Changeset 74169a7c

Timestamp:

11/23/2005 05:30:34 PM (18 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

14e13a0c

Parents:

cf341b4

Message:

Added security update and a switch to sudo

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5299 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (1 diff)
• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/sudo.xml (modified) (3 diffs)

general.ent

@@ -1 @@
-<!ENTITY day          "22">
+<!ENTITY day          "23">
 <!ENTITY month        "11">
 <!ENTITY year         "2005">
 <!ENTITY version      "svn-&year;&month;&day;">
-<!ENTITY releasedate  "November &day;nd, &year;">
+<!ENTITY releasedate  "November &day;rd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

introduction/welcome/changelog.xml

@@ -41 +41 @@
 
 -->
+    <listitem>
+      <para>November 23rd, 2005</para>
+      <itemizedlist>
+        <listitem>
+          <para>[bdubbs] - Added sed to sudo to correct a security issue
+          (Archaic).  Also added --enable-shell-sets-home switch 
+          (Gerard).</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
 
     <listitem>

postlfs/security/sudo.xml

@@ -79 +79 @@
     the following commands:</para>
 
-<screen><userinput>./configure --prefix=/usr --libexecdir=/usr/lib \
-    --enable-noargs-shell --with-ignore-dot --with-all-insults &amp;&amp;
+<screen><userinput>sed -i -e 's/CDPATH",/&amp;\n    "SHELLOPTS",\n    "PS4",/' env.c
+./configure --prefix=/usr --libexecdir=/usr/lib \
+    --enable-noargs-shell --with-ignore-dot --with-all-insults \
+    --enable-shell-sets-home &amp;&amp;
 make</userinput></screen>
 
@@ -92 +94 @@
     <title>Command Explanations</title>
 
+    <para><command>sed -i -e 's/CDPATH",/&amp;\n    "SHELLOPTS",\n    "PS4",/'
+    env.c</command>:  This command adds two envronment variables to a list of
+    variables to be excluded from the target environment.  It solves a
+    security problem.</para>
+
     <para><option>--enable-noargs-shell</option>: This switch allows sudo to
     run a shell if involked with no arguments.</para>
@@ -100 +107 @@
     <para><option>--with-all-insults</option>: This switch includes all the
     sudo insult sets.</para>
+
+    <para><option>--enable-shell-sets-home</option>: This switch sets HOME to
+    the target user in shell mode.</para>
 
     <note><para>There are many options to <application>sudo</application>'s