diff --git a/basicnet/netprogs/tcpwrappers.xml b/basicnet/netprogs/tcpwrappers.xml index 2b1f4fa205..8f9bfa2ea0 100644 --- a/basicnet/netprogs/tcpwrappers.xml +++ b/basicnet/netprogs/tcpwrappers.xml @@ -62,8 +62,11 @@ commands: patch -Np1 -i ../tcp_wrappers-&tcpwrappers-version;-shared_lib_plus_plus-1.patch && sed -i -e "s,^extern char \*malloc();,/* & */," scaffold.c && -make REAL_DAEMON_DIR=/usr/sbin STYLE=-DPROCESS_OPTIONS linux && -make install +make REAL_DAEMON_DIR=/usr/sbin STYLE=-DPROCESS_OPTIONS linux + +Now, as the root user: + +make install @@ -92,14 +95,14 @@ and all directories in the path leading to those files, should be accessible but not writable for unprivileged users (mode 755 or mode 555). Do not install the wrapper set-uid. -Then perform the following edits on the +As the root user, perform the following edits on the /etc/inetd.conf configuration file: /etc/inetd.conf -finger stream tcp nowait nobody /usr/sbin/in.fingerd in.fingerd +finger stream tcp nowait nobody /usr/sbin/in.fingerd in.fingerd becomes: -finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd +finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd The finger server is used as an example here. @@ -187,7 +190,6 @@ to become tcpwrappers-aware. libwrap.[so,a] - diff --git a/postlfs/security/shadow.xml b/postlfs/security/shadow.xml index 2e97b23eff..fe9636479a 100644 --- a/postlfs/security/shadow.xml +++ b/postlfs/security/shadow.xml @@ -71,7 +71,7 @@ this will allow programs like login and commands: patch -Np1 -i ../shadow-&shadow-version;-fix_lastlog-1.patch && -./configure --libdir=/usr/lib --enable-shared \ +./configure --libdir=/lib --enable-shared \ --with-libpam --without-libcrack && sed -i 's/groups$(EXEEXT) //' src/Makefile && sed -i '/groups/d' man/Makefile && diff --git a/server/other/xinetd.xml b/server/other/xinetd.xml index d8a00f8d91..261b1b272b 100644 --- a/server/other/xinetd.xml +++ b/server/other/xinetd.xml @@ -8,8 +8,8 @@ - - + + ]> @@ -19,6 +19,8 @@ xinetd-&xinetd-version; + +Xinetd Introduction to <application>xinetd</application> @@ -55,16 +57,21 @@ Daemon, a secure replacement for inetd. commands: ./configure --prefix=/usr && -make && -make install +make + +Now, as the root user: + +make install Configuring <application>xinetd</application> -Config files +Config files /etc/xinetd.conf + +/etc/xinetd.conf Configuration Information @@ -73,35 +80,38 @@ make install /usr/sbin, rather than the default path of /usr/etc, and install the xinetd configuration file by running the following -command: +command as the root user: -sed -e 's/etc/sbin/g' xinetd/sample.conf > /etc/xinetd.conf +sed -e 's/etc/sbin/g' xinetd/sample.conf > /etc/xinetd.conf The format of the /etc/xinetd.conf is -documented in the xinetd.conf man page. Further information can be -found at . +documented in the xinetd.conf.5 man page. Further +information can be found at . -Install the /etc/rc.d/init.d/xinetd -init script included in the -package. +As the root user, install the +/etc/rc.d/init.d/xinetd init script included in the + package. + +xinetd -make install-xinetd +make install-xinetd -Now, use the new boot script to start xinetd: +As the root user, use the new boot script to start +xinetd: -/etc/rc.d/init.d/xinetd start +/etc/rc.d/init.d/xinetd start Checking the /var/log/daemon.log file should prove quite entertaining. This file may contain entries similar to the following: -Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rlogind is not +Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rlogind is not executable [line=29] Aug 22 21:40:21 dps10 xinetd[2696]: Error parsing attribute server - DISABLING SERVICE [line=29] Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rshd is not -executable [line=42] +executable [line=42] These errors are because most of the servers xinetd is trying to control are not installed yet. @@ -112,28 +122,51 @@ is trying to control are not installed yet. Contents -The xinetd package contains -xinetd, -itox and -xconv.pl. + +Installed Programs +Installed Libraries +Installed Directories - + +itox, xconv.pl and xinetd +None +None + + -Description + +Short Descriptions + -xinetd -xinetd is the Internet services daemon. + +itox +is a utility used for converting +inetd.conf files to +xinetd.conf format. + +itox + + -itox -itox is a utility used for converting -inetd.conf files to -xinetd.conf format. + +xconv.pl +is a Perl script used for +converting inetd.conf files to +xinetd.conf format, similar to +itox. + +xconv.pl + + -xconv.pl -xconv.pl is a Perl script -used for converting inetd.conf files to -xinetd.conf format, similar to -itox. + +xinetd +is the Internet services daemon. + +xinetd + + +