Changeset 8558044 for postlfs/security


Ignore:
Timestamp:
09/06/2021 05:42:49 PM (3 years ago)
Author:
Pierre Labastie <pierre.labastie@…>
Branches:
11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
fef4473
Parents:
7999839
Message:

Remove spaces at the end of lines

I know it is somewhat useless, but I don't like them for
two reasons: first they cannot be seen, and I do not like things I
cannot see. Second, git highlights them, and this is disturbing...

Location:
postlfs/security
Files:
19 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/cryptsetup.xml

    r7999839 r8558044  
    3131    <para>
    3232      cryptsetup is used to set up transparent encryption of block devices
    33       using the kernel crypto API. 
     33      using the kernel crypto API.
    3434    </para>
    3535
    … …  
    112112    </para>
    113113
    114 <screen><literal>Device Drivers  ---&gt;         
     114<screen><literal>Device Drivers  ---&gt;
    115115  [*] Multiple devices driver support (RAID and LVM) ---&gt; [CONFIG_MD]
    116116       &lt;*/M&gt; Device mapper support                        [CONFIG_BLK_DEV_DM]
    117117       &lt;*/M&gt; Crypt target support                         [CONFIG_DM_CRYPT]
    118118
    119 Cryptographic API  ---&gt;                                   
     119Cryptographic API  ---&gt;
    120120  &lt;*/M&gt; XTS support                                       [CONFIG_CRYPTO_XTS]
    121121  &lt;*/M&gt; SHA224 and SHA256 digest algorithm                [CONFIG_CRYPTO_SHA256]
    … …  
    137137<!-- No longer needed with 2.3.2
    138138    <para>
    139       First, apply a patch to fix a build problem caused by API changes in 
     139      First, apply a patch to fix a build problem caused by API changes in
    140140      <xref role="nodep" linkend="json-c"/>:
    141141    </para>
    … …  
    156156      class="username">root</systemitem> user: <command>make check</command>.
    157157      Some tests will fail if appropriate kernel configuration options are not
    158       set. Some additional options that may be needed for tests are: 
     158      set. Some additional options that may be needed for tests are:
    159159      CONFIG_SCSI_LOWLEVEL,
    160160      CONFIG_SCSI_DEBUG,
    … …  
    174174      CONFIG_CRYPTO_SERPENT_AVX_X86_64,
    175175      CONFIG_CRYPTO_SERPENT_AVX2_X86_64, and
    176       CONFIG_CRYPTO_TWOFISH_X86_64. 
    177       <!--I still had 5 of 19 tests fail after adding the above crypto options in the 
     176      CONFIG_CRYPTO_TWOFISH_X86_64.
     177      <!--I still had 5 of 19 tests fail after adding the above crypto options in the
    178178      kernel.  bdubbs -->
    179179    </para>
    … …  
    224224        </seg>
    225225        <seg>
    226           None         
     226          None
    227227        </seg>
    228228      </seglistitem>

  • postlfs/security/gnupg2.xml

    r7999839 r8558044  
    236236      <seglistitem>
    237237        <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13
    238         (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail, 
    239         gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil, 
     238        (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail,
     239        gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil,
    240240        <!--symcryptrun,--> and watchgnupg</seg>
    241241        <seg>None</seg>

  • postlfs/security/gnutls.xml

    r7999839 r8558044  
    110110      <xref linkend="gtk-doc"/>,
    111111      <xref linkend="guile"/>,
    112       <xref linkend="libidn"/> or 
     112      <xref linkend="libidn"/> or
    113113      <xref linkend="libidn2"/>,
    114114      <xref linkend="libseccomp"/>,

