- Timestamp:
- 09/06/2021 05:42:49 PM (3 years ago)
- Branches:
- 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
- Children:
- fef4473
- Parents:
- 7999839
- Location:
- postlfs
- Files:
-
- 39 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/config/devices.xml
r7999839 r8558044 103 103 system. You can either write separate udev rules for all needed USB 104 104 devices yourself, or use the default catch-all "usb" group, members 105 of which can send arbitrary commands to all USB devices. 105 of which can send arbitrary commands to all USB devices. 106 106 </para> 107 107 … … 222 222 223 223 <para> 224 If the initial boot process does not set up the 224 If the initial boot process does not set up the 225 225 <systemitem>/dev/dvd</systemitem> device properly, it can 226 226 be installed using the following modification to the default udev rules. -
postlfs/config/firmware.xml
r7999839 r8558044 173 173 Haswell-E/EP, Broadwell-Y 174 174 </ulink>.) Without this update glibc can do the wrong thing in uncommon 175 situations. 175 situations. 176 176 </para> 177 177 … … 463 463 <para> 464 464 If you are already booting with an initrd (see <xref 465 linkend="initramfs"/>), you should run <command>mkinitramfs</command> 465 linkend="initramfs"/>), you should run <command>mkinitramfs</command> 466 466 again after putting the appropriate blob or container into <filename 467 467 class="directory">/lib/firmware</filename> as explained above. … … 597 597 598 598 <para> 599 Some Nvidia graphics chips need firmware updates to take advantage 599 Some Nvidia graphics chips need firmware updates to take advantage 600 600 of all the card's capability. These are generally the GeForce 8, 9, 601 601 9300, and 200-900 series chips. For more exact information, see … … 603 603 "https://nouveau.freedesktop.org/wiki/VideoAcceleration/#firmware"/>. 604 604 </para> 605 605 606 606 <para> 607 607 First, the kernel Nvidia driver must be activated: … … 621 621 wget http://us.download.nvidia.com/XFree86/Linux-x86/325.15/NVIDIA-Linux-x86-325.15.run 622 622 sh NVIDIA-Linux-x86-325.15.run --extract-only 623 python extract_firmware.py 623 python extract_firmware.py 624 624 mkdir -p /lib/firmware/nouveau 625 625 cp -d nv* vuc-* /lib/firmware/nouveau/</userinput></screen> -
postlfs/config/profile.xml
r7999839 r8558044 32 32 <filename>~/.bash_profile</filename> (or <filename>~/.profile</filename> 33 33 if called as <command>/bin/sh</command>) upon startup. 34 </para> 34 </para> 35 35 36 36 <para> -
postlfs/editors/emacs.xml
r7999839 r8558044 6 6 7 7 <!ENTITY emacs-download-http "&gnu-http;/emacs/emacs-&emacs-version;.tar.xz"> 8 <!ENTITY emacs-download-ftp "&gnu-ftp;/emacs/emacs-&emacs-version;.tar.xz"> 9 <!ENTITY emacs-download-ftp " "> 8 <!ENTITY emacs-download-ftp "&gnu-ftp;/emacs/emacs-&emacs-version;.tar.xz"> 9 <!ENTITY emacs-download-ftp " "> 10 10 <!ENTITY emacs-md5sum "4c3d9ff35b2ab2fe518dc7eb3951e128"> 11 11 <!ENTITY emacs-size "43 MB"> … … 120 120 121 121 <para> 122 First, work around a portability bug in glibc 2.34, 122 First, work around a portability bug in glibc 2.34, 123 123 which no longer defines SIGSTKSZ. 124 124 </para> … … 162 162 <title>Command Explanations</title> 163 163 164 <!-- With 27.2, it writes scores to ~/.emacs.d/games 164 <!-- With 27.2, it writes scores to ~/.emacs.d/games 165 165 <para> 166 166 <parameter>- -localstatedir=/var</parameter>: Create game score files … … 177 177 <para> 178 178 <option>--with-gif=no</option>: Use this if you have not installed 179 <xref linkend="giflib"/> or 179 <xref linkend="giflib"/> or 180 180 <ulink url="http://directory.fsf.org/wiki/Libungif">libungif</ulink>. 181 181 </para> -
