r6246 - in trunk/BOOK: . introduction/welcome postlfs/security

[randy]

Author: randy
Date: 2006-07-04 10:19:05 -0600 (Tue, 04 Jul 2006)
New Revision: 6246

Modified:
   trunk/BOOK/general.ent
   trunk/BOOK/introduction/welcome/changelog.xml
   trunk/BOOK/postlfs/security/linux-pam.xml
Log:
Added a command to the Linux-PAM instructions to alter the unix_chkpwd password 
helper setuid, thanks to Joerg Billeter for pointing this out

Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent      2006-07-03 03:01:00 UTC (rev 6245)
+++ trunk/BOOK/general.ent      2006-07-04 16:19:05 UTC (rev 6246)
@@ -1,8 +1,8 @@
-<!ENTITY day          "03">                   <!-- Always 2 digits -->
+<!ENTITY day          "04">                   <!-- Always 2 digits -->
 <!ENTITY month        "07">                   <!-- Always 2 digits -->
 <!ENTITY year         "2006">
 <!ENTITY version      "svn-&year;&month;&day;">
-<!ENTITY releasedate  "July &day;rd, &year;">
+<!ENTITY releasedate  "July &day;th, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
 <!ENTITY lfs-version  "development">          <!-- 
version|stable|testing|unstable|development] -->
@@ -472,6 +472,7 @@
 <!ENTITY gnome-games-version          "2.14.2">
 <!ENTITY sound-juicer-version         "2.14.4">
 <!ENTITY totem-version                "1.4.2">
+<!ENTITY gnome-screensaver-version    "2.14.2">
 <!ENTITY gdm-version                  "2.14.9">
 
 <!-- Accessibility -->

Modified: trunk/BOOK/introduction/welcome/changelog.xml
===================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml       2006-07-03 03:01:00 UTC 
(rev 6245)
+++ trunk/BOOK/introduction/welcome/changelog.xml       2006-07-04 16:19:05 UTC 
(rev 6246)
@@ -42,6 +42,17 @@
 -->
 
     <listitem>
+      <para>July 4th, 2006</para>
+      <itemizedlist>
+        <listitem>
+          <para>[randy] - Added a command to the Linux-PAM instructions to
+          alter the unix_chkpwd password helper setuid, thanks to J�rg Billeter
+          for pointing this out.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>July 3rd, 2006</para>
       <itemizedlist>
         <listitem>

Modified: trunk/BOOK/postlfs/security/linux-pam.xml
===================================================================
--- trunk/BOOK/postlfs/security/linux-pam.xml   2006-07-03 03:01:00 UTC (rev 
6245)
+++ trunk/BOOK/postlfs/security/linux-pam.xml   2006-07-04 16:19:05 UTC (rev 
6246)
@@ -122,6 +122,7 @@
     <para>Now, as the <systemitem class="username">root</systemitem> 
user:</para>
 
 <screen role="root"><userinput>make install &amp;&amp;
+chmod -v 4755 /lib/security/unix_chkpwd &amp;&amp;
 mv -v /lib/security/pam_tally /sbin &amp;&amp;
 mv -v /usr/lib/libpam*.so.0* /lib &amp;&amp;
 ln -v -sf ../../lib/libpam.so.0.81.3 /usr/lib/libpam.so &amp;&amp;
@@ -162,6 +163,11 @@
     allows the local administrator to choose which configuration file setup to
     use.</para>
 
+    <para><command>chmod -v 4755 /lib/security/unix_chkpwd</command>:
+    The <command>unix_chkpwd</command> password-helper program must be setuid
+    so that non-<systemitem class="username">root</systemitem> processes can
+    access the shadow-password file.</para>
+
     <para><command>mv -v /lib/security/pam_tally /sbin</command>: The
     <command>pam_tally</command> program is designed to be run by the system
     administrator, possibly in single-user mode, so it is moved to the

-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page