  • postlfs/security/iptables.xml

    r7999839 r8558044  
    8181      (required for connlabel support),
    8282      <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack</ulink>
    83       (required for connlabel support), and 
     83      (required for connlabel support), and
    8484      <ulink url="https://netfilter.org/projects/nftables/">nftables</ulink>
    8585    </para>
    … …  
    638638
    639639    </sect3>
    640  
     640
    641641    <sect3 id="fw-busybox-ipt" xreflabel="Creating a BusyBox With iptables">
    642642      <title>BusyBox</title>
    … …  
    853853      <seglistitem>
    854854        <seg>
    855           ip6tables, 
     855          ip6tables,
    856856          ip6tables-apply,
    857857          ip6tables-legacy,
    858858          ip6tables-legacy-restore,
    859859          ip6tables-legacy-save,
    860           ip6tables-restore, 
    861           ip6tables-save, 
    862           iptables, 
     860          ip6tables-restore,
     861          ip6tables-save,
     862          iptables,
    863863          iptables-apply,
    864864          iptables-legacy,
    … …  
    866866          iptables-legacy-apply,
    867867          iptables-restore,
    868           iptables-save, 
    869           iptables-xml, 
     868          iptables-save,
     869          iptables-xml,
    870870          nfsynproxy (optional),
    871871          and xtables-multi
    872872        </seg>
    873873        <seg>
    874           libip4tc.so, 
    875           libip6tc.so, 
    876           libipq.so, 
     874          libip4tc.so,
     875          libip6tc.so,
     876          libipq.so,
    877877          libiptc.so,
    878878          and libxtables.so
    879879        </seg>
    880880        <seg>
    881           /lib/xtables and 
     881          /lib/xtables and
    882882          /usr/include/libiptc
    883883        </seg>

  • postlfs/security/libcap.xml

    r7999839 r8558044  
    3030
    3131    <para>
    32       The <application>libcap</application> package was installed in 
     32      The <application>libcap</application> package was installed in
    3333      LFS, but if <application>Linux-PAM</application> support is desired,
    3434      the PAM module must be built (after installation of
    … …  
    144144      <command>man 3 cap_from_text</command> for additional information.
    145145    </para>
    146  
     146
    147147  </sect2>
    148148

  • postlfs/security/liboauth.xml

    r7999839 r8558044  
    8787    <bridgehead renderas="sect4">Required</bridgehead>
    8888    <para role="required">
    89       <xref linkend="curl"/> 
     89      <xref linkend="curl"/>
    9090    </para>
    9191

  • postlfs/security/libpwquality.xml

    r7999839 r8558044  
    115115      Now, as the <systemitem class="username">root</systemitem> user:
    116116    </para>
    117    
     117
    118118<screen role="root"><userinput>make install</userinput></screen>
    119119
    … …  
    177177
    178178  </sect2>
    179    
     179
    180180  <sect2 role="content">
    181181    <title>Contents</title>

  • postlfs/security/linux-pam.xml

    r7999839 r8558044  
    105105      <xref linkend="db"/>,
    106106      <xref linkend="libnsl"/>,
    107       <xref linkend="libtirpc"/>, 
     107      <xref linkend="libtirpc"/>,
    108108      <ulink url="https://github.com/linux-audit/audit-userspace">libaudit</ulink>, and
    109109      <ulink url="http://www.prelude-siem.org">Prelude</ulink>
    … …  
    313313
    314314      <para>
    315         Now set up some generic files.  As the 
     315        Now set up some generic files.  As the
    316316        <systemitem class="username">root</systemitem> user:
    317317      </para>

  • postlfs/security/make-ca.xml

    r7999839 r8558044  
    3939      Certificate Authority (CA) that is trusted by the local machine.
    4040    </para>
    41  
     41
    4242    <para>
    4343      Establishing trust with a CA involves validating things like company

