On Sunday 20 February 2011 11:10:27 Mr. T wrote:
Hi all,
I just wanted to enquire about the current build status really.
Can anyone tell me if SVN-20110204 currently builds cleanly or are there
any known issues ?
I've had a look around the archives but there isn't much chatter on
there
Hi.
This is a short to-do list for immediate needs. If any of you have idea please
feel free to discuss it or add to it, etc.
This is all easy and doable stuff. The book seems to be building without issues
now, with SSP, _FORTIFY_SOURCE, and -fPIE enabled in GCC. More is coming,
please be
On Sunday 22 August 2010 08:10:55 Andrew Benton wrote:
On 18/07/10 13:56, Jeremy Huntwork wrote:
There's a fix available here:
http://www.cs.unipr.it/pipermail/ppl-devel/2010-January/015872.html
I've added those 4 files into a single patch here:
On Tuesday July 6 2010 02:09:27 pm Sebastian Plotz wrote:
What about changing from Sysklogd to syslog-ng?
- syslog-ng is under active development
- sysklogd is quiet old (last version released in 2007)
- we just need to run one daemon (instead of syslogd and klogd)
We tried Syslog-ng years
On Sunday June 13 2010 02:06:12 pm Michael DeLuca wrote:
From the readme:
A two user package/file management system was found to be the most
practical solution. This means new packages are installed by an
admin-helper. The package's installed files are recorded, and the
ownership is changed
On Friday May 28 2010 04:46:13 pm Gilles Espinasse wrote:
Looking at the difference between diffutils-2.9/3.0 compilation log, I find
this
grep re_compile_pattern ./*
./coreutils-8.5:checking for working re_compile_pattern... yes
./diffutils-2.9:checking for working re_compile_pattern... no
There is a persistant problem with failing autoconf tests, and since these can
often be quietly replaced by gnu-lib we often don't realize it.
These failed ./configure tests are sometimes from new Glibc
versions, -D_FORTIFY_SOURCE causing functions to be defined as macros and
screwing up
LFS is using --disable-decimal-float, --disable-threads,
and, --disable-libgomp with gcc pass 1. I've noticed that if I do not use
these options the build of gcc pass 1 will be much longer.
I would like to know what affect these options have on building Glibc. Is
there zero advantage to
LFS was sparked in the day of 32bit x86, and now 64bit is becoming popular,
and LFS is finding itself supporting multiple architectures. ALFS is trying
to make things easier with automation. HLFS has some add-ons. CLFS wants to
support Sparc, Macintosh, and other architectures, and I think
This is a note for developers.
To get the Binutils test suite to pass, use the specs from gcc pass1, fixing
the startfile and dynamic linker path names, and add -fno-PIE to cc1 and
cc1plus specs. Copy to /usr/lib/gcc/.../specs, and run the test suite. The
test suite will use a vanilla gcc
I have been using:
-Dlibc=/tools/lib/libc-2.8.so -Ulocincpth -Uloclibpth \
-Dglibpth=/tools/lib -Dusrinc=/tools/include
to replace the Perl libc patch. It works for me.
robert
pgpFewIHe1asR.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ:
On Thursday October 23 2008 04:53:37 pm Ken Moffat wrote:
In ticket 2227, Robert wrote
|I also suggest that we name upstream patches fixes, not security
|or whatever else. At the same time, don't name non-upstream patches
|fixes.
| This might start another LFS bug issue, but it's worth
On Thursday October 23 2008 10:11:44 pm Bruce Dubbs wrote:
Robert Connolly wrote:
How about upstream_fixes for bug patch(es) which are in upstream,
and community_fixes for other bug patch(es) which are not in upstream?
and stop using security in patch names, because bugs are bugs
On Sunday October 19 2008 12:05:24 am Bryan Kadzban wrote:
I wish I *could* check the differences; I'm curious what they changed.
I can't seem to find the original texinfo-4.13 package anywhere... :-(
Oh well.
