Changeset a2fe8d47


Ignore:
Timestamp:
01/29/2005 03:21:48 PM (18 years ago)
Author:
Randy McMurchy <randy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, ken/inkscape-core-mods, krejzi/svn, lazarus, nosym, perl-modules, plabs/python-mods, qt5new, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/soup3, xry111/test-20220226
Children:
5fbff85
Parents:
99ae2916
Message:

Added patch from ISC to fix a vulnerability issue and bumped version entities to 9.3.0p1 in Bind instructions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3354 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
4 edited

Legend:

Unmodified
Added
Removed

  • basicnet/netutils/bind-utils.xml

    r99ae2916 ra2fe8d47  
    1212]>
    1313
    14 <sect1 id="bind-utils" xreflabel="BIND Utilities-&bind-version;">
     14<sect1 id="bind-utils" xreflabel="BIND Utilities-&bind-version;p1">
    1515<sect1info>
    1616<othername>$LastChangedBy$</othername>
    … …  
    1818</sect1info>
    1919<?dbhtml filename="bind-utils.html"?>
    20 <title>BIND Utilities-&bind-version;</title>
     20<title>BIND Utilities-&bind-version;p1</title>
     21<indexterm zone="bind-utils">
     22<primary sortas="a-BIND-Utilities">BIND Utilities</primary>
     23</indexterm>
    2124
    2225<sect2>
    … …  
    4851</sect3>
    4952
     53<sect3><title>Additional downloads</title>
     54<itemizedlist spacing='compact'>
     55<listitem><para><ulink
     56url="ftp://ftp.isc.org/isc/bind9/9.3.0/&bind-version;-patch1"/></para>
     57</listitem>
     58</itemizedlist>
     59</sect3>
     60
    5061<sect3><title><application><acronym>BIND</acronym> Utilities</application>
    5162dependencies</title>
    … …  
    6172Utilities</application></title>
    6273
    63 <para>Install
    64 <application><acronym>BIND</acronym> Utilities</application> by
     74<para>Install <application><acronym>BIND</acronym> Utilities</application> by
    6575running the following commands:</para>
    6676
    67 <screen><userinput>./configure --prefix=/usr &amp;&amp;
     77<screen><userinput>patch -Np1 -i ../&bind-version;-patch1 &amp;&amp;
     78./configure --prefix=/usr &amp;&amp;
    6879make -C lib/dns &amp;&amp;
    6980make -C lib/isc &amp;&amp;
    … …  
    7990<title>Command explanations</title>
    8091
     92<para><command>patch -Np1 -i ../&bind-version;-patch1</command>: There's a
     93vulnerability in the <acronym>DNS</acronym><acronym>SEC</acronym> code. See
     94<ulink url="http://www.kb.cert.org/vuls/id/938617"/>. The patch fixes the
     95bug.</para>
     96
    8197<para><command>make -C lib/...</command>: These commands build the
    8298libraries that are needed for the client programs.</para>
    … …  
    90106<title>Contents</title>
    91107
    92 <para>The <application><acronym>BIND</acronym> Utilities</application> package
    93 contains <command>dig</command>, <command>host</command> and
    94 <command>nslookup</command>.</para>
     108<segmentedlist>
     109<segtitle>Installed Programs</segtitle>
     110<segtitle>Installed Libraries</segtitle>
     111<segtitle>Installed Directories</segtitle>
    95112
    96 </sect2>
     113<seglistitem>
     114<seg>dig, host and nslookup</seg>
     115<seg>None</seg>
     116<seg>None</seg>
     117</seglistitem>
     118</segmentedlist>
    97119
    98 <sect2>
    99 <title>Description</title>
    100 
     120<sect3><title>Short Descriptions</title>
    101121<para>See the program descriptions in the <xref linkend="bind"/>
    102122section.</para>
     123</sect3>
    103124
    104125</sect2>

  • general.ent

    r99ae2916 ra2fe8d47  
    1 <!ENTITY day          "28">
     1<!ENTITY day          "29">
    22<!ENTITY month        "01">
    33<!ENTITY year         "2005">

  • introduction/welcome/changelog.xml

    r99ae2916 ra2fe8d47  
    2222
    2323<itemizedlist>
     24
     25<listitem><para>January 29th, 2005 [randy]: Added vulnerability fix patch to
     26Bind instructions and bumped version entities to 9.3.0p1.</para></listitem>
    2427
    2528<listitem><para>January 28th, 2005 [randy]: Updated to hdparm-5.8,

