Changeset bdcc868 for chapter08

Timestamp:

07/01/2024 07:01:53 AM (2 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

xry111/arm64

Children:

fd4bf9d

Parents:

2324b83 (diff), 201aa93 (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge remote-tracking branch 'origin/trunk' into xry111/arm64

Location:

chapter08

Files:

• expect.xml (modified) (1 diff)
• glibc.xml (modified) (1 diff)
• grub.xml (modified) (1 diff)
• readline.xml (modified) (1 diff)
• shadow.xml (modified) (1 diff)
• systemd.xml (modified) (2 diffs)
• tcl.xml (modified) (1 diff)

chapter08/expect.xml

@@ -83 +83 @@
             --with-tcl=/usr/lib     \
             --enable-shared         \
+            --disable-rpath         \
             --mandir=/usr/share/man \
             --with-tclinclude=/usr/include</userinput></screen>

chapter08/glibc.xml

@@ -357 +357 @@
     locales necessary for the optimal coverage of tests:</para>
 
-<screen role="nodump"><userinput remap="locale-test">mkdir -pv /usr/lib/locale
-localedef -i C -f UTF-8 C.UTF-8
+<screen role="nodump"><userinput remap="locale-test">localedef -i C -f UTF-8 C.UTF-8
 localedef -i cs_CZ -f UTF-8 cs_CZ.UTF-8
 localedef -i de_DE -f ISO-8859-1 de_DE

chapter08/grub.xml

@@ -122 +122 @@
 
   <para>Making your LFS system bootable with GRUB will be discussed in
-  <xref linkend="ch-bootable-grub"/>.</para>
+  <xref linkend="ch-bootable-grub" role='.'/></para>
 
   </sect2>

chapter08/readline.xml

@@ -49 +49 @@
 <screen><userinput remap="pre">sed -i '/MV.*old/d' Makefile.in
 sed -i '/{OLDSUFF}/c:' support/shlib-install</userinput></screen>
+
+    <para>Prevent hard coding library search paths (rpath) into
+    the shared libraries.  This package does not need rpath for an
+    installation into the standard location, and rpath may sometimes cause
+    unwanted effects or even security issues:</para>
+
+<screen><userinput>sed -i 's/-Wl,-rpath,[^ ]*//' support/shobj-conf</userinput></screen>
 
     <para>Now fix a problem identified upstream:</para>

chapter08/shadow.xml

@@ -243 +243 @@
           even though the account has been created correctly. That is why we
           created the group <systemitem class="groupname">users</systemitem>
-          with this group ID in <xref linkend='ch-tools-createfiles'/>.</para>
+          with this group ID in
+          <xref linkend='ch-tools-createfiles' role='.'/></para>
 
         </listitem>

chapter08/systemd.xml

@@ -48 +48 @@
  <screen><userinput remap="pre">sed -i -e 's/GROUP="render"/GROUP="video"/' \
        -e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in</userinput></screen>
-
-    <!-- https://github.com/systemd/systemd/pull/30549 -->
-    <para>Now fix a security vulnerability in the DNSSEC verification of
-    <command>systemd-resolved</command> and a bug breaking running
-    <command>systemd-analyze verify</command> on an instantiated systemd
-    unit:</para>
-
-<screen><userinput remap='pre'>patch -Np1 -i ../&systemd-upstream-patch;</userinput></screen>
 
     <para>Prepare systemd for compilation:</para>
@@ -233 +225 @@
 ninja test</userinput></screen>
 
-    <!-- This test needs /run/systemd/inaccessible/sock, which only exists
+    <!-- test-namespace needs /run/systemd/inaccessible/sock, which only exists
          after initializing the system with systemd.  -->
-    <para>One test named <literal>systemd:core / test-namespace</literal>
-    is known to fail in the LFS chroot environment.  Some other tests may
+    <para>Three tests: <literal>systemd:core / test-namespace</literal>,
+    <literal>test-chase</literal>, and <literal>test-systemd-tmpfiles</literal>,
+    are known to fail in the LFS chroot environment.  Some other tests may
     fail because they depend on various kernel configuration options.</para>
 

chapter08/tcl.xml

@@ -56 +56 @@
 cd unix
 ./configure --prefix=/usr           \
-            --mandir=/usr/share/man</userinput></screen>
+            --mandir=/usr/share/man \
+            --disable-rpath</userinput></screen>
+
+    <variablelist>
+      <title>The meaning of the new configure parameters:</title>
+
+      <varlistentry>
+        <term><parameter>--disable-rpath</parameter></term>
+        <listitem>
+          <para>This parameter prevents hard coding library search paths
+          (rpath) into the binary executable files and shared libraries.
+          This package does not need rpath for an installation into the
+          standard location, and rpath may sometimes cause unwanted effects
+          or even security issues.</para>
+        </listitem>
+      </varlistentry>
+    </variablelist>
 
     <para>Build the package:</para>