postlfs/editors/gedit.xml
r7999839 r8558044 162 162 <seglistitem> 163 163 <seg> 164 gedit 164 gedit 165 165 </seg> 166 166 <seg> -
postlfs/editors/joe.xml
r7999839 r8558044 101 101 install -vm 755 joe/util/{stringify,termidx,uniproc} /usr/bin</userinput></screen> 102 102 103 <!-- These do not appear to be useful. There are txt files in 103 <!-- These do not appear to be useful. There are txt files in 104 104 joe/util/unicode*/ bit I cannot we where they are used. 105 105 install -vdm755 /usr/share/doc/joe-&joe-version;/util && … … 174 174 </seg> 175 175 <seg> 176 /etc/joe, 176 /etc/joe, 177 177 /usr/share/joe, and 178 178 /usr/share/doc/joe-&joe-version; … … 288 288 unicode database file unicat.c from Blocks.txt CaseFolding.txt 289 289 EastAsianWidth.txt and UnicodeData.txt (find them at 290 /usr/share/doc/joe-&joe-version;/util; see 290 /usr/share/doc/joe-&joe-version;/util; see 291 291 usr/share/doc/joe-&joe-version;/util/README) 292 292 </para> -
postlfs/editors/mousepad.xml
r7999839 r8558044 117 117 118 118 <para> 119 <parameter>--enable-keyfile-settings</parameter>: Use the GSettings 119 <parameter>--enable-keyfile-settings</parameter>: Use the GSettings 120 120 keyfile backend rather than the default <xref linkend='dconf'/>. 121 121 </para> -
postlfs/editors/nano.xml
r7999839 r8558044 151 151 set nohelp 152 152 set positionlog 153 set quickblank 153 set quickblank 154 154 set regexp 155 155 set suspend</literal></screen> -
postlfs/editors/vim.xml
r7999839 r8558044 49 49 <note> 50 50 <para> 51 The version of vim changes daily. The get the latest 51 The version of vim changes daily. The get the latest 52 52 version, go to <ulink url="https://github.com/vim/vim/releases"> 53 53 https://github.com/vim/vim/releases</ulink>. … … 200 200 </para> 201 201 202 <!-- When updating, be sure to change the vim-majmin entity for the 202 <!-- When updating, be sure to change the vim-majmin entity for the 203 203 proper 'vimxx' unpacked directory --> 204 204 -
postlfs/filesystems/aboutlvm.xml
r7999839 r8558044 35 35 36 36 <para> 37 Management of disks with lvm is accomplished using the following concepts: 37 Management of disks with lvm is accomplished using the following concepts: 38 38 </para> 39 39 -
postlfs/filesystems/btrfs-progs.xml
r7999839 r8558044 74 74 <bridgehead renderas="sect4">Required</bridgehead> 75 75 <para role="required"> 76 <xref linkend="lzo"/> 76 <xref linkend="lzo"/> 77 77 </para> 78 78 … … 150 150 <para> 151 151 To test the results, issue (as the <systemitem 152 class="username">root</systemitem> user): 152 class="username">root</systemitem> user): 153 153 </para> 154 154 … … 169 169 170 170 <screen remap="test"><userinput>mv tests/fsck-tests/012-leaf-corruption/test.sh{,.broken}</userinput></screen> 171 Substitute your test failure with the one above. 171 Substitute your test failure with the one above. 172 172 <para> 173 173 To test the results, run (as the … … 216 216 217 217 <para> 218 <command>ln -s ... /usr/lib/libbtrfs.so</command>: Creates a 218 <command>ln -s ... /usr/lib/libbtrfs.so</command>: Creates a 219 219 symbolic link in the directory where it is expected. 220 220 </para> -
postlfs/filesystems/fuse3.xml
