source: chapter08/kernel.xml@ 5ea02778

10.0 10.0-rc1 10.1 10.1-rc1 11.0 11.0-rc1 11.0-rc2 11.0-rc3 11.1 11.1-rc1 11.2 11.2-rc1 11.3 11.3-rc1 12.0 12.0-rc1 12.1 12.1-rc1 6.0 6.1 6.1.1 6.3 6.4 6.5 6.6 6.7 6.8 7.0 7.1 7.2 7.3 7.4 7.5 7.5-systemd 7.6 7.6-systemd 7.7 7.7-systemd 7.8 7.8-systemd 7.9 7.9-systemd 8.0 8.1 8.2 8.3 8.4 9.0 9.1 arm bdubbs/gcc13 ml-11.0 multilib renodr/libudev-from-systemd s6-init trunk xry111/arm64 xry111/arm64-12.0 xry111/clfs-ng xry111/lfs-next xry111/loongarch xry111/loongarch-12.0 xry111/loongarch-12.1 xry111/mips64el xry111/pip3 xry111/rust-wip-20221008 xry111/update-glibc
Last change on this file since 5ea02778 was 5ea02778, checked in by Alexander E. Patrakov <alexander@…>, 20 years ago

Security: fixed an exploitable DoS bug in FPU exception handling code in linux-2.6.6

git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@3782 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689