This is the original, from September 19th:
On Saturday October 18 2008 10:10:57 pm Bryan Kadzban wrote:
2247 Texinfo 4.13a ( repackage due to maintainer error )
I just pulled down texinfo-4.13a.tar.gz and texinfo-4.13.tar.gz -- and
their md5sums are *identical*. Extracting each into its own directory
also shows no differences
On Saturday October 18 2008 10:54:01 pm Robert Connolly wrote:
On Saturday October 18 2008 10:10:57 pm Bryan Kadzban wrote:
2247 Texinfo 4.13a ( repackage due to maintainer error )
I just pulled down texinfo-4.13a.tar.gz and texinfo-4.13.tar.gz -- and
their md5sums are *identical
On Wednesday October 15 2008 03:39:49 am Bruce Dubbs wrote:
LFS SVN-20081015
I tried jhalfs and a manual build but glibc fails for me in exactly the
same place:
/mnt/lfs/sources/gcc-build/i686-pc-linux-gnu/libssp/../../../gcc-4.3.2/libs
sp/ssp.c:175: multiple definition of
On Wednesday October 15 2008 03:15:31 pm Valter Douglas Lisbôa Jr. wrote:
--disable-libssp can be used again in the chroot when building gcc.
Everything in this library is included in Glibc-2.8, and libssp is just a
waste of space.
Ok, but if you want this in your final system? I've been
On Wednesday October 15 2008 04:21:34 pm Valter Douglas Lisbôa Jr. wrote:
When GCC 4.1 released libssp, Glibc copied all of libssp in to Glibc, for
better performance.
Statically?
In libc.so. I'm not sure what you mean by statically.
This happened in Glibc 2.4 or 2.5. If you're running a
On Sunday October 12 2008 12:05:48 pm Randy McMurchy wrote:
Robert Connolly wrote these words on 10/12/08 10:59 CST:
Because the Coreutils test suite has a lot of dependencies.
Not trying to be rude, Robert, but I don't understand what you mean.
If the test suite has lots of dependencies
On Sunday October 12 2008 12:13:24 pm Randy McMurchy wrote:
Hi all,
I don't consider this a big issue, but want to throw it out there.
I noticed when I ran the new Shadow 'groupmems' program, it segfaults.
I didn't think to much about it at the time as this program is new
to Shadow and the
On Sunday October 12 2008 03:50:32 pm Randy McMurchy wrote:
Robert Connolly wrote:
As root, I tried every 'groupmems' option, and they all work. I'm using
shadow-4.1.2.1, glibc-2.8-20080908, binutils-2.18.50.0.9, and
gcc-4.2.5-20080903.
I cannot reproduce the segfault. Not sure why
On Thursday October 9 2008 06:21:37 pm Bruce Dubbs wrote:
Should there be a mention of the possible use of SHA password encryption?
Using MD5 or SHA can be kept simple by using all the default options for SHA,
and mentioning that there are more options in login.def. Many people probably
don't
On Monday October 6 2008 08:50:08 pm Randy McMurchy wrote:
Steve Crosby wrote:
So Chapter 5 can be inline with GCC (which builds static by default)
or seperate but static, and Chapter 6 can be shared or static as you
prefer.
After thinking about this all day, I tend to think this is the
Hello. From what I can see, we can use:
-Dlibc=/tools/lib/libc-2.8.so -Ulocincpth -Uloclibpth \
-Dglibpth=/tools/lib -Dusrinc=/tools/include
instead of the Perl libc patch.