r7999839 r8558044 127 127 128 128 <para> 129 The API documentation is included in the package, but 130 if you have <xref linkend="doxygen"/> installed and wish to rebuild 129 The API documentation is included in the package, but 130 if you have <xref linkend="doxygen"/> installed and wish to rebuild 131 131 it, issue: 132 </para> 132 </para> 133 133 134 134 <screen remap="doc"><userinput>pushd .. && -
postlfs/filesystems/gptfdisk.xml
r7999839 r8558044 107 107 The <application>gptfdisk</application> package comes with a 108 108 rudimentary <filename>Makefile</filename>. First we update it 109 to provide a simple build and install interface and fix the 109 to provide a simple build and install interface and fix the 110 110 location of a header file. 111 111 Install <application>gptfdisk</application> by running the following -
postlfs/filesystems/lvm2.xml
r7999839 r8558044 204 204 <para> 205 205 The tests do not implement the <quote>expected fail</quote> possibility, 206 and a small number of test failures is expected by upstream. 207 <!-- 1 -->More failures may happen because some kernel options are missing. 208 For example, the lack of the <emphasis>dm-delay</emphasis> device 209 mapper target explains some failures. 210 <!-- 2 -->Some tests may fail if there is insufficient free space available 211 in the partition with the /tmp directory. At least one test fails if 16 TB 206 and a small number of test failures is expected by upstream. 207 <!-- 1 -->More failures may happen because some kernel options are missing. 208 For example, the lack of the <emphasis>dm-delay</emphasis> device 209 mapper target explains some failures. 210 <!-- 2 -->Some tests may fail if there is insufficient free space available 211 in the partition with the /tmp directory. At least one test fails if 16 TB 212 212 is not available. 213 213 <!-- 3 -->Some tests are flagged <quote>warned</quote> if … … 301 301 <seglistitem> 302 302 <seg> 303 blkdeactivate, dmeventd (optional), dmsetup, fsadm, lvm, and lvmdump. 303 blkdeactivate, dmeventd (optional), dmsetup, fsadm, lvm, and lvmdump. 304 304 There are also numerous symbolic links to lvm that implement specific 305 305 functionalities -
postlfs/filesystems/ntfs-3g.xml
r7999839 r8558044 80 80 <bridgehead renderas="sect4">Optional</bridgehead> 81 81 <para role="optional"> 82 <ulink url="https://github.com/libfuse/libfuse">fuse 2.x</ulink> 82 <ulink url="https://github.com/libfuse/libfuse">fuse 2.x</ulink> 83 83 (this disables user mounts) 84 84 </para> -
postlfs/filesystems/parted.xml
r7999839 r8558044 91 91 <para role="optional"> 92 92 <xref linkend="dosfstools"/>, 93 <xref linkend="pth"/>, 93 <xref linkend="pth"/>, 94 94 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>), and 95 95 <ulink url="https://metacpan.org/pod/Digest::CRC">Digest::CRC</ulink> (for tests) -
postlfs/filesystems/smartmontools.xml
r7999839 r8558044 33 33 programs (smartctl, smartd) to control/monitor storage systems using the 34 34 Self-Monitoring, Analysis and Reporting Technology System (S.M.A.R.T.) 35 built into most modern ATA and SCSI disks. 35 built into most modern ATA and SCSI disks. 36 36 </para> 37 37 … … 91 91 92 92 <para> 93 Install <application>smartmontools</application> by running the 93 Install <application>smartmontools</application> by running the 94 94 following commands: 95 95 </para> -
postlfs/filesystems/sshfs.xml
r7999839 r8558044 103 103 <screen><userinput>mkdir build && 104 104 cd build && 105 105 106 106 meson --prefix=/usr --buildtype=release .. && 107 107 ninja</userinput></screen> -