  • server/other/bind.xml

    r99ae2916 ra2fe8d47  
    1212]>
    1313
    14 <sect1 id="bind" xreflabel="BIND-&bind-version;">
     14<sect1 id="bind" xreflabel="BIND-&bind-version;p1">
    1515<sect1info>
    1616<othername>$LastChangedBy$</othername>
    … …  
    1818</sect1info>
    1919<?dbhtml filename="bind.html"?>
    20 <title><acronym>BIND</acronym>-&bind-version;</title>
     20<title><acronym>BIND</acronym>-&bind-version;p1</title>
     21<indexterm zone="bind">
     22<primary sortas="a-BIND">BIND</primary>
     23</indexterm>
    2124
    2225<sect2>
    … …  
    4346</sect3>
    4447
     48<sect3><title>Additional downloads</title>
     49<itemizedlist spacing='compact'>
     50<listitem><para><ulink
     51url="ftp://ftp.isc.org/isc/bind9/9.3.0/&bind-version;-patch1"/></para>
     52</listitem>
     53</itemizedlist>
     54</sect3>
     55
    4556<sect3><title><application><acronym>BIND</acronym></application>
    4657dependencies</title>
    … …  
    7081running the following commands:</para>
    7182
    72 <screen><userinput><command>sed -i -e "s/dsssl-stylesheets/&amp;-1.78/g" configure &amp;&amp;
     83<screen><userinput><command>patch -Np1 -i ../&bind-version;-patch1 &amp;&amp;
     84sed -i -e "s/dsssl-stylesheets/&amp;-1.78/g" configure &amp;&amp;
    7385./configure --prefix=/usr --sysconfdir=/etc \
    7486    --enable-threads --with-libtool &amp;&amp;
    75 make &amp;&amp;
    76 make install &amp;&amp;
     87make</command></userinput></screen>
     88
     89<para>Now, as the root user:</para>
     90
     91<screen><userinput role='root'><command>make install &amp;&amp;
    7792chmod 755 \
    7893    /usr/lib/{lib{bind9,isc{,cc,cfg},lwres}.so.?.?.?,libdns.so.20.0.0} &amp;&amp;
    … …  
    93108package, you need to set up some dummy interfaces (requires
    94109<command>ifconfig</command>). Issue the following commands to run the
    95 complete suite of tests:</para>
    96 
    97 <screen><userinput><command>bin/tests/system/ifconfig.sh up &amp;&amp;
     110complete suite of tests (you will have to be the root user to issue the
     111<command>ifconfig</command> commands):</para>
     112
     113<screen><userinput role='root'><command>bin/tests/system/ifconfig.sh up &amp;&amp;
    98114make check &gt;check.log 2&gt;&amp;1 &amp;&amp;
    99115bin/tests/system/ifconfig.sh down</command></userinput></screen>
    … …  
    108124<sect2>
    109125<title>Command explanations</title>
     126
     127<para><command>patch -Np1 -i ../&bind-version;-patch1</command>: There's a
     128vulnerability in the <acronym>DNS</acronym><acronym>SEC</acronym> code. See
     129<ulink url="http://www.kb.cert.org/vuls/id/938617"/>. The patch fixes the
     130bug.</para>
    110131
    111132<para><command>sed -i -e ... configure</command>: This command forces
    … …  
    135156<application><acronym>BIND</acronym></application></title>
    136157
    137 <sect3><title>Config files</title>
    138 <para><filename>named.conf</filename>, <filename>root.hints</filename>,
    139 <filename>127.0.0</filename>, <filename>rndc.conf</filename></para>
     158<sect3 id="bind-config"><title>Config files</title>
     159<para><filename>named.conf</filename>,
     160<filename>root.hints</filename>,
     161<filename>127.0.0</filename>,
     162<filename>rndc.conf</filename> and
     163<filename>resolv.conf</filename></para>
     164<indexterm zone="bind bind-config">
     165<primary sortas="e-etc-named.conf">/etc/named.conf</primary></indexterm>
     166<indexterm zone="bind bind-config">
     167<primary sortas="e-etc-rndc.conf">/etc/rndc.conf</primary></indexterm>
     168<indexterm zone="bind bind-config">
     169<primary sortas="e-etc-resolv.conf">/etc/resolv.conf</primary></indexterm>
     170<indexterm zone="bind bind-config">
     171<primary sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
     172</indexterm>
     173<indexterm zone="bind bind-config">
     174<primary sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