Is LFS interested in this (one less patch)? Someone needs to verify that this
has identical results compared to
On Tuesday September 23 2008 10:04:24 am Greg Schafer wrote:
Robert Connolly wrote:
On Sunday September 7 2008 06:00:55 pm Greg Schafer wrote:
Robert Connolly wrote:
I got rid of the iconvdata/bug-iconv6, and iconvdata/tst-iconv7,
errors by rebuilding Glibc a third time, without patches
On Tuesday September 23 2008 07:56:21 pm Robert Connolly wrote:
I posted to the hlfs list, and I must have forgot to post here. I found
that if I run 'make install' before 'make check' the glibc test suite
results got much better. Without patches, I got a perfect score from
glibc-2.8
Fedora has a patch for Coreutils to show posix file caps with ls(1):
http://cvs.fedoraproject.org/viewvc/devel/coreutils/coreutils-6.12-ls-libcap.patch
robert
pgp0rO1nmYCz0.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
FAQ:
Btw, binutils-2.18.50.0.9 depends on zlib, for test suites, since this patch
was added:
http://sourceware.org/ml/binutils/2008-06/msg00203.html
robert
pgpkJNyluFVNI.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
On Sunday September 7 2008 06:00:55 pm Greg Schafer wrote:
Robert Connolly wrote:
I got rid of the iconvdata/bug-iconv6, and iconvdata/tst-iconv7, errors
by rebuilding Glibc a third time, without patches, after installing
Binutils-2.18 and GCC-4.1 in chapter 6. I'm retrying with gcc-4.2
On Friday September 5 2008 04:41:17 pm Manuel Gonzalez Montoya wrote:
Im trying to find the patch mentioned here:
http://cia.vc/stats/author/herton/.message/ad8ec
They're in:
http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/?view=revrevision=211410
also knows as:
On Friday September 5 2008 04:41:17 pm Manuel Gonzalez Montoya wrote:
I think the exact math failure that you got is math/test-ildoubl,
thats because i am trying the same combination (glibc2.8, gcc4.3.2)
and got the same iconvdata test failures plus the math/test-ildoubl.
I got rid of the
I'm trying to find the most recent toolchain possible that will have all tests
pass. I'm using Glibc-2.8, from:
ftp://sources.redhat.com/pub/glibc/snapshots/glibc-2.8-20080901.tar.bz2
I get poor results with recent HJL Binutils and gcc43. I'm also using
linux-2.6.26.3 headers, but Linux headers
I'm curious if any of you have tried the Binutils test suite with gcc43. I get
failures from binutils-2.18, and more failures from binutils-2.18.50.0.9. I'm
also trying this with glibc-2.8. I'm having trouble finding a combination
that works with glibc-2.8.
robert
pgpSuaude9XRv.pgp
On Monday September 1 2008 11:06:55 pm Robert Connolly wrote:
I'm curious if any of you have tried the Binutils test suite with gcc43. I
get failures from binutils-2.18, and more failures from
binutils-2.18.50.0.9. I'm also trying this with glibc-2.8. I'm having
trouble finding a combination
On Monday March 3 2008 07:47:16 am mundoalem wrote:
Hello everyone!
As I was reading for the first time the Linux From Scratch
books version 6.3 this weekend, I noticed that section:
4.3. Adding the LFS User
http://www.linuxfromscratch.org/lfs/view/stable/chapter04/addinguser.html
is
On Thursday February 28 2008 08:23:21 pm Jeremy Huntwork wrote:
Hello All,
Please bear with me... this is a long post, although I tried to keep it
simple and easy to read.
Gerard invited me to share some of my ideas with him privately about our
recent discussions on lfs-dev. What follows is
Is it possible to integrate alfs with livecd, at least for the base core of
the livecd?
robert
pgpIZknrSok7F.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
On Friday January 4 2008 02:30:16 am Richard Delétang wrote:
It's seems to be OK with the parameter :
echo CFLAGS += -O3 -march=athlon-xp configparms
Your original error is something you would get if you typed = instead
of +=. You should not need the -O3, and it may cause test suite
On Monday December 10 2007 12:42:29 pm Tushar Teredesai wrote:
Hi:
I am back:)
Welcome back Tushar :-)
robert
pgpb2hzIPA9Wi.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above
I'm doubting the popularity of a linux-2.4/linuxthreads book. Even though it
would be more stable, I don't think anyone would actually use it in real
life. So as an alternative/compromise, how about ditching the 2.4-branch and
make pre-release branches (like 0.1)? Each pre-release would
Gah. Sorry about that. I'll fix it right now.
robert
On Friday October 12 2007 08:47:19 am [EMAIL PROTECTED] wrote:
some install probably made it automagically.
-- Declan Moriarty [EMAIL PROTECTED]
automagically my backside...it's the book.
