Changes in chapter08/systemd.xml [7152faa:ffecb9e]
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
chapter08/systemd.xml
r7152faa rffecb9e 1 <?xml version="1.0" encoding=" UTF-8"?>1 <?xml version="1.0" encoding="ISO-8859-1"?> 2 2 <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" 3 3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ … … 48 48 <screen><userinput remap="pre">sed -i -e 's/GROUP="render"/GROUP="video"/' \ 49 49 -e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in</userinput></screen> 50 51 <!-- https://github.com/systemd/systemd/pull/30549 -->52 <para>Now fix a security vulnerability in the DNSSEC verification of53 <command>systemd-resolved</command>:</para>54 55 <screen><userinput remap='pre'>sed -e '/return FLAGS_SET.*AUTHENTICATED/s/(t/(dt/' \56 -i src/resolve/resolved-dns-transaction.c</userinput></screen>57 50 58 51 <para>Prepare systemd for compilation:</para> … … 70 63 -Dsysusers=false \ 71 64 -Drpmmacrosdir=no \ 72 -Dhomed= disabled\65 -Dhomed=false \ 73 66 -Duserdb=false \ 74 -Dman= disabled\67 -Dman=false \ 75 68 -Dmode=release \ 76 69 -Dpamconfdir=no \ 77 70 -Ddev-kvm-mode=0660 \ 78 71 -Dnobody-group=nogroup \ 79 -Dsysupdate=disabled \80 -Dukify=disabled \81 72 -Ddocdir=/usr/share/doc/systemd-&systemd-version; \ 82 73 ..</userinput></screen> … … 149 140 150 141 <varlistentry> 151 <term><parameter>-Dhomed=disabled</parameter> and 152 <parameter>-Duserdb=false</parameter></term> 142 <term><parameter>-D{userdb,homed}=false</parameter></term> 153 143 <listitem> 154 144 <para>Remove two daemons with dependencies that do not fit … … 158 148 159 149 <varlistentry> 160 <term><parameter>-Dman= disabled</parameter></term>150 <term><parameter>-Dman=false</parameter></term> 161 151 <listitem> 162 152 <para>Prevent the generation of man pages to avoid extra … … 198 188 </listitem> 199 189 </varlistentry> 200 201 <varlistentry>202 <term><parameter>-Dsysupdate=disabled</parameter></term>203 <listitem>204 <para>Do not install the <command>systemd-sysupdate</command>205 tool. It's designed for automatically upgrading binary distros,206 so it's useless for a basic Linux system built from source.207 And it will report errors on boot if it's enabled but not properly208 configured.</para>209 </listitem>210 </varlistentry>211 212 <varlistentry>213 <term><parameter>-Dukify=disabled</parameter></term>214 <listitem>215 <para>Do not install the <command>systemd-ukify</command> script.216 At runtime this script requires the217 <application>pefile</application> Python module that neither LFS218 nor BLFS provides.</para>219 </listitem>220 </varlistentry>221 222 190 </variablelist> 223 191 … … 246 214 247 215 <screen><userinput remap="adjust">systemctl preset-all</userinput></screen> 216 217 <para>Disable two services for upgrading binary distros. They are useless for 218 a basic Linux system built from source, and each one will report an error if 219 it's enabled but not configured:</para> 220 221 <screen><userinput remap="adjust">systemctl disable systemd-sysupdate{,-reboot}</userinput></screen> 248 222 249 223 <!-- dev: 50-pid-max.conf is not removed in BLFS, so I commented the following out.
Note:
See TracChangeset
for help on using the changeset viewer.