postlfs/filesystems/uefi-bootloaders/grub-setup.xml
r7999839 r8558044 195 195 196 196 <para> 197 If the system or the hard drive is new, or it's a first time 197 If the system or the hard drive is new, or it's a first time 198 198 install an UEFI booted OS on the system, the ESP may not exist. 199 199 In that case, create a new partition, make a … … 333 333 Note that <literal>0005</literal> is the first in the 334 334 <literal>BootOrder</literal>, and <literal>Boot0005</literal> 335 is <literal>LFS</literal>. This means that on the next boot, the 335 is <literal>LFS</literal>. This means that on the next boot, the 336 336 version of GRUB installed by LFS will be used to boot the system. 337 337 </para> … … 421 421 directive can be used to tell GRUB to run another EFI executable, 422 422 in this case the Windows Boot Manager. You may put more usable tools 423 in EFI executable format (for example, an EFI shell) into the ESP and 423 in EFI executable format (for example, an EFI shell) into the ESP and 424 424 create GRUB entries for them. 425 425 </para> -
postlfs/filesystems/xfsprogs.xml
r7999839 r8558044 74 74 <bridgehead renderas="sect4">Required</bridgehead> 75 75 <para role="required"> 76 <xref linkend="inih"/> 76 <xref linkend="inih"/> 77 77 </para> 78 78 -
postlfs/security/cryptsetup.xml
r7999839 r8558044 31 31 <para> 32 32 cryptsetup is used to set up transparent encryption of block devices 33 using the kernel crypto API. 33 using the kernel crypto API. 34 34 </para> 35 35 … … 112 112 </para> 113 113 114 <screen><literal>Device Drivers ---> 114 <screen><literal>Device Drivers ---> 115 115 [*] Multiple devices driver support (RAID and LVM) ---> [CONFIG_MD] 116 116 <*/M> Device mapper support [CONFIG_BLK_DEV_DM] 117 117 <*/M> Crypt target support [CONFIG_DM_CRYPT] 118 118 119 Cryptographic API ---> 119 Cryptographic API ---> 120 120 <*/M> XTS support [CONFIG_CRYPTO_XTS] 121 121 <*/M> SHA224 and SHA256 digest algorithm [CONFIG_CRYPTO_SHA256] … … 137 137 <!-- No longer needed with 2.3.2 138 138 <para> 139 First, apply a patch to fix a build problem caused by API changes in 139 First, apply a patch to fix a build problem caused by API changes in 140 140 <xref role="nodep" linkend="json-c"/>: 141 141 </para> … … 156 156 class="username">root</systemitem> user: <command>make check</command>. 157 157 Some tests will fail if appropriate kernel configuration options are not 158 set. Some additional options that may be needed for tests are: 158 set. Some additional options that may be needed for tests are: 159 159 CONFIG_SCSI_LOWLEVEL, 160 160 CONFIG_SCSI_DEBUG, … … 174 174 CONFIG_CRYPTO_SERPENT_AVX_X86_64, 175 175 CONFIG_CRYPTO_SERPENT_AVX2_X86_64, and 176 CONFIG_CRYPTO_TWOFISH_X86_64. 177 <!--I still had 5 of 19 tests fail after adding the above crypto options in the 176 CONFIG_CRYPTO_TWOFISH_X86_64. 177 <!--I still had 5 of 19 tests fail after adding the above crypto options in the 178 178 kernel. bdubbs --> 179 179 </para> … … 224 224 </seg> 225 225 <seg> 226 None 226 None 227 227 </seg> 228 228 </seglistitem> -
postlfs/security/gnupg2.xml
r7999839 r8558044 236 236 <seglistitem> 237 237 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13 238 (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail, 239 gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil, 238 (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail, 239 gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil, 240 240 <!--symcryptrun,--> and watchgnupg</seg> 241 241 <seg>None</seg> -