6.54. Sysklogd-1.4.1
cat /etc/groups EOF
This should also work:
./configure...
echo CFLAGS += -march=i486 configparms
make
Instead of an Sed command. The 'configparms' file is lightly documented in
the 'INSTALL' file, and is the suggested way to override Makefile parameters.
This is a powerfull way to have very fine grained control
The 'configparms' file can exist before or after ./configure is run, in the
build directory. I'm not sure which was looks better in the LFS book.
robert
pgpI6nWm3zIdy.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ:
On Thursday September 6 2007 02:09:02 am Greg Schafer wrote:
Jeremy Huntwork wrote:
On Fri, Aug 31, 2007 at 04:54:50PM -0500, Bruce Dubbs wrote:
There also needs to be more explanation in the text interspersed with
the instructions. For instance in 5.4. GCC-4.2.1 - Pass 1 we have:
I agree that the wiki is the best solution to all problems Getting people to
use it is however another story... I admit that I do not check the BLFS wiki
for every package, but ore often that not this is where hints belong.
robert
On Friday August 10 2007 03:30:18 am TheOldFellow wrote:
On
I don't mind doing the commits, but I don't have permissions.
robert
On Wednesday August 8 2007 12:24:34 pm Randy McMurchy wrote:
Hi all,
Mostly just an FYI, so we can start working on a method to get the
hints project going again.
There is over 10 hints in the span of over 3 months
If anyone knows how, I would love it if 'ctrl c' could be used to skip stuff
during boot. For example if something hangs and I don't want to reboot in
single user mode. The boot may be screwed up after, but it's convenient to
have this as an option to save some time.
robert
pgpqryuVeB8Kn.pgp
Do any of you know assembly well enough to convert this:
http://www.linuxfromscratch.org/~robert/new/dd.asm
to something gcc can compile? And remove all the options, making bs=1 the
default, and 'dd from-file to-file' the only thing it does.
robert
pgp81S3OfJ8HD.pgp
Description: PGP signature
On Tuesday May 22 2007 02:24:44 pm Douglas J Hunley wrote:
On Monday 21 May 2007 16:08:02 Robert Connolly wrote:
Changes to linux-2.6's printk, and possible other things, have broken
klogd's EIP translation. There are no patches available to fix klogd.
Which in my mind just says it's time
With LFS sysklogd, linux-2.6 with loadable module support, do any of you get
this from /var/log/sys.log:
kernel: No module symbols loaded - kernel modules not enabled.
?
robert
pgpRYZ6HvcLkc.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ:
Changes to linux-2.6's printk, and possible other things, have broken klogd's
EIP translation. There are no patches available to fix klogd.
See:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=126616
and Suse bug #40651
Adding the '-x' option to klogd's boot script will get rid of the error by
The packages I was able to find that can use libcap, and are in the BLFS book,
are:
zsh (version 4.3.x). I have no idea why a shell would use libcap, but it does.
ntp (version 4.2.4)
samba
vsftpd
gnupg has experimental support (version 1.9.x)
jack-audio is referenced in BLFS, I think, and can
On Tuesday April 24 2007 02:50, Randy McMurchy wrote:
Matthew Burgess wrote these words on 04/20/07 16:55 CST:
Given that all 3 books use different patches, it serves a purely cosmetic
purpose (as far as I know), and upstream will not entertain the patch at
all in its current form, I'd like
On Friday April 20 2007 17:55, Matthew Burgess wrote:
Hi,
http://wiki.linuxfromscratch.org/lfs/ticket/1990 proposes to have LFS use
the same uname patch for Coreutils that HLFS uses. Note also that CLFS
uses another version of the uname code that adds outputs for more
architectures still.
On Sunday April 22 2007 04:32, Luca2 wrote:
- Original Message -
From: Robert Connolly [EMAIL PROTECTED]
To: LFS Developers Mailinglist lfs-dev@linuxfromscratch.org
Sent: Sunday, April 22, 2007 2:33 AM
Subject: Re: Thoughts
This belongs in a hint. No one needs to use hash-style=gnu
On Thursday April 12 2007 12:06, Heiko Zuerker wrote:
It sounds interesting, but it looks like it didn't get maintained for
quite a while.
It would also be interesting to find out why it got removed from the -mm
tree.
