[blfs-book] r18259 - in trunk/BOOK: introduction/welcome postlfs/filesystems

[via blfs-book]

Author: renodr
Date: Sun Feb  5 13:27:47 2017
New Revision: 18259

Log:
Add ntfs-3g security patch

Modified:
   trunk/BOOK/introduction/welcome/changelog.xml
   trunk/BOOK/postlfs/filesystems/ntfs-3g.xml

Modified: trunk/BOOK/introduction/welcome/changelog.xml
==============================================================================
--- trunk/BOOK/introduction/welcome/changelog.xml       Sun Feb  5 12:44:26 
2017        (r18258)
+++ trunk/BOOK/introduction/welcome/changelog.xml       Sun Feb  5 13:27:47 
2017        (r18259)
@@ -46,6 +46,10 @@
       <para>February 5th, 2017</para>
       <itemizedlist>
         <listitem>
+          <para>[renodr] - Add a security patch from upstream to ntfs-3g. Fixes
+          <ulink url="&blfs-ticket-root;8851">#8851</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[bdubbs] - Update to shadow-4.4.</para>
         </listitem>
         <listitem>

Modified: trunk/BOOK/postlfs/filesystems/ntfs-3g.xml
==============================================================================
--- trunk/BOOK/postlfs/filesystems/ntfs-3g.xml  Sun Feb  5 12:44:26 2017        
(r18258)
+++ trunk/BOOK/postlfs/filesystems/ntfs-3g.xml  Sun Feb  5 13:27:47 2017        
(r18259)
@@ -78,6 +78,16 @@
       </listitem>
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink 
url="&patch-root;/ntfs-3g-&ntfs-3g-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
+
     <bridgehead renderas="sect3">Ntfs-3g Dependencies</bridgehead>
 
     <bridgehead renderas="sect4">Recommended</bridgehead>
@@ -114,7 +124,8 @@
       commands:
     </para>
 
-<screen><userinput>./configure --prefix=/usr --disable-static 
--with-fuse=external &amp;&amp;
+<screen><userinput>patch -Np1 -i 
../ntfs-3g-&ntfs-3g-version;-security_fix-1.patch &amp;&amp;
+./configure --prefix=/usr --disable-static --with-fuse=external &amp;&amp;
 make</userinput></screen>
 
     <para>
@@ -147,6 +158,12 @@
       href="../../xincludes/static-libraries.xml"/>
 
     <para>
+      <command>patch -Np1 -i ...</command>: This command applies a security
+      patch from upstream to fix ntfs-3g on systems that use setuid for the
+      executable.
+    </para>
+
+    <para>
       <parameter>--with-fuse=external</parameter>: This switch dynamically
       links <command>lowntfs-3g</command> and <command>ntfs-3g</command> to
       external libfuse. Omit it if you have not installed <xref
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page