
     84groupadd -g 45 ftp                   &amp;&amp;
     85useradd -c "vsftpd User"  -d /dev/null -g vsftpd -s /bin/false -u 47 vsftpd &amp;&amp;
     86useradd -c anonymous_user -d /home/ftp -g ftp    -s /bin/false -u 45 ftp</userinput></screen>
     87
     88    <para>If you did not install the optional <application>libcap2</application> package,
     89    run the following to avoid a build error:</para>
     90
     91<screen><userinput>sed -i -e 's:#define VSF_SYSDEP_HAVE_LIBCAP|//&amp;|' sysdeputil.c</userinput></screen>
    8692
    8793    <para>Build <application>vsftpd</application> as an unprivileged user
     
    96102    commands:</para>
    97103
    98 <screen><userinput>install -v -m 755 vsftpd /usr/sbin/vsftpd &amp;&amp;
    99 install -v -m 644 vsftpd.8 /usr/share/man/man8 &amp;&amp;
     104<screen><userinput>install -v -m 755 vsftpd        /usr/sbin/vsftpd    &amp;&amp;
     105install -v -m 644 vsftpd.8      /usr/share/man/man8 &amp;&amp;
    100106install -v -m 644 vsftpd.conf.5 /usr/share/man/man5 &amp;&amp;
    101 install -v -m 644 vsftpd.conf /etc</userinput></screen>
     107install -v -m 644 vsftpd.conf   /etc</userinput></screen>
    102108
    103109  </sect2>
Note: See TracChangeset for help on using the changeset viewer.