Re: HLFS-SVN20110204

2011-02-20 Thread Robert Connolly
On Sunday 20 February 2011 11:10:27 Mr. T wrote: Hi all, I just wanted to enquire about the current build status really. Can anyone tell me if SVN-20110204 currently builds cleanly or are there any known issues ? I've had a look around the archives but there isn't much chatter on there

To do list (February 2011):

2011-02-20 Thread Robert Connolly
Hi. This is a short to-do list for immediate needs. If any of you have idea please feel free to discuss it or add to it, etc. This is all easy and doable stuff. The book seems to be building without issues now, with SSP, _FORTIFY_SOURCE, and -fPIE enabled in GCC. More is coming, please be

Re: Consider adding in Cloog-PPL and PPL

2010-08-22 Thread Robert Connolly
On Sunday 22 August 2010 08:10:55 Andrew Benton wrote: On 18/07/10 13:56, Jeremy Huntwork wrote: There's a fix available here: http://www.cs.unipr.it/pipermail/ppl-devel/2010-January/015872.html I've added those 4 files into a single patch here:

Re: Sysklogd -- syslog-ng?

2010-07-07 Thread Robert Connolly
On Tuesday July 6 2010 02:09:27 pm Sebastian Plotz wrote: What about changing from Sysklogd to syslog-ng? - syslog-ng is under active development - sysklogd is quiet old (last version released in 2007) - we just need to run one daemon (instead of syslogd and klogd) We tried Syslog-ng years

Re: Package Management

2010-07-01 Thread Robert Connolly
On Sunday June 13 2010 02:06:12 pm Michael DeLuca wrote: From the readme: A two user package/file management system was found to be the most practical solution. This means new packages are installed by an admin-helper. The package's installed files are recorded, and the ownership is changed

Re: fun about re_compile_pattern test result

2010-05-28 Thread Robert Connolly
On Friday May 28 2010 04:46:13 pm Gilles Espinasse wrote: Looking at the difference between diffutils-2.9/3.0 compilation log, I find this grep re_compile_pattern ./* ./coreutils-8.5:checking for working re_compile_pattern... yes ./diffutils-2.9:checking for working re_compile_pattern... no

Checking for broken configure tests, searches for libc functions, etc

2010-02-22 Thread Robert Connolly
There is a persistant problem with failing autoconf tests, and since these can often be quietly replaced by gnu-lib we often don't realize it. These failed ./configure tests are sometimes from new Glibc versions, -D_FORTIFY_SOURCE causing functions to be defined as macros and screwing up

gcc-4.4 configure options (for hlfs / native builds)

2009-07-13 Thread Robert Connolly
LFS is using --disable-decimal-float, --disable-threads, and, --disable-libgomp with gcc pass 1. I've noticed that if I do not use these options the build of gcc pass 1 will be much longer. I would like to know what affect these options have on building Glibc. Is there zero advantage to

Re: CLFS antics

2008-12-24 Thread Robert Connolly
LFS was sparked in the day of 32bit x86, and now 64bit is becoming popular, and LFS is finding itself supporting multiple architectures. ALFS is trying to make things easier with automation. HLFS has some add-ons. CLFS wants to support Sparc, Macintosh, and other architectures, and I think

testsuites

2008-12-16 Thread Robert Connolly
This is a note for developers. To get the Binutils test suite to pass, use the specs from gcc pass1, fixing the startfile and dynamic linker path names, and add -fno-PIE to cc1 and cc1plus specs. Copy to /usr/lib/gcc/.../specs, and run the test suite. The test suite will use a vanilla gcc

Re: perl-5.10.0

2008-10-29 Thread Robert Connolly
I have been using: -Dlibc=/tools/lib/libc-2.8.so -Ulocincpth -Uloclibpth \ -Dglibpth=/tools/lib -Dusrinc=/tools/include to replace the Perl libc patch. It works for me. robert pgpFewIHe1asR.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ:

Re: Patch names (security, fixes)

2008-10-23 Thread Robert Connolly
On Thursday October 23 2008 04:53:37 pm Ken Moffat wrote: In ticket 2227, Robert wrote |I also suggest that we name upstream patches fixes, not security |or whatever else. At the same time, don't name non-upstream patches |fixes. | This might start another LFS bug issue, but it's worth

Re: Patch names (security, fixes)

2008-10-23 Thread Robert Connolly
On Thursday October 23 2008 10:11:44 pm Bruce Dubbs wrote: Robert Connolly wrote: How about upstream_fixes for bug patch(es) which are in upstream, and community_fixes for other bug patch(es) which are not in upstream? and stop using security in patch names, because bugs are bugs

Re: Package freeze

2008-10-19 Thread Robert Connolly
On Sunday October 19 2008 12:05:24 am Bryan Kadzban wrote: I wish I *could* check the differences; I'm curious what they changed. I can't seem to find the original texinfo-4.13 package anywhere... :-( Oh well. This is the original, from September 19th:

