Author: robert
Date: 2011-02-03 22:34:00 -0700 (Thu, 03 Feb 2011)
New Revision: 1613
Modified:
trunk/BOOK/chapter01/changelog.xml
trunk/BOOK/chapter06/shadow.xml
trunk/BOOK/chapter06/vim.xml
trunk/BOOK/general.ent
Log:
Build Vim with -D_FORTIFY_SOURCE=1 only on the file that needs it, not the
entire package. Use SHA512 with Shadow passwords. Install the Korean and
Chinese man-pages for Shadow, since man-db can now format them.
Modified: trunk/BOOK/chapter01/changelog.xml
===================================================================
--- trunk/BOOK/chapter01/changelog.xml 2011-02-04 04:36:12 UTC (rev 1612)
+++ trunk/BOOK/chapter01/changelog.xml 2011-02-04 05:34:00 UTC (rev 1613)
@@ -38,9 +38,23 @@
-->
<listitem>
+ <para>2011-02-04</para>
+ <itemizedlist>
+ <listitem>
+ <para>[robert] - Build Vim with -D_FORTIFY_SOURCE=1 only on the file
+ that needs it, not the entire package.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
<para>2011-02-03</para>
<itemizedlist>
<listitem>
+ <para>[robert] - Use SHA512 with Shadow passwords. Install the Korean
+ and Chinese man-pages, since man-db can now format them.</para>
+ </listitem>
+ <listitem>
<para>[robert] - Added GCC options to build Grub.</para>
</listitem>
<listitem>
Modified: trunk/BOOK/chapter06/shadow.xml
===================================================================
--- trunk/BOOK/chapter06/shadow.xml 2011-02-04 04:36:12 UTC (rev 1612)
+++ trunk/BOOK/chapter06/shadow.xml 2011-02-04 05:34:00 UTC (rev 1613)
@@ -62,20 +62,15 @@
<screen><userinput remap="configure">sed -i 's/groups$(EXEEXT) //'
src/Makefile.in
find man -name Makefile.in -exec sed -i 's/groups\.1 / /' {}
\;</userinput></screen>
- <para>Disable the installation of Chinese and Korean manual pages, since
- Man-DB cannot format them properly:</para>
-
-<screen><userinput remap="configure">sed -i -e 's/ ko//' -e 's/ zh_CN zh_TW//'
man/Makefile.in</userinput></screen>
-
<para id="shadow-login_defs">Instead of using the default
<emphasis>crypt</emphasis> method, use the more secure
- <emphasis>MD5</emphasis> method of password encryption, which also allows
- passwords longer than 8 characters. It is also necessary to change the
- obsolete <filename class="directory">/var/spool/mail</filename> location
- for user mailboxes that Shadow uses by default to the <filename
+ <emphasis>SHA-512</emphasis> method of password encryption, which also
+ allows passwords longer than 8 characters. It is also necessary to change
+ the obsolete <filename class="directory">/var/spool/mail</filename>
+ location for user mailboxes that Shadow uses by default to the <filename
class="directory">/var/mail</filename> location used currently:</para>
-<screen><userinput remap="configure">sed -i -e 's@#ENCRYPT_METHOD
DES@ENCRYPT_METHOD MD5@' \
+<screen><userinput remap="configure">sed -i -e 's@#ENCRYPT_METHOD
DES@ENCRYPT_METHOD SHA512@' \
-e 's@/var/spool/mail@/var/mail@' etc/login.defs</userinput></screen>
<note>
Modified: trunk/BOOK/chapter06/vim.xml
===================================================================
--- trunk/BOOK/chapter06/vim.xml 2011-02-04 04:36:12 UTC (rev 1612)
+++ trunk/BOOK/chapter06/vim.xml 2011-02-04 05:34:00 UTC (rev 1613)
@@ -69,6 +69,14 @@
</variablelist>
+ <para>The <option>-D_FORTIFY_SOURCE=2</option> option produces a false
+ positive in Vim, so Vim uses <option>-D_FORTIFY_SOURCE=1</option> to relax
+ the checking. The following commands reconfigure Vim to relax the checking
+ only on a single file, rather than the entire package:</para>
+
+<screen><userinput remap="make">sed -i 's@-D_FORTIFY_SOURCE=1@@'
src/auto/config.mk
+sed -i 's|$(CCC) -o $@ eval.c|$(CCC) -D_FORTIFY_SOURCE=1 -o $@ eval.c|'
src/Makefile</userinput></screen>
+
<para>Compile the package:</para>
<screen><userinput remap="make">make</userinput></screen>
Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent 2011-02-04 04:36:12 UTC (rev 1612)
+++ trunk/BOOK/general.ent 2011-02-04 05:34:00 UTC (rev 1613)
@@ -1,5 +1,5 @@
-<!ENTITY version "SVN-20110203">
-<!ENTITY releasedate "February 03, 2011">
+<!ENTITY version "SVN-20110204">
+<!ENTITY releasedate "February 04, 2011">
<!ENTITY copyrightdate "1999-2011"><!-- jhalfs needs a literal dash, not
– -->
<!ENTITY milestone "1.0">
<!ENTITY generic-version "development"> <!-- Use "development", "testing", or
"x.y[-pre{x}]" -->
--
http://linuxfromscratch.org/mailman/listinfo/hlfs-book
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