     175</indexterm>
    140176</sect3>
    141177
    … …  
    150186<para>Create the unprivileged user and group named:</para>
    151187
    152 <screen><userinput><command>groupadd named &amp;&amp;
     188<screen><userinput role='root'><command>groupadd named &amp;&amp;
    153189useradd -m -c "BIND Owner" -g named -s /bin/false named</command></userinput></screen>
    154190
    … …  
    156192<application><acronym>BIND</acronym></application>:</para>
    157193
    158 <screen><userinput><command>cd /home/named &amp;&amp;
     194<screen><userinput role='root'><command>cd /home/named &amp;&amp;
    159195mkdir -p dev etc/namedb/slave var/run &amp;&amp;
    160196mknod /home/named/dev/null c 1 3 &amp;&amp;
    … …  
    168204<command>rndc-confgen</command> command:</para>
    169205
    170 <screen><userinput><command>rndc-confgen -b 512 | grep -m 1 "secret" | cut -d '"' -f 2</command></userinput></screen>
     206<screen><userinput role='root'><command>rndc-confgen -b 512 | grep -m 1 "secret" | cut -d '"' -f 2</command></userinput></screen>
    171207
    172208<para>Create the <filename>named.conf</filename> file from which named
    … …  
    174210<acronym>DNS</acronym> keys:</para>
    175211
    176 <screen><userinput><command>cat &gt; /home/named/etc/named.conf &lt;&lt; "EOF"</command>
     212<screen><userinput role='root'><command>cat &gt; /home/named/etc/named.conf &lt;&lt; "EOF"</command>
    177213 options {
    178214     directory "/etc/namedb";
    … …  
    241277commands:</para>
    242278
    243 <screen><userinput><command>cat &gt; /etc/rndc.conf &lt;&lt; "EOF"</command>
     279<screen><userinput role='root'><command>cat &gt; /etc/rndc.conf &lt;&lt; "EOF"</command>
    244280key rndc_key {
    245281algorithm "hmac-md5";
    … …  
    259295<para>Create a zone file with the following contents:</para>
    260296
    261 <screen><userinput><command>cat &gt; /home/named/etc/namedb/pz/127.0.0 &lt;&lt; "EOF"</command>
     297<screen><userinput role='root'><command>cat &gt; /home/named/etc/namedb/pz/127.0.0 &lt;&lt; "EOF"</command>
    262298$TTL 3D
    263299@      IN      SOA     ns.local.domain. hostmaster.local.domain. (
    … …  
    320356valid domain name.</para></note>
    321357
    322 <screen><userinput><command>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
     358<screen><userinput role='root'><command>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
    323359cat &gt; /etc/resolv.conf &lt;&lt; "EOF"</command>
    324360search <replaceable>[yourdomain.com]</replaceable>
    … …  
    329365following command:</para>
    330366
    331 <screen><userinput><command>chown -R named.named /home/named</command></userinput></screen>
    332 
    333 <para>To start the <acronym>DNS</acronym> server at boot, install the
     367<screen><userinput role='root'><command>chown -R named.named /home/named</command></userinput></screen>
     368
     369<para id="bind-init">To start the <acronym>DNS</acronym> server at boot, install the
    334370<filename>/etc/rc.d/init.d/bind</filename> init script included in the
    335371<xref linkend="intro-important-bootscripts"/> package.</para>
    336 
    337 <screen><userinput><command>make install-bind</command></userinput></screen>
     372<indexterm zone="bind bind-init">
     373<primary sortas="f-bind">bind</primary></indexterm>
     374
     375<screen><userinput role='root'><command>make install-bind</command></userinput></screen>
    338376
    339377<para>Now start <application><acronym>BIND</acronym></application> with
    340378the new boot script:</para>
    341379
    342 <screen><userinput><command>/etc/rc.d/init.d/bind start</command></userinput></screen>
     380<screen><userinput role='root'><command>/etc/rc.d/init.d/bind start</command></userinput></screen>
    343381
    344382</sect3>
    … …  
    371409<title>Contents</title>
    372410
    373 <para>The <application><acronym>BIND</acronym></application> package contains