postlfs/security/gnutls.xml
r7999839 r8558044 110 110 <xref linkend="gtk-doc"/>, 111 111 <xref linkend="guile"/>, 112 <xref linkend="libidn"/> or 112 <xref linkend="libidn"/> or 113 113 <xref linkend="libidn2"/>, 114 114 <xref linkend="libseccomp"/>, -
postlfs/security/iptables.xml
r7999839 r8558044 81 81 (required for connlabel support), 82 82 <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack</ulink> 83 (required for connlabel support), and 83 (required for connlabel support), and 84 84 <ulink url="https://netfilter.org/projects/nftables/">nftables</ulink> 85 85 </para> … … 638 638 639 639 </sect3> 640 640 641 641 <sect3 id="fw-busybox-ipt" xreflabel="Creating a BusyBox With iptables"> 642 642 <title>BusyBox</title> … … 853 853 <seglistitem> 854 854 <seg> 855 ip6tables, 855 ip6tables, 856 856 ip6tables-apply, 857 857 ip6tables-legacy, 858 858 ip6tables-legacy-restore, 859 859 ip6tables-legacy-save, 860 ip6tables-restore, 861 ip6tables-save, 862 iptables, 860 ip6tables-restore, 861 ip6tables-save, 862 iptables, 863 863 iptables-apply, 864 864 iptables-legacy, … … 866 866 iptables-legacy-apply, 867 867 iptables-restore, 868 iptables-save, 869 iptables-xml, 868 iptables-save, 869 iptables-xml, 870 870 nfsynproxy (optional), 871 871 and xtables-multi 872 872 </seg> 873 873 <seg> 874 libip4tc.so, 875 libip6tc.so, 876 libipq.so, 874 libip4tc.so, 875 libip6tc.so, 876 libipq.so, 877 877 libiptc.so, 878 878 and libxtables.so 879 879 </seg> 880 880 <seg> 881 /lib/xtables and 881 /lib/xtables and 882 882 /usr/include/libiptc 883 883 </seg> -
postlfs/security/libcap.xml
r7999839 r8558044 30 30 31 31 <para> 32 The <application>libcap</application> package was installed in 32 The <application>libcap</application> package was installed in 33 33 LFS, but if <application>Linux-PAM</application> support is desired, 34 34 the PAM module must be built (after installation of … … 144 144 <command>man 3 cap_from_text</command> for additional information. 145 145 </para> 146 146 147 147 </sect2> 148 148 -
postlfs/security/liboauth.xml
r7999839 r8558044 87 87 <bridgehead renderas="sect4">Required</bridgehead> 88 88 <para role="required"> 89 <xref linkend="curl"/> 89 <xref linkend="curl"/> 90 90 </para> 91 91 -
postlfs/security/libpwquality.xml
r7999839 r8558044 115 115 Now, as the <systemitem class="username">root</systemitem> user: 116 116 </para> 117 117 118 118 <screen role="root"><userinput>make install</userinput></screen> 119 119 … … 177 177 178 178 </sect2> 179 179 180 180 <sect2 role="content"> 181 181 <title>Contents</title> -
postlfs/security/linux-pam.xml
r7999839 r8558044 105 105 <xref linkend="db"/>, 106 106 <xref linkend="libnsl"/>, 107 <xref linkend="libtirpc"/>, 107 <xref linkend="libtirpc"/>, 108 108 <ulink url="https://github.com/linux-audit/audit-userspace">libaudit</ulink>, and 109 109 <ulink url="http://www.prelude-siem.org">Prelude</ulink> … … 313 313 314 314 <para> 315 Now set up some generic files. As the 315 Now set up some generic files. As the 316 316 <systemitem class="username">root</systemitem> user: 317 317 </para> -
postlfs/security/make-ca.xml
r7999839 r8558044 39 39 Certificate Authority (CA) that is trusted by the local machine. 40 40 </para> 41 41 42 42 <para> 43 43 Establishing trust with a CA involves validating things like company -
postlfs/security/mitkrb.xml
