glfs/postlfs/security/gnupg.xml

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
  <!ENTITY % general-entities SYSTEM "../../general.ent">
  %general-entities;

  <!ENTITY gnupg-download-http "http://public.ftp.planetmirror.com/pub/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-download-ftp  "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-size          "2.3 MB">
  <!ENTITY gnupg-buildsize     "26 MB">
  <!ENTITY gnupg-time          "0.44 SBU">
]>

<sect1 id="gnupg" xreflabel="GnuPG-&gnupg-version;">
<?dbhtml filename="gnupg.html"?>
<title>GnuPG-&gnupg-version;</title>

<sect2>
<title>Introduction to <application>GnuPG</application></title>

<para>The <application>GnuPG</application> package contains a public/private
key encryptor. This is
becoming useful for signing files or emails as proof of identity and
preventing tampering with contents of the file or email.</para>

<sect3><title>Package information</title>
<itemizedlist spacing='compact'>
<listitem><para>Download (HTTP): <ulink
url="&gnupg-download-http;"/></para></listitem>
<listitem><para>Download (FTP): <ulink
url="&gnupg-download-ftp;"/></para></listitem>
<listitem><para>Download size: &gnupg-size;</para></listitem>
<listitem><para>Estimated Disk space required:
&gnupg-buildsize;</para></listitem>
<listitem><para>Estimated build time:
&gnupg-time;</para></listitem></itemizedlist>
</sect3>

<sect3><title><application>GnuPG</application> dependencies</title>
<sect4><title>Optional</title>
<para><xref linkend="openldap"/></para></sect4>
</sect3>

</sect2>

<sect2>
<title>Installation of <application>GnuPG</application></title>

<para>Install <application>GnuPG</application> by running the following commands:</para>

<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/lib &amp;&amp;
make &amp;&amp;
make install &amp;&amp;
chmod 4755 /usr/bin/gpg</command></userinput></screen>

</sect2>

<sect2>
<title>Command explanations</title>

<para><parameter>--libexecdir=/usr/lib</parameter>: This command
creates a <filename class="directory">gnupg</filename> directory in
<filename class="directory">/usr/lib</filename> instead of
<filename class="directory">/usr/libexec</filename>.</para>

<para><command>chmod 4755 /usr/bin/gpg</command>: We install
<command>gpg</command> setuid root to avoid swapping out of
sensitive data.</para>

</sect2>

<sect2>
<title>Contents</title>

<para>The <application>GnuPG</application> package contains <command>gpg</command>,
<command>gpgsplit</command> and <command>gpgv</command>.</para>

</sect2>

<sect2><title>Description</title>

<sect3><title>gpg</title>
<para><command>gpg</command> is the backend (command-line interface) for
this Open<acronym>PGP</acronym>
implementation.</para></sect3>

<sect3><title>gpgsplit</title>
<para><command>gpgsplit</command> separates key rings.</para></sect3>

<sect3><title>gpgv</title>
<para><command>gpgv</command> is a verify only version of
<command>gpg</command>.</para></sect3>

</sect2>

</sect1>