Re: Package freeze

2008-10-18 Thread Robert Connolly
On Saturday October 18 2008 10:10:57 pm Bryan Kadzban wrote: 2247 Texinfo 4.13a ( repackage due to maintainer error ) I just pulled down texinfo-4.13a.tar.gz and texinfo-4.13.tar.gz -- and their md5sums are *identical*. Extracting each into its own directory also shows no differences

Re: Package freeze

2008-10-18 Thread Robert Connolly
On Saturday October 18 2008 10:54:01 pm Robert Connolly wrote: On Saturday October 18 2008 10:10:57 pm Bryan Kadzban wrote: 2247 Texinfo 4.13a ( repackage due to maintainer error ) I just pulled down texinfo-4.13a.tar.gz and texinfo-4.13.tar.gz -- and their md5sums are *identical

Re: glibc-2.8-20080929 build fails in Chapter 5

2008-10-15 Thread Robert Connolly
On Wednesday October 15 2008 03:39:49 am Bruce Dubbs wrote: LFS SVN-20081015 I tried jhalfs and a manual build but glibc fails for me in exactly the same place: /mnt/lfs/sources/gcc-build/i686-pc-linux-gnu/libssp/../../../gcc-4.3.2/libs sp/ssp.c:175: multiple definition of

Re: glibc-2.8-20080929 build fails in Chapter 5

2008-10-15 Thread Robert Connolly
On Wednesday October 15 2008 03:15:31 pm Valter Douglas Lisbôa Jr. wrote: --disable-libssp can be used again in the chroot when building gcc. Everything in this library is included in Glibc-2.8, and libssp is just a waste of space. Ok, but if you want this in your final system? I've been

Re: glibc-2.8-20080929 build fails in Chapter 5

2008-10-15 Thread Robert Connolly
On Wednesday October 15 2008 04:21:34 pm Valter Douglas Lisbôa Jr. wrote: When GCC 4.1 released libssp, Glibc copied all of libssp in to Glibc, for better performance. Statically? In libc.so. I'm not sure what you mean by statically. This happened in Glibc 2.4 or 2.5. If you're running a

Re: Chapter 6 Coreutils installation

2008-10-12 Thread Robert Connolly
On Sunday October 12 2008 12:05:48 pm Randy McMurchy wrote: Robert Connolly wrote these words on 10/12/08 10:59 CST: Because the Coreutils test suite has a lot of dependencies. Not trying to be rude, Robert, but I don't understand what you mean. If the test suite has lots of dependencies

Re: Shadows 'groupmems' program segfaults

2008-10-12 Thread Robert Connolly
On Sunday October 12 2008 12:13:24 pm Randy McMurchy wrote: Hi all, I don't consider this a big issue, but want to throw it out there. I noticed when I ran the new Shadow 'groupmems' program, it segfaults. I didn't think to much about it at the time as this program is new to Shadow and the

Re: Shadows 'groupmems' program segfaults

2008-10-12 Thread Robert Connolly
On Sunday October 12 2008 03:50:32 pm Randy McMurchy wrote: Robert Connolly wrote: As root, I tried every 'groupmems' option, and they all work. I'm using shadow-4.1.2.1, glibc-2.8-20080908, binutils-2.18.50.0.9, and gcc-4.2.5-20080903. I cannot reproduce the segfault. Not sure why

Re: Shadow update

2008-10-10 Thread Robert Connolly
On Thursday October 9 2008 06:21:37 pm Bruce Dubbs wrote: Should there be a mention of the possible use of SHA password encryption? Using MD5 or SHA can be kept simple by using all the default options for SHA, and mentioning that there are more options in login.def. Many people probably don't

Re: GMP and MPFR

2008-10-06 Thread Robert Connolly
On Monday October 6 2008 08:50:08 pm Randy McMurchy wrote: Steve Crosby wrote: So Chapter 5 can be inline with GCC (which builds static by default) or seperate but static, and Chapter 6 can be shared or static as you prefer. After thinking about this all day, I tend to think this is the

The Perl libc patch

2008-10-06 Thread Robert Connolly
Hello. From what I can see, we can use: -Dlibc=/tools/lib/libc-2.8.so -Ulocincpth -Uloclibpth \ -Dglibpth=/tools/lib -Dusrinc=/tools/include instead of the Perl libc patch. Is LFS interested in this (one less patch)? Someone needs to verify that this has identical results compared to

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-23 Thread Robert Connolly
On Tuesday September 23 2008 10:04:24 am Greg Schafer wrote: Robert Connolly wrote: On Sunday September 7 2008 06:00:55 pm Greg Schafer wrote: Robert Connolly wrote: I got rid of the iconvdata/bug-iconv6, and iconvdata/tst-iconv7, errors by rebuilding Glibc a third time, without patches

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-23 Thread Robert Connolly
On Tuesday September 23 2008 07:56:21 pm Robert Connolly wrote: I posted to the hlfs list, and I must have forgot to post here. I found that if I run 'make install' before 'make check' the glibc test suite results got much better. Without patches, I got a perfect score from glibc-2.8