r7999839 r8558044 159 159 160 160 <para> 161 The first <command>sed</command> increases the width of the virtual 161 The first <command>sed</command> increases the width of the virtual 162 162 terminal used for some tests to prevent some spurious text in the output 163 163 which is taken as a failure. The second <command>sed</command> removes a … … 212 212 <!-- FIXME: Removed due to merged-/usr setup 213 213 <para> 214 <command>mv -v /usr/lib/libk... /lib </command> and 215 <command>ln -v -sf ../../lib/libk... /usr/lib/libk...</command>: 214 <command>mv -v /usr/lib/libk... /lib </command> and 215 <command>ln -v -sf ../../lib/libk... /usr/lib/libk...</command>: 216 216 Move critical libraries to the 217 217 <filename class="directory">/lib</filename> directory so that they are … … 221 221 222 222 <para> 223 <command>find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;</command>: 224 This command changes the permisison of installed libraries. 223 <command>find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;</command>: 224 This command changes the permisison of installed libraries. 225 225 </para> 226 226 … … 498 498 /usr/lib/krb5, 499 499 /usr/share/{doc/krb5-&mitkrb-version;,examples/krb5}, 500 /var/lib/krb5kdc, and 501 /run/krb5kdc 500 /var/lib/krb5kdc, and 501 /run/krb5kdc 502 502 </seg> 503 503 </seglistitem> -
postlfs/security/nss.xml
r7999839 r8558044 150 150 HOST=localhost DOMSUF=localdomain ./all.sh 151 151 cd ../</userinput></screen> 152 153 <note> 152 153 <note> 154 154 <para>Some information about the tests:</para> 155 155 <itemizedlist spacing="compact"> 156 156 <listitem> 157 157 <para> 158 HOST=localhost and DOMSUF=localdomain are required 158 HOST=localhost and DOMSUF=localdomain are required 159 159 Without these variables, a FQDN is 160 160 required to specified and this generic way should work for … … 165 165 <para> 166 166 The tests take an extremely long time to run. If desired there is 167 information in the all.sh script about running subsets of the 167 information in the all.sh script about running subsets of the 168 168 total test suite. 169 169 </para> … … 179 179 <listitem> 180 180 <para> 181 Test suite results (in HTML format!) can be found at 181 Test suite results (in HTML format!) can be found at 182 182 ../../test_results/security/localhost.1/results.html 183 183 </para> … … 302 302 libcrmf.a, libfreebl3.so, libfreeblpriv3.so, 303 303 libnss3.so, libnssckbi.so, libnssckbi-testlib.so, 304 libnssdbm3.so, libnsssysinit.so, libnssutil3.so, 305 libpkcs11testmodule.so, libsmime3.so, libsoftokn3.so, 304 libnssdbm3.so, libnsssysinit.so, libnssutil3.so, 305 libpkcs11testmodule.so, libsmime3.so, libsoftokn3.so, 306 306 and libssl3.so 307 307 </seg> -
postlfs/security/openssh.xml
r7999839 r8558044 13 13 <!ENTITY openssh-size "1.7 MB"> 14 14 <!ENTITY openssh-buildsize "48 MB (add 18 MB for tests)"> 15 <!ENTITY openssh-time "0.3 SBU (Using parallelism=4; 15 <!ENTITY openssh-time "0.3 SBU (Using parallelism=4; 16 16 running the tests takes 20+ minutes, 17 17 irrespective of processor speed)"> … … 143 143 144 144 <screen><userinput remap="pre">patch -Np1 -i ../openssh-&openssh-version;-glibc_2.31_fix-1.patch</userinput></screen> 145 --> 145 --> 146 146 147 147 <!-- Applied in 8.5p1 -
postlfs/security/p11-kit.xml
r7999839 r8558044 122 122 123 123 <para> 124 To test the results, issue: <command>ninja test</command>. 124 To test the results, issue: <command>ninja test</command>. 125 125 </para> 126 126 -
postlfs/security/polkit.xml
