Changes in chapter08/systemd.xml [ffecb9e:7152faa]
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
chapter08/systemd.xml
rffecb9e r7152faa 1 <?xml version="1.0" encoding=" ISO-8859-1"?>1 <?xml version="1.0" encoding="UTF-8"?> 2 2 <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" 3 3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ … … 48 48 <screen><userinput remap="pre">sed -i -e 's/GROUP="render"/GROUP="video"/' \ 49 49 -e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in</userinput></screen> 50 51 <!-- https://github.com/systemd/systemd/pull/30549 --> 52 <para>Now fix a security vulnerability in the DNSSEC verification of 53 <command>systemd-resolved</command>:</para> 54 55 <screen><userinput remap='pre'>sed -e '/return FLAGS_SET.*AUTHENTICATED/s/(t/(dt/' \ 56 -i src/resolve/resolved-dns-transaction.c</userinput></screen> 50 57 51 58 <para>Prepare systemd for compilation:</para> … … 63 70 -Dsysusers=false \ 64 71 -Drpmmacrosdir=no \ 65 -Dhomed= false\72 -Dhomed=disabled \ 66 73 -Duserdb=false \ 67 -Dman= false\74 -Dman=disabled \ 68 75 -Dmode=release \ 69 76 -Dpamconfdir=no \ 70 77 -Ddev-kvm-mode=0660 \ 71 78 -Dnobody-group=nogroup \ 79 -Dsysupdate=disabled \ 80 -Dukify=disabled \ 72 81 -Ddocdir=/usr/share/doc/systemd-&systemd-version; \ 73 82 ..</userinput></screen> … … 140 149 141 150 <varlistentry> 142 <term><parameter>-D{userdb,homed}=false</parameter></term> 151 <term><parameter>-Dhomed=disabled</parameter> and 152 <parameter>-Duserdb=false</parameter></term> 143 153 <listitem> 144 154 <para>Remove two daemons with dependencies that do not fit … … 148 158 149 159 <varlistentry> 150 <term><parameter>-Dman= false</parameter></term>160 <term><parameter>-Dman=disabled</parameter></term> 151 161 <listitem> 152 162 <para>Prevent the generation of man pages to avoid extra … … 188 198 </listitem> 189 199 </varlistentry> 200 201 <varlistentry> 202 <term><parameter>-Dsysupdate=disabled</parameter></term> 203 <listitem> 204 <para>Do not install the <command>systemd-sysupdate</command> 205 tool. It's designed for automatically upgrading binary distros, 206 so it's useless for a basic Linux system built from source. 207 And it will report errors on boot if it's enabled but not properly 208 configured.</para> 209 </listitem> 210 </varlistentry> 211 212 <varlistentry> 213 <term><parameter>-Dukify=disabled</parameter></term> 214 <listitem> 215 <para>Do not install the <command>systemd-ukify</command> script. 216 At runtime this script requires the 217 <application>pefile</application> Python module that neither LFS 218 nor BLFS provides.</para> 219 </listitem> 220 </varlistentry> 221 190 222 </variablelist> 191 223 … … 214 246 215 247 <screen><userinput remap="adjust">systemctl preset-all</userinput></screen> 216 217 <para>Disable two services for upgrading binary distros. They are useless for218 a basic Linux system built from source, and each one will report an error if219 it's enabled but not configured:</para>220 221 <screen><userinput remap="adjust">systemctl disable systemd-sysupdate{,-reboot}</userinput></screen>222 248 223 249 <!-- dev: 50-pid-max.conf is not removed in BLFS, so I commented the following out.
Note:
See TracChangeset
for help on using the changeset viewer.