The patch goes on 2.6.20.6, except the Kconig hunk. Not everyone runs the
In 6.9.2. Configuring Glibc we have:
One way to determine the local time zone, run the following script:
It's missing adverbs I think. Wouldn't this be clearer:
One way to determine the local time zone is to run the following script:
robert
pgpHAYIGF0AgB.pgp
Description: PGP signature
--
On Monday April 2 2007 22:22, Jeremy Huntwork wrote:
And the addition of 'su' to /tools/bin in chapter 5 (as was suggested in
ticket #1877) is unnecessary now because coreutils is installed before
bash in chapter 6.
What I think I'm going to do - unless someone has on objection - is add
the
On Wednesday March 28 2007 10:20, Kevin Day wrote:
Perhaps that is a test for syntax being supported in vim and not being
available.
In that case, have the /bin/vim built with syntax off and the
/usr/bin/vim built with syntax.
Hopefully the PREFIX has /usr/bin before /bin, this way the
Hello. With a small change to the vimrc file it looks like vim can be
installed to /bin without complaining about missing /usr:
if (/usr/share/vim)
if has('syntax')
syntax on
endif
endif
Build Vim normally, then move /usr/bin/vim to /bin/vim. Some packages like
Sudo expect to find
Oops, sorry, I ment:
if (isdirectory(/usr/share/vim))
syntax on
endif
On Wednesday March 28 2007 11:05, Robert Connolly wrote:
...
if (/usr/share/vim)
if has('syntax')
syntax on
endif
endif
pgpH3mq4ausAK.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo
On Wednesday March 28 2007 11:17, Randy McMurchy wrote:
However, the reason I'm posting, Robert, is to ask you not to
top-post. We get on folks all the time about it, yet you as a
developer in the community set a bad example when you do it.
Okay. I don't think I've read the faq/#netiquette
On Wednesday March 28 2007 13:12, Jan Dvořák wrote:
Hi there again,
reworked patch for Util-linux. The patch can be downloaded from
http://jh.gvn.cz/~jd870911/hlfs/openssl/util-linux-2.12r-openssl-2.patch
and patch to the book is attached for discussion. This relates to quite
old
On Monday March 26 2007 02:41, Bruce Dubbs wrote:
One of the reasons for LFS and BLFS is to explain what is gong on. If
there is no technical merit to it and there are reasons against it, then
we have always done it that way is insufficient.
Okay, fair enough. 'nobody' isn't a human user and
For now use:
make RPM_OPT_FLAGS=-D_FORTIFY_SOURCE=0
Notice the added _. I'll fix it in svn right now.
robert
On Tuesday March 27 2007 23:06, George Boudreau wrote:
Robert,
With a little hand-holding I was able to convince jhalfs to build most
of HLFS/glibc. At the moment I have bumped
I think I'll remove this patch for now.
robert
On Tuesday March 27 2007 23:36, George Boudreau wrote:
The patch sets up calls to /bin/install, should this not be
/usr/bin/install ?
pgpMt1q82tpBg.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
FAQ:
I dunno if any of you have tried it, but we can use nobody for the Coreutils
tests. Add nogroup and nobody to /etc/group, and nobody in /etc/passwd
in the nobody group. For the src/su command, add '-s /bin/sh' so
that /bin/false won't be used.
I'd also like to suggest we use /sbin/nologin
On Sunday March 25 2007 22:30, Dan Nicholson wrote:
Also, I'm wondering if there would be problems running scripts, etc.,
when HOME=/dev/null. The dummy user we create for coreutils is given
/root as it's home directory. Robert, do you see any issues running
the testsuites as nobody?
I used
On Monday March 26 2007 01:11, Bruce Dubbs wrote:
The use of 65534 for a uid or gid is not a good idea. It comes from old
time usage in nfs and nowhere else. *If* nfs does not find a nobody
user, it defaults to -2. Since the uid/gid are 16 bit numbers, this
equates to 65534. There are two
GDB doesn't build, or doesn't work?
Robert
On Friday March 23 2007 03:11, Rogelio Serrano wrote:
Whats the best debugging strategy for an PIE and ET_DYN system?
i cant get gdb to work. im being forced to add self test code in all
programs that crash. making them all verbose is not an option.
