Changeset a5b9f1e


Ignore:
Timestamp:
11/24/2018 08:21:05 PM (3 years ago)
Author:
DJ Lucas <dj@…>
Branches:
10.0, 10.1, 11.0, 8.4, 9.0, 9.1, bdubbs/svn, elogind, ken/refactor-virt, lazarus, qt5new, trunk, xry111/git-date, xry111/git-date-for-trunk, xry111/git-date-test
Children:
2a9e001
Parents:
9939292
Message:

Use wheel group for sample configuration of sudo.
Added pam_wheel.so configuration to /etc/pam.d/su.
update-usbids.service and upadate-pciids.service depend on network-online.target. Fixes #11249.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@20738 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:
7 edited

Legend:

Unmodified
Added
Removed
  • general.ent

    r9939292 ra5b9f1e  
    11<!-- $LastChangedBy$ $Date$ -->
    22
    3 <!ENTITY day          "22">                   <!-- Always 2 digits -->
     3<!ENTITY day          "24">                   <!-- Always 2 digits -->
    44<!ENTITY month        "11">                   <!-- Always 2 digits -->
    55<!ENTITY year         "2018">
     
    77<!ENTITY copyholder   "The BLFS Development Team">
    88<!ENTITY version      "&year;-&month;-&day;">
    9 <!ENTITY releasedate  "November 22nd, &year;">
     9<!ENTITY releasedate  "November 24th, &year;">
    1010<!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
    1111<!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
  • general/sysutils/pciutils.xml

    r9939292 ra5b9f1e  
    155155Documentation=man:update-pciids(8)
    156156DefaultDependencies=no
    157 After=local-fs.target
     157After=local-fs.target network-online.target
    158158Before=shutdown.target
    159159
  • general/sysutils/usbutils.xml

    r9939292 ra5b9f1e  
    170170Documentation=man:lusub(8)
    171171DefaultDependencies=no
    172 After=local-fs.target
     172After=local-fs.target network-online.target
    173173Before=shutdown.target
    174174
  • introduction/welcome/changelog.xml

    r9939292 ra5b9f1e  
    4444
    4545    <listitem>
     46      <para>November 24th, 2018</para>
     47      <itemizedlist>
     48        <listitem>
     49          <para>[dj] - Use wheel group for sample configuration of sudo.</para>
     50        </listitem>
     51        <listitem>
     52          <para>[dj] - Added pam_wheel.so configuration to
     53          <filename>/etc/pam.d/su</filename>.</para>
     54        </listitem>
     55        <listitem revision="systemd">
     56          <para>[dj] - update-usbids.service and upadate-pciids.service
     57          depend on network-online.target. Fixes
     58          <ulink url="&blfs-ticket-root;11249">#11249</ulink>.</para>
     59        </listitem>
     60      </itemizedlist>
     61    </listitem>
     62
     63    <listitem>
    4664      <para>November 22nd, 2018</para>
    4765      <itemizedlist>
  • postlfs/security/make-ca.xml

    r9939292 ra5b9f1e  
    116116    trust both for all three roles, the following commands will create
    117117    appropriate OpenSSL trusted certificates (run as the <systemitem
    118     class="username">root</systemitem> user):</para>
     118    class="username">root</systemitem> user after
     119    <xref linkend="wget"/> is installed):</para>
    119120
    120121<screen role="nodump"><userinput>install -vdm755 /etc/ssl/local &amp;&amp;
  • postlfs/security/shadow.xml

    r9939292 ra5b9f1e  
    359359#auth      optional    pam_group.so
    360360
    361 # include the default auth settings
     361# include system auth settings
    362362auth      include     system-auth
    363363
     
    365365account   required    pam_access.so
    366366
    367 # include the default account settings
     367# include system account settings
    368368account   include     system-account
    369369
     
    383383#session   optional    pam_mail.so      standard quiet
    384384
    385 # include the default session and password settings
     385# include system session and password settings
    386386session   include     system-session
    387387password  include     system-password
     
    411411# always allow root
    412412auth      sufficient  pam_rootok.so
     413
     414# Allow users in the wheel group to execute su without a password
     415# disabled by default
     416#auth      sufficient  pam_wheel.so trust use_uid
     417
     418# include system auth settings
    413419auth      include     system-auth
    414420
    415 # include the default account settings
     421# limit su to users in the wheel group
     422auth      required    pam_wheel.so use_uid
     423
     424# include system account settings
    416425account   include     system-account
    417426
     
    419428session   required    pam_env.so
    420429
    421 # include system session defaults
     430# include system session settings
    422431session   include     system-session
    423432
     
    435444auth      sufficient  pam_rootok.so
    436445
    437 # include system defaults for auth account and session
     446# include system auth, account, and session settings
    438447auth      include     system-auth
    439448account   include     system-account
  • postlfs/security/sudo.xml

    r9939292 ra5b9f1e  
    223223ADMIN       ALL = NOPASSWD: ALL</screen>
    224224
     225      <para>
     226        Another common configuration is to allow members of the wheel group to
     227        execute all commands after providing their own credientials. Use the
     228        following command to edit default <filename>/etc/sudoers</filename>
     229        file as the <systemitem class="username">root</systemitem> user:
     230      </para>
     231
     232<screen role="nodump"><userinput>sed '/wheel.*) ALL/s/^# //' -i.bak /etc/sudoers</userinput></screen>
     233     
    225234      <para>
    226235        For details, see <command>man sudoers</command>.
Note: See TracChangeset for help on using the changeset viewer.