Changeset ee05358

Timestamp:

07/04/2006 04:19:05 PM (18 years ago)

Author:

Randy McMurchy <randy@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

b5155c56

Parents:

d59fe44

Message:

Added a command to the Linux-PAM instructions to alter the unix_chkpwd password helper setuid, thanks to Joerg Billeter for pointing this out

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@6246 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (2 diffs)
• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/linux-pam.xml (modified) (2 diffs)

general.ent

@@ -1 @@
-<!ENTITY day          "03">                   <!-- Always 2 digits -->
+<!ENTITY day          "04">                   <!-- Always 2 digits -->
 <!ENTITY month        "07">                   <!-- Always 2 digits -->
 <!ENTITY year         "2006">
 <!ENTITY version      "svn-&year;&month;&day;">
-<!ENTITY releasedate  "July &day;rd, &year;">
+<!ENTITY releasedate  "July &day;th, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
@@ -473 +473 @@
 <!ENTITY sound-juicer-version         "2.14.4">
 <!ENTITY totem-version                "1.4.2">
+<!ENTITY gnome-screensaver-version    "2.14.2">
 <!ENTITY gdm-version                  "2.14.9">
 

introduction/welcome/changelog.xml

@@ -43 +43 @@
 
     <listitem>
+      <para>July 4th, 2006</para>
+      <itemizedlist>
+        <listitem>
+          <para>[randy] - Added a command to the Linux-PAM instructions to
+          alter the unix_chkpwd password helper setuid, thanks to Jürg Billeter
+          for pointing this out.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>July 3rd, 2006</para>
       <itemizedlist>

postlfs/security/linux-pam.xml

@@ -123 +123 @@
 
 <screen role="root"><userinput>make install &amp;&amp;
+chmod -v 4755 /lib/security/unix_chkpwd &amp;&amp;
 mv -v /lib/security/pam_tally /sbin &amp;&amp;
 mv -v /usr/lib/libpam*.so.0* /lib &amp;&amp;
@@ -162 +163 @@
     allows the local administrator to choose which configuration file setup to
     use.</para>
+
+    <para><command>chmod -v 4755 /lib/security/unix_chkpwd</command>:
+    The <command>unix_chkpwd</command> password-helper program must be setuid
+    so that non-<systemitem class="username">root</systemitem> processes can
+    access the shadow-password file.</para>
 
     <para><command>mv -v /lib/security/pam_tally /sbin</command>: The