    374 <command>dig</command>,
    375 <command>dnssec-keygen</command>,
    376 <command>dnssec-signzone</command>,
    377 <command>host</command>,
    378 <command>isc-config.sh</command>,
    379 <command>lwresd</command>,
    380 <command>named</command>,
    381 <command>named-checkconf</command>,
    382 <command>named-checkzone</command>,
    383 <command>nslookup</command>,
    384 <command>nsupdate</command>,
    385 <command>rndc</command>,
    386 <command>rndc-confgen</command>,
    387 <filename class='libraryfile'>libbind9</filename>,
    388 <filename class='libraryfile'>libdns</filename>,
    389 <filename class='libraryfile'>libisc</filename>,
    390 <filename class='libraryfile'>libisccc</filename>,
    391 <filename class='libraryfile'>libisccfg</filename> and
    392 <filename class='libraryfile'>liblwres</filename>.</para>
     411<segmentedlist>
     412<segtitle>Installed Programs</segtitle>
     413<segtitle>Installed Libraries</segtitle>
     414<segtitle>Installed Directories</segtitle>
     415
     416<seglistitem>
     417<seg>dig, dnssec-keygen, dnssec-signzone, host, isc-config.sh, lwresd,
     418named, named-checkconf, named-checkzone, nslookup, nsupdate, rndc and
     419rndc-confgen</seg>
     420<seg>libbind9.[so,a], libdns.[so,a], libisc.[so,a], libisccc.[so,a],
     421libisccfg.[so,a] and liblwres.[so,a]</seg>
     422<seg>/home/named, /usr/include/bind9, /usr/include/dns, /usr/include/dst,
     423/usr/include/isc, /usr/include/isccc, /usr/include/isccfg, /usr/include/lwres
     424and /usr/share/doc/bind-&bind-version;</seg>
     425</seglistitem>
     426</segmentedlist>
     427
     428<variablelist>
     429<bridgehead renderas="sect3">Short Descriptions</bridgehead>
     430<?dbfo list-presentation="list"?>
     431
     432<varlistentry id="dig">
     433<term><command>dig</command></term>
     434<listitem><para>interrogates <acronym>DNS</acronym> servers.</para>
     435<indexterm zone="bind dig">
     436<primary sortas="b-dig">dig</primary>
     437</indexterm></listitem>
     438</varlistentry>
     439
     440<varlistentry id="dnssec-keygen">
     441<term><command>dnssec-keygen</command></term>
     442<listitem><para>is a key generator for secure <acronym>DNS</acronym>.</para>
     443<indexterm zone="bind dnssec-keygen">
     444<primary sortas="b-dnssec-keygen">dnssec-keygen</primary>
     445</indexterm></listitem>
     446</varlistentry>
     447
     448<varlistentry id="dnssec-signzone">
     449<term><command>dnssec-signzone</command></term>
     450<listitem><para>generates signed versions of zone files.</para>
     451<indexterm zone="bind dnssec-signzone">
     452<primary sortas="b-dnssec-signzone">dnssec-signzone</primary>
     453</indexterm></listitem>
     454</varlistentry>
     455
     456<varlistentry id="host">
     457<term><command>host</command></term>
     458<listitem><para>is a utility for <acronym>DNS</acronym> lookups.</para>
     459<indexterm zone="bind host">
     460<primary sortas="b-host">host</primary>
     461</indexterm></listitem>
     462</varlistentry>
     463
     464<varlistentry id="lwresd">
     465<term><command>lwresd</command></term>
     466<listitem><para>is a caching-only name server for local process use.</para>
     467<indexterm zone="bind lwresd">
     468<primary sortas="b-lwresd">lwresd</primary>
     469</indexterm></listitem>
     470</varlistentry>
     471
     472<varlistentry id="named">
     473<term><command>named</command></term>
     474<listitem><para>is the name server daemon.</para>
     475<indexterm zone="bind named">
     476<primary sortas="b-named">named</primary>
     477</indexterm></listitem>
     478</varlistentry>
     479
     480<varlistentry id="named-checkconf">
     481<term><command>named-checkconf</command></term>
     482<listitem><para>checks the syntax of <filename>named.conf</filename>
     483files.</para>
     484<indexterm zone="bind named-checkconf">