This thread is the same as what you're asking about:
http://grsecurity.net/pipermail/grsecurity/2005-October/000581.html
It says to run 'paxctl -spm' on the program and libraries, but it sounds like
you tried that.
CFLAGS=-nopie -fno-pic -norelro -nonow -fno-stack-protector
-D_FORTIFY_SOURCE=0
Hello. I just realized linuxfromscratch.org is the mail server now, not
mail.linuxfromscratch.org. 1800 messages later, I'm back.
I fixed some of the uClibc 2.4-book issues this week. Chapter 5 builds now. I
haven't finished a chapter 6 build in a very long time, and I know there are
various
Hi. I'm not sure about FHS compliance or whatever, but Vim is the only
interactive editor we have in the base system. Other than Sed and Awk there
isn't really any way to edit any system files unless /usr is mounted.
If we had Ed it might be a different story, but I think Vim should be
Hi. In chapter06/createfiles.html this:
nobody:x:99:99:nobody:Unprivileged User:/bin/false
isn't right. The template, according to 'man 5 passwd', is:
login_name:password:UID:GID:comment_field:home_directory:shell
We should have:
nobody:x:99:99:Unprivileged User:/nonexistant:/bin/false
Is this correct?:
$ cat nologin.S
.section .data
message:
.ascii This account is currently not available.\n\0
.section .text
.globl _start
_start:
movl $4, %eax
movl $42, %edx
movl $message, %ecx
movl $1, %ebx
int $0x80
movl $1, %eax
movl $1, %ebx
int $0x80
$ as -o
There are now 5 patches in:
http://ftp.gnu.org/gnu/bash/bash-3.2-patches/
Maybe its worth combining them.
robert
On Sunday 12 November 2006 01:41, Jeremy Huntwork wrote:
Here's an interesting error. Happens in Chapter 5 Bash, when running
'make install', using lfslivecd-x86-6.2-3 as the host:
The new Inetutils installs 'ping6'. Maybe add it to the list of contents.
robert
pgpsDR2xbehDU.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
I noticed -O3 causes tests to fail, too, with binutils-2.17.
robert
On Wednesday 25 October 2006 00:03, Alexander E. Patrakov wrote:
Hello,
if the user includes -Os in his CFLAGS, binutils tests in LFS-6.2 will
show 21 failures (visibility and shared tests).
pgptyyKHU2YsY.pgp
Description:
In chapter06/util-linux.html:
mkdir -p /var/lib/hwclock
Should have a -v.
robert
pgpEdRkcJkINJ.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
In chapter06/vim.html:
rm -f /usr/share/vim/vim70/tutor/tutor.{gr,pl,ru,sk}
rm -f /usr/share/vim/vim70/tutor/tutor.??.*
Should those have -v?
robert
pgp0U4a7WTxid.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
' is not necessary.
2006/10/22, Robert Connolly [EMAIL PROTECTED]:
In chapter06/vim.html:
rm -f /usr/share/vim/vim70/tutor/tutor.{gr,pl,ru,sk}
rm -f /usr/share/vim/vim70/tutor/tutor.??.*
Should those have -v?
robert
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http
Silencing the warnings in many packages doesn't have to be left to
maintainers, and often isn't very complicated. I've had to learn to figure
this out for myself, and I'm writting this to hopefully help others learn
this faster, smoother, and with less aggravation (I'll add something like
this
The chapter 5 util-linux page still isn't using '-v' for the cp command.
robert
pgpXoKShrBML4.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
Great :-) I can't wait to see.
robert
On Tuesday 19 September 2006 17:37, Robert Baker wrote:
Well I have about the same schedule as you Robert, but I am willing to
throw my hat in the ring to help maintain HLFS-Stable. I have a big
interest in seeing that we can work out a hardened
On Sunday 17 September 2006 12:38, Alex Merry wrote:
On Sunday 17 September 2006 00:00, Robert Connolly wrote:
I'm not much of an sh scripter. I think a shell script would be
better than patching Coreutils to use libcrypto. OpenSSL also
Why?
openssl already does what md5sum does, and more
I like it. It works well. Thanks.
