[Clfs-commits] [Cross-LFS]Cross-LFS Book branch, systemd, updated. clfs-2.1.0-764-gda7d5fc
git
git at cross-lfs.org
Thu Apr 17 23:30:31 PDT 2014
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Cross-LFS Book".
The branch, systemd has been updated
via da7d5fc25750aa09b4beb744a1431b61072cb3a5 (commit)
via f3c06b39acf3bbb15c65bcc872cb07bf0b81bc82 (commit)
via b39266533e49a515a3665d1c61c6d1a9851b172f (commit)
from 5067b0bd4308657fed0519b7a269083c4f147537 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit da7d5fc25750aa09b4beb744a1431b61072cb3a5
Author: Chris Staub <chris at beaker67.com>
Date: Fri Apr 18 02:30:22 2014 -0400
Updates to changin ownership page
diff --git a/BOOK/chroot/common/changingowner.xml b/BOOK/chroot/common/changingowner.xml
index 7dbb145..c1f5046 100644
--- a/BOOK/chroot/common/changingowner.xml
+++ b/BOOK/chroot/common/changingowner.xml
@@ -10,32 +10,24 @@
<title>Changing Ownership</title>
- <note>
- <para>This step is not optional as some of the binaries in
- <filename class="directory">/tools</filename> are set u+s.
- Leaving the permissions as is could cause some commands,
- <command>mount</command> in particular, to fail later.</para>
- </note>
-
<para os="a">Currently, the <filename class="directory">/tools</filename>
and <filename class="directory">/cross-tools</filename> directories
are owned by the user <emphasis>clfs</emphasis>, a user that
- exists only on the host system. Although the <filename
+ exists only on the host system. Although <filename
class="directory">/tools</filename> and <filename
- class="directory">/cross-tools</filename> directories can be deleted
- once the CLFS system has been finished, they can be retained to build
+ class="directory">/cross-tools</filename> can be deleted once the CLFS
+ system has been finished, they can be retained to build
additional CLFS systems. If the <filename class="directory">/tools</filename>
and <filename class="directory">/cross-tools</filename> directories are
kept as is, the files are owned by a user ID without a corresponding
account. This is dangerous because a user account created later could
- get this same user ID and would own the <filename
- class="directory">/tools</filename> directory and all the files therein,
- thus exposing these files to possible malicious manipulation.</para>
+ get this same user ID and would own these directories and all the files
+ therein, thus exposing those files to possible malicious manipulation.</para>
- <para os="b">To avoid this issue, add the <systemitem
- class="username">clfs</systemitem> user to the new CLFS system later when
- creating the <filename>/etc/passwd</filename> file, taking care to assign
- it the same user and group IDs as on the host system. Alternatively,
+ <para os="b">One possible fix for this issue might be to add the
+ <systemitem class="username">clfs</systemitem> user to the new CLFS system
+ later when creating the <filename>/etc/passwd</filename> file, taking care
+ to assign it the same user and group IDs as on the host system. Alternatively,
assign the contents of the <filename class="directory">/tools</filename>
and <filename class="directory">/cross-tools</filename> directories to
user <systemitem class="username">root</systemitem> by running the
commit f3c06b39acf3bbb15c65bcc872cb07bf0b81bc82
Author: Chris Staub <chris at beaker67.com>
Date: Fri Apr 18 02:21:58 2014 -0400
Prevent util-linux in /tools from making anything suid
diff --git a/BOOK/introduction/common/changelog.xml b/BOOK/introduction/common/changelog.xml
index 22a4a49..3241ed2 100644
--- a/BOOK/introduction/common/changelog.xml
+++ b/BOOK/introduction/common/changelog.xml
@@ -37,6 +37,16 @@
-->
<listitem>
+ <para>18 April 2014</para>
+ <itemizedlist>
+ <listitem>
+ <para>[Chris] - Added --disable-makeinstall-setuid to temp-system
+ Util-linux, as nothing there needs to be suid.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
<para>16 April 2014</para>
<itemizedlist>
<listitem>
diff --git a/BOOK/temp-system/64/util-linux.xml b/BOOK/temp-system/64/util-linux.xml
index fc92dd6..879b241 100644
--- a/BOOK/temp-system/64/util-linux.xml
+++ b/BOOK/temp-system/64/util-linux.xml
@@ -28,7 +28,7 @@
<screen os="be"><userinput>CC="${CC} ${BUILD64}" PKG_CONFIG= ./configure --prefix=/tools \
--build=${CLFS_HOST} --host=${CLFS_TARGET} \
- --disable-makeinstall-chown</userinput></screen>
+ --disable-makeinstall-chown --disable-makeinstall-setuid</userinput></screen>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="../common/util-linux.xml"
diff --git a/BOOK/temp-system/common/util-linux.xml b/BOOK/temp-system/common/util-linux.xml
index 763a875..6e6f78b 100644
--- a/BOOK/temp-system/common/util-linux.xml
+++ b/BOOK/temp-system/common/util-linux.xml
@@ -28,7 +28,7 @@
<screen os="b"><userinput>PKG_CONFIG= ./configure --prefix=/tools \
--build=${CLFS_HOST} --host=${CLFS_TARGET} \
- --disable-makeinstall-chown</userinput></screen>
+ --disable-makeinstall-chown --disable-makeinstall-setuid</userinput></screen>
<variablelist os="c">
<title>The meaning of the new configure option:</title>
diff --git a/BOOK/temp-system/multilib/util-linux.xml b/BOOK/temp-system/multilib/util-linux.xml
index 10317c7..7426ab1 100644
--- a/BOOK/temp-system/multilib/util-linux.xml
+++ b/BOOK/temp-system/multilib/util-linux.xml
@@ -28,7 +28,7 @@
<screen os="be"><userinput>CC="${CC} ${BUILD64}" PKG_CONFIG= ./configure --prefix=/tools \
--build=${CLFS_HOST} --host=${CLFS_TARGET} \
- --libdir=/tools/lib64 --disable-makeinstall-chown</userinput></screen>
+ --libdir=/tools/lib64 --disable-makeinstall-chown --disable-makeinstall-setuid</userinput></screen>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="../common/util-linux.xml"
commit b39266533e49a515a3665d1c61c6d1a9851b172f
Author: Chris Staub <chris at beaker67.com>
Date: Fri Apr 18 02:21:16 2014 -0400
Updated date
diff --git a/BOOK/general.ent b/BOOK/general.ent
index 8b2d6ed..581d591 100644
--- a/BOOK/general.ent
+++ b/BOOK/general.ent
@@ -2,7 +2,7 @@
<!ENTITY month "04"> <!-- Use two digits -->
<!ENTITY month_name "April">
-<!ENTITY day "16"> <!-- Use two digits -->
+<!ENTITY day "18"> <!-- Use two digits -->
<!ENTITY year "2014"> <!-- Use four digits -->
<!ENTITY releasedate "&month_name; &day;, &year;">
-----------------------------------------------------------------------
Summary of changes:
BOOK/chroot/common/changingowner.xml | 26 +++++++++-----------------
BOOK/general.ent | 2 +-
BOOK/introduction/common/changelog.xml | 10 ++++++++++
BOOK/temp-system/64/util-linux.xml | 2 +-
BOOK/temp-system/common/util-linux.xml | 2 +-
BOOK/temp-system/multilib/util-linux.xml | 2 +-
6 files changed, 23 insertions(+), 21 deletions(-)
hooks/post-receive
--
Cross-LFS Book
More information about the Clfs-commits
mailing list