  • postlfs/security/mitkrb.xml

    r7999839 r8558044  
    159159
    160160    <para>
    161       The first <command>sed</command> increases the width of the virtual 
     161      The first <command>sed</command> increases the width of the virtual
    162162      terminal used for some tests to prevent some spurious text in the output
    163163      which is taken as a failure. The second <command>sed</command> removes a
    … …  
    212212    <!-- FIXME: Removed due to merged-/usr setup
    213213    <para>
    214       <command>mv -v /usr/lib/libk... /lib </command> and 
    215       <command>ln -v -sf ../../lib/libk... /usr/lib/libk...</command>: 
     214      <command>mv -v /usr/lib/libk... /lib </command> and
     215      <command>ln -v -sf ../../lib/libk... /usr/lib/libk...</command>:
    216216      Move critical libraries to the
    217217      <filename class="directory">/lib</filename> directory so that they are
    … …  
    221221
    222222    <para>
    223       <command>find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;</command>: 
    224       This command changes the permisison of installed libraries. 
     223      <command>find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;</command>:
     224      This command changes the permisison of installed libraries.
    225225    </para>
    226226
    … …  
    498498          /usr/lib/krb5,
    499499          /usr/share/{doc/krb5-&mitkrb-version;,examples/krb5},
    500           /var/lib/krb5kdc, and 
    501           /run/krb5kdc 
     500          /var/lib/krb5kdc, and
     501          /run/krb5kdc
    502502        </seg>
    503503      </seglistitem>

  • postlfs/security/nss.xml

    r7999839 r8558044  
    150150HOST=localhost DOMSUF=localdomain ./all.sh
    151151cd ../</userinput></screen>
    152    
    153     <note> 
     152
     153    <note>
    154154      <para>Some information about the tests:</para>
    155155      <itemizedlist spacing="compact">
    156156      <listitem>
    157157        <para>
    158            HOST=localhost and DOMSUF=localdomain are required 
     158           HOST=localhost and DOMSUF=localdomain are required
    159159           Without these variables, a FQDN is
    160160           required to specified and this generic way should work for
    … …  
    165165        <para>
    166166           The tests take an extremely long time to run. If desired there is
    167            information in the all.sh script about running subsets of the 
     167           information in the all.sh script about running subsets of the
    168168           total test suite.
    169169        </para>
    … …  
    179179      <listitem>
    180180        <para>
    181            Test suite results (in HTML format!) can be found at 
     181           Test suite results (in HTML format!) can be found at
    182182           ../../test_results/security/localhost.1/results.html
    183183        </para>
    … …  
    302302          libcrmf.a, libfreebl3.so, libfreeblpriv3.so,
    303303          libnss3.so, libnssckbi.so, libnssckbi-testlib.so,
    304           libnssdbm3.so, libnsssysinit.so, libnssutil3.so, 
    305           libpkcs11testmodule.so, libsmime3.so, libsoftokn3.so, 
     304          libnssdbm3.so, libnsssysinit.so, libnssutil3.so,
     305          libpkcs11testmodule.so, libsmime3.so, libsoftokn3.so,
    306306          and libssl3.so
    307307        </seg>

  • postlfs/security/openssh.xml

    r7999839 r8558044  
    1313  <!ENTITY openssh-size          "1.7 MB">
    1414  <!ENTITY openssh-buildsize     "48 MB (add 18 MB for tests)">
    15   <!ENTITY openssh-time          "0.3 SBU (Using parallelism=4; 
     15  <!ENTITY openssh-time          "0.3 SBU (Using parallelism=4;
    1616                                  running the tests takes 20+ minutes,
    1717                                  irrespective of processor speed)">
    … …  
    143143
    144144<screen><userinput remap="pre">patch -Np1 -i ../openssh-&openssh-version;-glibc_2.31_fix-1.patch</userinput></screen>
    145 -->   
     145-->
    146146
    147147<!-- Applied in 8.5p1

  • postlfs/security/p11-kit.xml

    r7999839 r8558044  
    122122
    123123    <para>
    124       To test the results, issue: <command>ninja test</command>. 
     124      To test the results, issue: <command>ninja test</command>.
    125125    </para>
    126126