     485<primary sortas="b-named-checkconf">named-checkconf</primary>
     486</indexterm></listitem>
     487</varlistentry>
     488
     489<varlistentry id="named-checkzone">
     490<term><command>named-checkzone</command></term>
     491<listitem><para>checks zone file validity.</para>
     492<indexterm zone="bind named-checkzone">
     493<primary sortas="b-named-checkzone">named-checkzone</primary>
     494</indexterm></listitem>
     495</varlistentry>
     496
     497<varlistentry id="nslookup">
     498<term><command>nslookup</command></term>
     499<listitem><para>is a program used to query Internet domain nameservers.</para>
     500<indexterm zone="bind nslookup">
     501<primary sortas="b-nslookup">nslookup</primary>
     502</indexterm></listitem>
     503</varlistentry>
     504
     505<varlistentry id="nsupdate">
     506<term><command>nsupdate</command></term>
     507<listitem><para>is used to submit <acronym>DNS</acronym> update
     508requests.</para>
     509<indexterm zone="bind nsupdate">
     510<primary sortas="b-nsupdate">nsupdate</primary>
     511</indexterm></listitem>
     512</varlistentry>
     513
     514<varlistentry id="rndc">
     515<term><command>rndc</command></term>
     516<listitem><para>controls the operation of
     517<application><acronym>BIND</acronym></application>.</para>
     518<indexterm zone="bind rndc">
     519<primary sortas="b-rndc">rndc</primary>
     520</indexterm></listitem>
     521</varlistentry>
     522
     523<varlistentry id="rndc-confgen">
     524<term><command>rndc-confgen</command></term>
     525<listitem><para>generates <filename>rndc.conf</filename> files.</para>
     526<indexterm zone="bind rndc-confgen">
     527<primary sortas="b-rndc-confgen">rndc-confgen</primary>
     528</indexterm></listitem>
     529</varlistentry>
     530</variablelist>
     531
    393532</sect2>
    394533
    395 <sect2><title>Description</title>
    396 
    397 <sect3><title>dig</title>
    398 <para><command>dig</command> interrogates <acronym>DNS</acronym>
    399 servers.</para></sect3>
    400 
    401 <sect3><title>dnssec-keygen</title>
    402 <para><command>dnssec-keygen</command> is a key generator for secure
    403 <acronym>DNS</acronym>.</para></sect3>
    404 
    405 <sect3><title>dnssec-signzone</title>
    406 <para><command>dnssec-signzone</command> generates signed versions of
    407 zone files.</para></sect3>
    408 
    409 <sect3><title>host</title>
    410 <para><command>host</command> is a utility for <acronym>DNS</acronym>
    411 lookups.</para></sect3>
    412 
    413 <sect3><title>lwresd</title>
    414 <para><command>lwresd</command> is a caching-only name server for local
    415 process use.</para></sect3>
    416 
    417 <sect3><title>named</title>
    418 <para><command>named</command> is the name server daemon.</para></sect3>
    419 
    420 <sect3><title>named-checkconf</title>
    421 <para><command>named-checkconf</command> checks the syntax of
    422 <filename>named.conf</filename> files.</para></sect3>
    423 
    424 <sect3><title>named-checkzone</title>
    425 <para><command>named-checkzone</command> checks zone file
    426 validity.</para></sect3>
    427 
    428 <sect3><title>nslookup</title>
    429 <para><command>nslookup</command> is a program used to query Internet
    430 domain nameservers.</para></sect3>
    431 
    432 <sect3><title>nsupdate</title>
    433 <para><command>nsupdate</command> is used to submit
    434 <acronym>DNS</acronym> update requests.</para></sect3>
    435 
    436 <sect3><title>rndc</title>
    437 <para><command>rndc</command> controls the operation of
    438 <application><acronym>BIND</acronym></application>.</para></sect3>
    439 
    440 <sect3><title>rndc-confgen</title>
    441 <para><command>rndc-confgen</command> generates
    442 <filename>rndc.conf</filename> files.</para></sect3>
    443 
    444 </sect2>
    445 
    446534</sect1>
    447535
Note: See TracChangeset for help on using the changeset viewer.