linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-24 23:32:12 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'trunk' of git.linuxfromscratch.org:blfs into trunk

Browse Source
This commit is contained in:
Thomas Trepl 2024-01-25 15:22:29 +01:00
commit 3d75ab66a7
5 changed files with 54 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
general/genlib/keyutils-test-kernel.xml Normal file
View File

@ -0,0 +1,18 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE note PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
<!-- Automatically generated by kernel-config.py
DO NOT EDIT! -->
<screen><emphasis role='blue'>S</emphasis>ecurity options ---&gt;
[*] <emphasis role='blue'>E</emphasis>nable access key retention support [KEYS]
[*] <emphasis role='blue'>L</emphasis>arge payload keys [BIG_KEYS]
[*] <emphasis role='blue'>D</emphasis>iffie-Hellman operations on retained keys [KEY_DH_OPERATIONS]
-*- <emphasis role='blue'>C</emphasis>ryptographic API ---&gt; [CRYPTO]
<emphasis role='blue'>P</emphasis>ublic-key cryptography ---&gt;
&lt;*/M&gt; <emphasis role='blue'>D</emphasis>H (Diffie-Hellman) [CRYPTO_DH]
<emphasis role='blue'>C</emphasis>ertificates for signature checking ---&gt;
[*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of trusted keys [SYSTEM_TRUSTED_KEYRING]
[*] <emphasis role='blue'>P</emphasis>rovide a keyring to which extra trustable keys may be added
... [SECONDARY_TRUSTED_KEYRING]
[*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of blacklisted keys [SYSTEM_BLACKLIST_KEYRING]</screen>

28
general/genlib/keyutils.xml
View File

@ -68,8 +68,29 @@
</listitem>
</itemizedlist>
<bridgehead renderas="sect3">Keyutils Dependencies</bridgehead>
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional">
<xref linkend="lsb-tools"/> (referred by the test suite)
</para>
</sect2>
<sect2 role="kernel" id="keyutils-test-kernel">
<title>Kernel Configuration</title>
<para>
If running the test suite, some tests needs the following kernel
features enabled:
</para>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
href="keyutils-test-kernel.xml"/>
<indexterm zone="keyutils keyutils-test-kernel">
<primary sortas="d-keyutils">keyutils (testing)</primary>
</indexterm>
</sect2>
<sect2 role="installation">
<title>Installation of keyutils</title>
@ -95,10 +116,9 @@
<screen role="root" remap="test"><userinput>make -k test</userinput></screen>
<para>
Note that several tests will fail if certain uncommon kernel options
were not used when the kernel was built. These include CONFIG_BIG_KEYS,
CONFIG_KEY_DH_OPERATIONS, CONFIG_CRYPTO_DH,
CONFIG_SECONDARY_TRUSTED_KEYRING, and CONFIG_SYSTEM_BLACKLIST_KEYRING.
If <xref linkend='lsb-tools'/> is not installed, the test suite will
output some lines complaining the <command>lsb_release</command>
command not available but it won't affect the test result.
</para>
</sect2>

8
kernel-config/general/genlib/keyutils-test.toml Normal file
View File

@ -0,0 +1,8 @@
BIG_KEYS='*'
KEYS='*'
KEY_DH_OPERATIONS='*'
CRYPTO = { value = '*', forced = '*' }
CRYPTO_DH='*M'
SYSTEM_TRUSTED_KEYRING='*'
SECONDARY_TRUSTED_KEYRING='*'
SYSTEM_BLACKLIST_KEYRING='*'

4
postlfs/security/cryptsetup.xml
View File

@ -185,7 +185,9 @@ CONFIG_CRYPTO_TWOFISH_X86_64</literal></screen>
<parameter>--disable-asciidoc</parameter>: This switch disables
regeneration of the man pages. Remove this switch if you have
<xref linkend="asciidoctor" role="nodep"/> installed and wish to
regenerate the man pages.
regenerate the man pages. Note that even if this switch is used,
the pre-generated man pages are shipped in the tarball and they'll
still be installed.
</para>
</sect2>

2
postlfs/security/linux-pam.xml
View File

@ -90,7 +90,7 @@
</listitem>
<listitem>
<para>
Download size &linux-pam-docs-size;
Download size: &linux-pam-docs-size;
</para>
</listitem>
</itemizedlist>