  • postlfs/security/polkit.xml

    r7999839 r8558044  
    9494      <xref linkend="linux-pam"/>
    9595      <phrase revision="sysv">
    96         and <xref role="first" linkend="elogind"/> 
     96        and <xref role="first" linkend="elogind"/>
    9797      </phrase>
    9898    </para>
    … …  
    118118    <bridgehead renderas="sect4">Optional</bridgehead>
    119119    <para role="optional">
    120       <xref linkend="dbus-python"/> and 
     120      <xref linkend="dbus-python"/> and
    121121      <xref linkend="python-dbusmock"/> (for tests),
    122122      <xref linkend="DocBook"/>,
    … …  
    220220
    221221    <para>
    222       To test the results, first ensure that the system 
     222      To test the results, first ensure that the system
    223223      <application>D-Bus</application> daemon is running.
    224224      Then run <command>make check</command>.

  • postlfs/security/shadow.xml

    r7999839 r8558044  
    146146
    147147<screen role="root"><userinput>make exec_prefix=/usr install</userinput></screen>
    148        
     148
    149149  </sect2>
    150150
    … …  
    168168    <para>
    169169      <command>sed -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e
    170       's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' 
     170      's@/var/spool/mail@/var/mail@' -e '/PATH=/{s@/sbin:@@;s@/bin:@@}'
    171171      -i etc/login.defs</command>: Instead of using
    172172      the default 'DES' method, this command modifies the installation to use
    … …  
    180180
    181181    <para>
    182       <command>sed ... libmisc/salt.c</command> and 
     182      <command>sed ... libmisc/salt.c</command> and
    183183      <command>sed ... libsubid/Makefile.am</command>: Fix a couple of errors
    184184      that were found after the package was released.

  • postlfs/security/stunnel.xml

    r7999839 r8558044  
    261261      </para>
    262262
    263 <screen role="root"><userinput>cat &gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF" 
     263<screen role="root"><userinput>cat &gt; /etc/stunnel/stunnel.conf &lt;&lt; "EOF"
    264264<literal>; File: /etc/stunnel/stunnel.conf
    265265

  • postlfs/security/sudo.xml

    r7999839 r8558044  
    111111      To test the results, issue: <command>env LC_ALL=C make check 2&gt;&amp;1
    112112      | tee make-check.log</command>. Check the results with <command>grep
    113       failed make-check.log</command>. 
     113      failed make-check.log</command>.
    114114    </para>
    115115
    … …  
    220220%wheel ALL=(ALL) ALL</literal>
    221221EOF</userinput></screen>
    222      
     222
    223223      <para>
    224224        For details, see <command>man sudoers</command>.

  • postlfs/security/tripwire.xml

    r7999839 r8558044  
    176176    <para>
    177177      <option>CPPFLAGS=-std=c++11</option>: Setting the C++ preprocessor
    178       flags to version 11 is necessary to prevent a confict with the 
     178      flags to version 11 is necessary to prevent a confict with the
    179179      default version which is c++17 in recent version of gcc.
    180180    </para>
    … …  
    296296        email) and then modify the <application>Tripwire</application> database
    297297        to reflect the changed files on your system. This is so that
    298         <application>Tripwire</application> will not continually notify you 
     298        <application>Tripwire</application> will not continually notify you
    299299        hat files you intentionally changed are a security violation. To do
    300300        this you must first <command>ls -l /var/lib/tripwire/report/</command>

  • postlfs/security/volume_key.xml

    r7999839 r8558044  
    3030
    3131    <para>
    32       The <application>volume_key</application> package provides 
    33       a library for manipulating storage volume encryption keys and storing 
     32      The <application>volume_key</application> package provides
     33      a library for manipulating storage volume encryption keys and storing
    3434      them separately from volumes to handle forgotten passphrases.
    3535    </para>
Note: See TracChangeset for help on using the changeset viewer.