Is it practical to add a --selftest option which checks known values, to make
sure it's working? Also, maybe add openssl's version to --version?
robert
On Sunday 17 September 2006 16:13, Jan Dvořák wrote:
gpgkeys: key A1707213418A684D not found on keyserver
I'd like to start making 'audit notes' for each program and script installed,
highlighting security concerns. A man page audit would be nice too. I'm
wondering if a wiki page for each program is a good idea like what blfs does,
or if it should be maintained in the book, or a bit of each. Wiki
I'm lucky to have a job that allows me to daydream. I was thinking today, and
so here is the resulting rant :-)
I think it would be a good idea to install autoconf, automake, libtool, and
probably autogen too, in chapter 5 /tools, to allow us to autoreconf
everything in chapter 6 chroot.
I don't know how many of you feel comfortable with an suid-root program being
group writtable. I suggest we add:
sed 's/4775/4755/' -i ping/Makefile.in
to the LFS book.
robert
pgpyM2Y29kbqy.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ:
It's an open door for someone in group root to escalate their privileges.
Anyone in group root can copy /bin/bash to /bin/ping.
robert
On Sunday 27 August 2006 21:16, Bruce Dubbs wrote:
Robert Connolly wrote:
I don't know how many of you feel comfortable with an suid-root program
being
All I'm trying to say is that adding someone to group root should not be
exploitable, at least not without further misconfiguration.
robert
On Sunday 27 August 2006 21:37, Bruce Dubbs wrote:
Robert Connolly wrote:
It's an open door for someone in group root to escalate their privileges
problem or always a bug, such as realloc.
robert
On Thursday 24 August 2006 00:03, Robert Connolly wrote:
Those warnings are from -D_FORTIFY_SOURCE=2, and I didn't realize it
produced warnings. I removed -Werror for now until it can be fixed. I don't
remember having a problem with butterfly
Those warnings are from -D_FORTIFY_SOURCE=2, and I didn't realize it produced
warnings. I removed -Werror for now until it can be fixed. I don't remember
having a problem with butterfly toolchain with --enable-werror-always though.
robert
On Wednesday 23 August 2006 15:33, Filip Bartmann
Original copies of the patches, from Owl's cvs, are here:
http://www.topside.org/~ashes/hlfs/Owl-tmp-patches/
robert
pgpmutIQRkzDN.pgp
Description: PGP signature
--
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the
Hi. I have a couple patches ported from the Owl blowfish patches:
http://www.topside.org/~ashes/new/glibc-2.4-owl_blowfish.patch
http://www.topside.org/~ashes/new/shadow-4.0.17-owl_blowfish.patch
I'm not sure if sulogin needs a patch or not. I noticed sulogin.c doesn't seem
to care what hash
With -fPIC in the gcc specs the --with-pic option makes no difference on i386,
but it does make a difference on m68k, ppc, and sparc. The gcc specs in
hlfs-unstable allow -fpic to override -fPIC. The --with-pic options would
allow the package developers to choose which flag is appropriate. A
On July 26, 2006 09:11 am, Sebastian Faulborn wrote:
What about adding blowfish passwords which is a major improvement in
security.
I've been planning to port the Owl blowfish patch for Glibc to uClibc. There
was also some debate about adding blowfish to HLFS a year or two ago, that's
why it
On July 22, 2006 03:56 pm, Declan Moriarty wrote:
These sort of results question the whole business of compiling from
scratch. I have gathered this much
1. Compiling new versions (particularly gcc-4.1x) the way LFS does it is
somewhere between a major PITA and impossible.
I'm not sure what
Hi. Sorry if this has been discused before. Rather than:
SPECFILE=`dirname $(gcc -print-libgcc-file-name)`/specs
gcc -dumpspecs $SPECFILE
sed '[EMAIL PROTECTED]/lib/ld-linux.so.2@/tools@g' $SPECFILE tempspecfile
mv -vf tempspecfile $SPECFILE
unset SPECFILE
I find it cleaner and easier to
1 - 100 of 133 matches
Mail list logo