  • Property mode set to 100644
File size: 9.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN" "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
3 <!ENTITY % general-entities SYSTEM "../general.ent">
4 %general-entities;
5]>
6<sect1 id="ch-bootable-kernel" xreflabel="Linux" role="wrap">
7<title>Linux-&linux-version;</title>
8<?dbhtml filename="kernel.html"?>
9
10<indexterm zone="ch-bootable-kernel"><primary sortas="a-Linux">Linux</primary></indexterm>
11
12<sect2 role="package"><title/>
13<para>The Linux package contains the kernel and the header files.</para>
14
15<segmentedlist>
16<segtitle>&buildtime;</segtitle>
17<segtitle>&diskspace;</segtitle>
18<seglistitem><seg>All default options: 4.20 SBU</seg>
19<seg>All default options: 181 MB</seg></seglistitem>
20</segmentedlist>
21
22<segmentedlist>
23<segtitle>Linux installation depends on</segtitle>
24<seglistitem><seg>Bash, Binutils, Coreutils, Findutils,
25GCC, Glibc, Grep, Gzip, Make, Modutils, Perl, Sed</seg></seglistitem>
26</segmentedlist>
27</sect2>
28
29<sect2 role="installation">
30<title>Installation of the kernel</title>
31
32<para>Building the kernel involves a few steps: configuration, compilation, and
33installation. If you don't like the way this book configures the kernel, view
34the <filename>README</filename> file in the kernel source tree for alternative
35methods.</para>
36
37<para>Prepare for compilation by running the following command:</para>
38
39<screen><userinput>make mrproper</userinput></screen>
40
41<para>This ensures that the kernel tree is absolutely clean. The kernel team
42recommends that this command be issued prior to <emphasis>each</emphasis>
43kernel compilation. You shouldn't rely on the source tree being clean after
44un-tarring.</para>
45
46<para>Fix an exploitable bug in FPU exception handling code:</para>
47
48<screen><userinput>patch -Np1 -i ../linux-&linux-version;-fpu-1.patch</userinput></screen>
49
50<para>Configure the kernel via a menu-driven interface:</para>
51
52<screen><userinput>make menuconfig</userinput></screen>
53
54<para><userinput>make oldconfig</userinput> may be more appropriate in some
55situations. See the <filename>README</filename> file for more
56information.</para>
57
58<para>If you wish, you may skip kernel configuration by simply copying the
59kernel config file, <filename>.config</filename>, from your host system
60(assuming it is available) to the unpacked <filename class="directory">linux-&linux-version;</filename>
61directory. However, we
62don't recommend this option. You're much better off exploring all the
63configuration menus and creating your own kernel configuration from
64scratch.</para>
65
66<para>For POSIX shared memory support, ensure that the kernel config option
67<quote>Virtual memory file system support</quote> is enabled. It resides within
68the <quote>File systems</quote> menu and is normally enabled by default.</para>
69
70<para>LFS bootscripts make the assumption that you either compile
71both "Support for Host-side USB" and
72"USB device filesystem" directly into the kernel, or don't compile them at
73all. Bootscripts will not work properly if it is a module (usbcore.ko).</para>
74
75<note><para>NPTL requires the kernel to be compiled with GCC 3.x, in this case
76&gcc-version;. Compiling with 2.95.x is known to cause failures in the glibc
77testsuite, so do <emphasis>not</emphasis> compile the kernel with gcc 2.95.x
78unless you know what you're getting yourself into.</para></note>
79
80<para>Compile the kernel image and modules:</para>
81
82<screen><userinput>make</userinput></screen>
83
84<para>If you intend to use kernel modules, you may need an
85<filename>/etc/modprobe.conf</filename> file. Information pertaining
86to modules and to kernel configuration in general may be found in the
87kernel documentation, which is found in the
88<filename>linux-&linux-version;/Documentation</filename> directory.
89The
90modprobe.conf man page
91<!-- removed for review from tldp.org
92and the kernel HOWTO at
93<ulink url="http://www.tldp.org/HOWTO/Kernel-HOWTO.html"/> -->
94may also be of
95interest to you.</para>
96
97<para>Be very suspicious while reading other documentation, because it
98usually applies to 2.4.x kernels only. As far as the editors know, kernel
99configuration issues specific to Hotplug and Udev
100are documented nowhere. The problem is that Udev will create a device node
101only if Hotplug or a user-written script inserts the corresponding module
102into the kernel, and not all modules are detectable by Hotplug. Note
103that statements like
104<screen>alias char-major-XXX some-module</screen>
105in <filename>/etc/modprobe.conf</filename> file don't work with
106Udev, and other aliases are often unnecessary with Hotplug.</para>
107
108<para>Because of all those compilcations with Hotplug, Udev and modules, we
109strongly recommend you to start with a completely non-modular kernel
110configuration, especially if this is the first time you use Udev.</para>
111
112<para>Install the modules, if your kernel configuration uses them:</para>
113
114<screen><userinput>make modules_install</userinput></screen>
115
116<para>If you have a lot of modules and very little space, you may want to
117consider stripping and compressing the modules. For most people such compression
118isn't worth the trouble, but if you're really pressed for space, then have a look at
119<ulink url="http://www.linux-mips.org/archives/linux-mips/2002-04/msg00031.html"/>.</para>
120
121<para>Kernel compilation has finished but more steps are required to complete
122the installation. Some files need to be copied to the <filename>/boot</filename>
123directory.</para>
124
125<para>The path to the kernel image may vary depending on the platform you're
126using. Issue the following command to install the kernel:</para>
127
128<screen><userinput>cp arch/i386/boot/bzImage /boot/lfskernel-&linux-version;</userinput></screen>
129
130<para><filename>System.map</filename> is a symbol file for the kernel. It maps
131the function entry points of every function in the kernel API (Application Programming Interface), as well as the
132addresses of the kernel data structures for the running kernel. Issue the
133following command to install the map file:</para>
134
135<screen><userinput>cp System.map /boot/System.map-&linux-version;</userinput></screen>
136
137<para><filename>.config</filename> is the kernel configuration file that was
138produced by the <command>make menuconfig</command> step above. It contains all
139the config selections for the kernel that was just compiled. It's a good idea
140to keep this file for future reference:</para>
141
142<screen><userinput>cp .config /boot/config-&linux-version;</userinput></screen>
143
144<para>It is important to note that the files in the kernel source directory are
145not owned by <emphasis>root</emphasis>. Whenever you unpack a package as user
146<emphasis>root</emphasis> (like we did here inside chroot), the files end up
147having the user and group IDs of whatever they were on the packager's computer.
148This is usually not a problem for any other package you install because you
149remove the source tree after the installation. But the Linux source tree is
150often kept around for a long time, so there's a chance that whatever user ID
151the packager used will be assigned to somebody on your machine and then that
152person would have write access to the kernel source.</para>
153
154<para>If you are going to keep the kernel source tree around, you may want to
155run <userinput>chown -R 0:0</userinput> on the
156<filename>linux-&linux-version;</filename> directory to ensure all files are
157owned by user <emphasis>root</emphasis>.</para>
158
159</sect2>
160
161
162<sect2 id="contents-kernel" role="content"><title>Contents of Linux</title>
163
164<segmentedlist>
165<segtitle>Installed files</segtitle>
166<seglistitem><seg>the kernel, the kernel headers,
167and the System.map</seg></seglistitem>
168</segmentedlist>
169
170<variablelist><title>Short descriptions</title>
171
172<varlistentry id="kernel">
173<term>The <emphasis>kernel</emphasis></term>
174<listitem>
175<indexterm zone="ch-bootable-kernel kernel"><primary sortas="b-kernel">kernel</primary></indexterm>
176<para>is the engine of your GNU/Linux system.
177When switching on your box, the kernel is the first part of your operating
178system that gets loaded. It detects and initializes all the components of your
179computer's hardware, then makes these components available as a tree of files
180to the software, and turns a single CPU into a multi-tasking machine capable
181of running scores of programs seemingly at the same time.</para>
182</listitem>
183</varlistentry>
184
185<varlistentry id="kernel-headers">
186<term>The <emphasis>kernel headers</emphasis></term>
187<listitem>
188<indexterm zone="ch-bootable-kernel kernel-headers"><primary sortas="e-kernel-headers">kernel headers</primary></indexterm>
189<para>define the interface to the
190services that the kernel provides. The headers in your system's
191<filename>include</filename> directory should <emphasis>always</emphasis> be
192the ones against which Glibc was compiled and should therefore
193<emphasis>not</emphasis> be replaced when upgrading the kernel.</para>
194</listitem>
195</varlistentry>
196
197<varlistentry id="System.map">
198<term><filename>System.map</filename></term>
199<listitem>
200<indexterm zone="ch-bootable-kernel System.map"><primary sortas="e-/boot/System.map">/boot/System.map</primary></indexterm>
201<para>is a list of addresses and symbols. It maps the entry points and addresses
202of all the functions and data structures in the kernel.</para>
203</listitem>
204</varlistentry>
205</variablelist>
206
207</sect2>
208
209</sect1>
Note: See TracBrowser for help on using the repository browser.