Changeset acf7e2c for postlfs

Timestamp:

09/22/2018 01:10:28 AM (6 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

basic

Children:

6397333

Parents:

57e3994

Message:

Updates to Basic BLFS Chapter 3

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/basic@20519 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:

postlfs/security

Files:

• make-ca.xml (modified) (5 diffs)
• openssh.xml (modified) (3 diffs)
• sudo.xml (modified) (1 diff)

postlfs/security/make-ca.xml

@@ -75 +75 @@
 
     <bridgehead renderas="sect3">make-ca Dependencies</bridgehead>
-<!--
+
     <bridgehead renderas="sect4">Recommended</bridgehead>
     <para role="recommended"><xref linkend="p11-kit"/> (required at runtime to
@@ -82 +82 @@
    <bridgehead renderas="sect4">Optional (runtime)</bridgehead>
     <para role="optional">
-      <xref role="runtime" linkend="java"/> or
-      <xref role="runtime" linkend="openjdk"/> (to generate a java PKCS#12
-      store), and <xref role="runtime" linkend="nss"/> (to generate a shared
-      NSSDB)
+      <ulink role="runtime" url="&blfs-book;general/openjdk.html">OpenJDK</ulink> 
+        (to generate a java PKCS#12 store), and 
+      <ulink role="runtime" url="&blfs-book;postlfs/nss.html">nss</ulink> 
+        (to generate a shared NSSDB)
     </para>
--->
+
     <para condition="html" role="usernotes">User Notes:
     <ulink url='&blfs-wiki;/make-ca'/></para>
@@ -97 +97 @@
     <para>The <application>make-ca</application> script will download and
     process the certificates included in the <filename>certdata.txt</filename>
-    file for use as trust anchors for the <!-- <xref linkend="p11-kit"/> -->trust
+    file for use as trust anchors for the <xref linkend="p11-kit"/> trust
     module. Additionally, it will generate system certificate stores used by
     BLFS applications (if the recommended and optional applications are present
@@ -146 +146 @@
 
    <para>As the <systemitem class="username">root</systemitem> user, after
-   installing <!--<xref linkend="p11-kit"/>-->, download the certificate source and
+   installing <xref linkend="p11-kit"/>, download the certificate source and
    prepare for system use with the following command:</para>
 
@@ -171 +171 @@
     for use that might be preferred for one reason or another, including the
     files shipped with Mozilla products in this book. RedHat and OpenSUSE,
-    for instance, use the version included in <!--<xref linkend="nss"/>-->. Additional
+    for instance, use the version included in 
+    <ulink role="runtime" url="&blfs-book;postlfs/nss.html">nss</ulink>. Additional
     upstream downloads are available at the links below.</para>
 

postlfs/security/openssh.xml

@@ -87 +87 @@
 
     <bridgehead renderas="sect3">OpenSSH Dependencies</bridgehead>
-<!--
-    <bridgehead renderas="sect4">Required</bridgehead>
-    <para role="required">
-      <xref linkend="openssl"/> or
-      <ulink url="http://www.libressl.org/">LibreSSL Portable</ulink></para>
--->
-<!--
+
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional">
-      <xref linkend="linux-pam"/>,
-      <xref linkend="x-window-system"/>,
-      <xref linkend="mitkrb"/>,
+      <ulink url="&blfs-book;/postlfs/linux-pam.html">linux-pam</ulink>,
+      <ulink url="&blfs-book;x/installing.html">x-window-system</ulink>,
+      <ulink url="&blfs-book;postlfs/mitkrb.html">MIT Kerberos</ulink>,
       <ulink url="http://www.thrysoee.dk/editline/">libedit</ulink>,
       <ulink url="http://www.libressl.org/">LibreSSL Portable</ulink>,
@@ -107 +101 @@
     <bridgehead renderas="sect4">Optional Runtime (Used only to gather entropy)</bridgehead>
     <para role="optional">
-      <xref role="runtime" linkend="openjdk"/>,
-      <xref role="runtime" linkend="net-tools"/>, and
-      <xref role="runtime" linkend="sysstat"/>
-    </para>
--->
+      <ulink role="runtime" url="&blfs-book;general/openjdk.html">OpenJDK</ulink>,
+      <ulink role="runtime" url="&blfs-book;basicnet/net-tools.html">net-tools</ulink>, and
+      <ulink role="runtime" url="&blfs-book;general/sysstat.html">sysstat</ulink>
+    </para>
+
     <para condition="html" role="usernotes">
         User Notes: <ulink url="&blfs-wiki;/OpenSSH"/>
@@ -321 +315 @@
 
     <sect3  id="openssh-init">
-      <title><phrase revision="sysv">Boot Script</phrase>
-             <phrase revision="systemd">Systemd Unit</phrase></title>
-
-      <para revision="sysv">
-        To start the SSH server at system boot, install the
+      <title>Installing the Boot Script or Systemd Unit</title>
+
+      <para>
+        If using the System V version of LFS, you can start the SSH server at 
+        system boot by installing the
         <filename>/etc/rc.d/init.d/sshd</filename> init script included
         in the <xref linkend="bootscripts"/> package.
       </para>
 
-      <para revision="systemd">
-        To start the SSH server at system boot, install the
+      <para>
+        If using the systemd version of LFS, you can start the SSH server at
+        system boot by installing the
         <filename>sshd.service</filename> unit included in the
         <xref linkend="systemd-units"/> package.

postlfs/security/sudo.xml

@@ -75 +75 @@
 
     <bridgehead renderas="sect3">Sudo Dependencies</bridgehead>
-<!--
+
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional">
-      <xref linkend="linux-pam"/>,
-      <xref linkend="mitkrb"/>,
-      <xref linkend="openldap"/>,
-      <xref linkend="server-mail"/> (that provides a
-      <command>sendmail</command> command),
+      <ulink url="&blfs-book;/postlfs/linux-pam.html">linux-pam</ulink>,
+      <ulink url="&blfs-book;postlfs/mitkrb.html">MIT Kerberos</ulink>,
+      <ulink url="&blfs-book;postlfs/openldap.html">openldap</ulink>
+      <xref linkend="postfix"/> (or an equivalent package that provides a
+        <command>sendmail</command> command),
       <ulink url="http://www.openafs.org/">AFS</ulink>,
       <ulink url="http://www.fwtk.org/">FWTK</ulink>, and
       <ulink url="&sourceforge-dl;/opie/">Opie</ulink>
     </para>
--->
 
     <para condition="html" role="usernotes">User Notes: