Index: general.ent
===================================================================
--- general.ent	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ general.ent	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -1,5 +1,5 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "22">                   <!-- Always 2 digits -->
+<!ENTITY day          "24">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2018">
@@ -7,5 +7,5 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "November 22nd, &year;">
+<!ENTITY releasedate  "November 24th, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
Index: general/sysutils/pciutils.xml
===================================================================
--- general/sysutils/pciutils.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ general/sysutils/pciutils.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -155,5 +155,5 @@
 Documentation=man:update-pciids(8)
 DefaultDependencies=no
-After=local-fs.target
+After=local-fs.target network-online.target
 Before=shutdown.target
 
Index: general/sysutils/usbutils.xml
===================================================================
--- general/sysutils/usbutils.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ general/sysutils/usbutils.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -170,5 +170,5 @@
 Documentation=man:lusub(8)
 DefaultDependencies=no
-After=local-fs.target
+After=local-fs.target network-online.target
 Before=shutdown.target
 
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ introduction/welcome/changelog.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -44,4 +44,22 @@
 
     <listitem>
+      <para>November 24th, 2018</para>
+      <itemizedlist>
+        <listitem>
+          <para>[dj] - Use wheel group for sample configuration of sudo.</para>
+        </listitem>
+        <listitem>
+          <para>[dj] - Added pam_wheel.so configuration to
+          <filename>/etc/pam.d/su</filename>.</para>
+        </listitem>
+        <listitem revision="systemd">
+          <para>[dj] - update-usbids.service and upadate-pciids.service
+          depend on network-online.target. Fixes
+          <ulink url="&blfs-ticket-root;11249">#11249</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>November 22nd, 2018</para>
       <itemizedlist>
Index: postlfs/security/make-ca.xml
===================================================================
--- postlfs/security/make-ca.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ postlfs/security/make-ca.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -116,5 +116,6 @@
     trust both for all three roles, the following commands will create
     appropriate OpenSSL trusted certificates (run as the <systemitem
-    class="username">root</systemitem> user):</para>
+    class="username">root</systemitem> user after
+    <xref linkend="wget"/> is installed):</para>
 
 <screen role="nodump"><userinput>install -vdm755 /etc/ssl/local &amp;&amp;
Index: postlfs/security/shadow.xml
===================================================================
--- postlfs/security/shadow.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ postlfs/security/shadow.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -359,5 +359,5 @@
 #auth      optional    pam_group.so
 
-# include the default auth settings
+# include system auth settings
 auth      include     system-auth
 
@@ -365,5 +365,5 @@
 account   required    pam_access.so
 
-# include the default account settings
+# include system account settings
 account   include     system-account
 
@@ -383,5 +383,5 @@
 #session   optional    pam_mail.so      standard quiet
 
-# include the default session and password settings
+# include system session and password settings
 session   include     system-session
 password  include     system-password
@@ -411,7 +411,16 @@
 # always allow root
 auth      sufficient  pam_rootok.so
+
+# Allow users in the wheel group to execute su without a password
+# disabled by default
+#auth      sufficient  pam_wheel.so trust use_uid
+
+# include system auth settings
 auth      include     system-auth
 
-# include the default account settings
+# limit su to users in the wheel group
+auth      required    pam_wheel.so use_uid
+
+# include system account settings
 account   include     system-account
 
@@ -419,5 +428,5 @@
 session   required    pam_env.so
 
-# include system session defaults
+# include system session settings
 session   include     system-session
 
@@ -435,5 +444,5 @@
 auth      sufficient  pam_rootok.so
 
-# include system defaults for auth account and session
+# include system auth, account, and session settings
 auth      include     system-auth
 account   include     system-account
Index: postlfs/security/sudo.xml
===================================================================
--- postlfs/security/sudo.xml	(revision 99392921086c9d5e7bbf58eecfef75f5c0869cff)
+++ postlfs/security/sudo.xml	(revision a5b9f1ef07062deac2fe94bd013d55614b152d83)
@@ -223,4 +223,13 @@
 ADMIN       ALL = NOPASSWD: ALL</screen>
 
+      <para>
+        Another common configuration is to allow members of the wheel group to
+        execute all commands after providing their own credientials. Use the
+        following command to edit default <filename>/etc/sudoers</filename>
+        file as the <systemitem class="username">root</systemitem> user:
+      </para>
+
+<screen role="nodump"><userinput>sed '/wheel.*) ALL/s/^# //' -i.bak /etc/sudoers</userinput></screen>
+      
       <para>
         For details, see <command>man sudoers</command>.
