linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-02-03 14:47:17 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Changed sed command in traceroute instructions to in-place edit

Browse Source 
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@2542 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Randy McMurchy 2004-08-02 04:02:17 +00:00
parent e12e05b206
commit c54e3c97e4
2 changed files with 22 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
basicnet/netutils/traceroute.xml
View File

@ -45,8 +45,7 @@ url="&traceroute-download-ftp;"/></para></listitem>
<para>Install <application>Traceroute</application> by running the following
commands:</para>
<screen><userinput><command>mv Makefile.in Makefile.in.bak &amp;&amp;
sed 's/-o bin/-o root/' Makefile.in.bak &gt; Makefile.in &amp;&amp;
<screen><userinput><command>sed -i -e 's/-o bin/-o root/' Makefile.in &amp;&amp;
./configure --prefix=/usr &amp;&amp;
make &amp;&amp;
make install &amp;&amp;
@ -57,31 +56,33 @@ make install-man</command></userinput></screen>
<sect2>
<title>Command explanations</title>
<para><screen><command>sed 's/-o bin/-o root/'...</command></screen>
<para><command>sed 's/-o bin/-o root/' Makefile.in</command>:
Adjusts the <filename>Makefile</filename> so that the program is installed
with user root instead of user bin (which doesn't exist on a default
<acronym>LFS</acronym> system).</para>
<para><command>make install</command>: Installs <command>traceroute</command>
with <acronym>SUID</acronym> set to root in the <filename>/usr/sbin</filename> directory. This makes it
possible for all users to execute <command>traceroute</command>. For absolute
security, turn off the <acronym>SUID</acronym> bit in <command>traceroute</command>'s file
permissions with the command:</para>
with <acronym>SUID</acronym> set to root in the <filename>/usr/sbin</filename>
directory. This makes it possible for all users to execute
<command>traceroute</command>. For absolute security, turn off the
<acronym>SUID</acronym> bit in <command>traceroute</command>'s file permissions
with the command:</para>
<screen><command>chmod 0755 /usr/sbin/traceroute</command></screen>
<para>The risk is that if a security problem such as a buffer overflow was
ever found in the <application>Traceroute</application> code, a regular user
on your system could gain root access if the program is
<acronym>SUID</acronym> root. Of course, removing
the <acronym>SUID</acronym> permission also makes it impossible for users other than
root to utilize <command>traceroute</command>, so decide what's right for your
individual situation.</para>
the <acronym>SUID</acronym> permission also makes it impossible for users other
than root to utilize <command>traceroute</command>, so decide what's right for
your individual situation.</para>
<para>Our aim is to be completely <acronym>FHS</acronym> compliant, so if
you do leave the <command>traceroute</command> binary
<acronym>SUID</acronym> root, then you
should move <filename>traceroute</filename> to <filename>/usr/bin</filename>
with the following command:</para>
<para>The goal of <acronym>BLFS</acronym> is to be completely
<acronym>FHS</acronym> compliant, so if you do leave the
<command>traceroute</command> binary <acronym>SUID</acronym> root, then you
should move <filename>traceroute</filename> to
<filename class='directory'>/usr/bin</filename> with the following command:
</para>
<screen><command>mv /usr/sbin/traceroute /usr/bin</command></screen>
<para>This ensures that the binary is in the path for non-root users.</para>
@ -91,7 +92,8 @@ with the following command:</para>
<sect2>
<title>Contents</title>
<para>The <application>Traceroute</application> package contains <userinput>traceroute</userinput>.</para>
<para>The <application>Traceroute</application> package contains
<command>traceroute</command>.</para>
</sect2>
@ -100,7 +102,7 @@ with the following command:</para>
<sect3><title>traceroute</title>
<para><command>traceroute</command> does basically what it says: it traces the
route your packets take from the host you are working on to another host on a
network, showing all the intermediate steps (gateways) along the way.</para>
network, showing all the intermediate hops (gateways) along the way.</para>
</sect3>
</sect2>

3
introduction/welcome/changelog.xml
View File

@ -18,6 +18,9 @@ who wrote what.</para>
<itemizedlist>
<listitem><para>August 1st, 2004 [randy]: Changed sed command in traceroute
instructions to in-place edit.</para></listitem>
<listitem><para>August 1st, 2004 [randy]: Added pkgconfig as an optional
dependency of libxml and Imlib; added configuration file information to
Imlib; added sed command to enable finding PAM headers and added optional