r7999839 r8558044 94 94 <xref linkend="linux-pam"/> 95 95 <phrase revision="sysv"> 96 and <xref role="first" linkend="elogind"/> 96 and <xref role="first" linkend="elogind"/> 97 97 </phrase> 98 98 </para> … … 118 118 <bridgehead renderas="sect4">Optional</bridgehead> 119 119 <para role="optional"> 120 <xref linkend="dbus-python"/> and 120 <xref linkend="dbus-python"/> and 121 121 <xref linkend="python-dbusmock"/> (for tests), 122 122 <xref linkend="DocBook"/>, … … 220 220 221 221 <para> 222 To test the results, first ensure that the system 222 To test the results, first ensure that the system 223 223 <application>D-Bus</application> daemon is running. 224 224 Then run <command>make check</command>. -
postlfs/security/shadow.xml
r7999839 r8558044 146 146 147 147 <screen role="root"><userinput>make exec_prefix=/usr install</userinput></screen> 148 148 149 149 </sect2> 150 150 … … 168 168 <para> 169 169 <command>sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e 170 's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' 170 's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' 171 171 -i etc/login.defs</command>: Instead of using 172 172 the default 'DES' method, this command modifies the installation to use … … 180 180 181 181 <para> 182 <command>sed ... libmisc/salt.c</command> and 182 <command>sed ... libmisc/salt.c</command> and 183 183 <command>sed ... libsubid/Makefile.am</command>: Fix a couple of errors 184 184 that were found after the package was released. -
postlfs/security/stunnel.xml
r7999839 r8558044 261 261 </para> 262 262 263 <screen role="root"><userinput>cat > /etc/stunnel/stunnel.conf << "EOF" 263 <screen role="root"><userinput>cat > /etc/stunnel/stunnel.conf << "EOF" 264 264 <literal>; File: /etc/stunnel/stunnel.conf 265 265 -
postlfs/security/sudo.xml
r7999839 r8558044 111 111 To test the results, issue: <command>env LC_ALL=C make check 2>&1 112 112 | tee make-check.log</command>. Check the results with <command>grep 113 failed make-check.log</command>. 113 failed make-check.log</command>. 114 114 </para> 115 115 … … 220 220 %wheel ALL=(ALL) ALL</literal> 221 221 EOF</userinput></screen> 222 222 223 223 <para> 224 224 For details, see <command>man sudoers</command>. -
postlfs/security/tripwire.xml
r7999839 r8558044 176 176 <para> 177 177 <option>CPPFLAGS=-std=c++11</option>: Setting the C++ preprocessor 178 flags to version 11 is necessary to prevent a confict with the 178 flags to version 11 is necessary to prevent a confict with the 179 179 default version which is c++17 in recent version of gcc. 180 180 </para> … … 296 296 email) and then modify the <application>Tripwire</application> database 297 297 to reflect the changed files on your system. This is so that 298 <application>Tripwire</application> will not continually notify you 298 <application>Tripwire</application> will not continually notify you 299 299 hat files you intentionally changed are a security violation. To do 300 300 this you must first <command>ls -l /var/lib/tripwire/report/</command> -
postlfs/security/volume_key.xml
r7999839 r8558044 30 30 31 31 <para> 32 The <application>volume_key</application> package provides 33 a library for manipulating storage volume encryption keys and storing 32 The <application>volume_key</application> package provides 33 a library for manipulating storage volume encryption keys and storing 34 34 them separately from volumes to handle forgotten passphrases. 35 35 </para>
Note:
See TracChangeset
for help on using the changeset viewer.