'ls' posix capabilities

2008-09-15 Thread Robert Connolly
Fedora has a patch for Coreutils to show posix file caps with ls(1): http://cvs.fedoraproject.org/viewvc/devel/coreutils/coreutils-6.12-ls-libcap.patch robert pgp0rO1nmYCz0.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/hlfs-dev FAQ:

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-10 Thread Robert Connolly
Btw, binutils-2.18.50.0.9 depends on zlib, for test suites, since this patch was added: http://sourceware.org/ml/binutils/2008-06/msg00203.html robert pgpkJNyluFVNI.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-08 Thread Robert Connolly
On Sunday September 7 2008 06:00:55 pm Greg Schafer wrote: Robert Connolly wrote: I got rid of the iconvdata/bug-iconv6, and iconvdata/tst-iconv7, errors by rebuilding Glibc a third time, without patches, after installing Binutils-2.18 and GCC-4.1 in chapter 6. I'm retrying with gcc-4.2

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-08 Thread Robert Connolly
On Friday September 5 2008 04:41:17 pm Manuel Gonzalez Montoya wrote: Im trying to find the patch mentioned here: http://cia.vc/stats/author/herton/.message/ad8ec They're in: http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/?view=revrevision=211410 also knows as:

Re: glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-07 Thread Robert Connolly
On Friday September 5 2008 04:41:17 pm Manuel Gonzalez Montoya wrote: I think the exact math failure that you got is math/test-ildoubl, thats because i am trying the same combination (glibc2.8, gcc4.3.2) and got the same iconvdata test failures plus the math/test-ildoubl. I got rid of the

glibc-2.8 [was: Re: GCC-4.3.1, Linux-2.6.26.2]

2008-09-05 Thread Robert Connolly
I'm trying to find the most recent toolchain possible that will have all tests pass. I'm using Glibc-2.8, from: ftp://sources.redhat.com/pub/glibc/snapshots/glibc-2.8-20080901.tar.bz2 I get poor results with recent HJL Binutils and gcc43. I'm also using linux-2.6.26.3 headers, but Linux headers

Re: GCC-4.3.1, Linux-2.6.26.2

2008-09-01 Thread Robert Connolly
I'm curious if any of you have tried the Binutils test suite with gcc43. I get failures from binutils-2.18, and more failures from binutils-2.18.50.0.9. I'm also trying this with glibc-2.8. I'm having trouble finding a combination that works with glibc-2.8. robert pgpSuaude9XRv.pgp

Re: GCC-4.3.1, Linux-2.6.26.2

2008-09-01 Thread Robert Connolly
On Monday September 1 2008 11:06:55 pm Robert Connolly wrote: I'm curious if any of you have tried the Binutils test suite with gcc43. I get failures from binutils-2.18, and more failures from binutils-2.18.50.0.9. I'm also trying this with glibc-2.8. I'm having trouble finding a combination

Re: The creation of lfs user and its possible security issues

2008-03-05 Thread Robert Connolly
On Monday March 3 2008 07:47:16 am mundoalem wrote: Hello everyone! As I was reading for the first time the Linux From Scratch books version 6.3 this weekend, I noticed that section: 4.3. Adding the LFS User http://www.linuxfromscratch.org/lfs/view/stable/chapter04/addinguser.html is

Re: Planning an overall direction for LFS

2008-02-28 Thread Robert Connolly
On Thursday February 28 2008 08:23:21 pm Jeremy Huntwork wrote: Hello All, Please bear with me... this is a long post, although I tried to keep it simple and easy to read. Gerard invited me to share some of my ideas with him privately about our recent discussions on lfs-dev. What follows is

Re: LiveCD or No LiveCD?

2008-02-25 Thread Robert Connolly
Is it possible to integrate alfs with livecd, at least for the base core of the livecd? robert pgpIZknrSok7F.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page

Re: Error with glibc-2.7

2008-01-04 Thread Robert Connolly
On Friday January 4 2008 02:30:16 am Richard Delétang wrote: It's seems to be OK with the parameter : echo CFLAGS += -O3 -march=athlon-xp configparms Your original error is something you would get if you typed = instead of +=. You should not need the -O3, and it may cause test suite

Re: Evolution of LFS

2007-12-11 Thread Robert Connolly
On Monday December 10 2007 12:42:29 pm Tushar Teredesai wrote: Hi: I am back:) Welcome back Tushar :-) robert pgpb2hzIPA9Wi.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above

Re: stable status

2007-10-18 Thread Robert Connolly
I'm doubting the popularity of a linux-2.4/linuxthreads book. Even though it would be more stable, I don't think anyone would actually use it in real life. So as an alternative/compromise, how about ditching the 2.4-branch and make pre-release branches (like 0.1)? Each pre-release would

Re: etc-group-groups

2007-10-12 Thread Robert Connolly
Gah. Sorry about that. I'll fix it right now. robert On Friday October 12 2007 08:47:19 am [EMAIL PROTECTED] wrote: some install probably made it automagically. -- Declan Moriarty [EMAIL PROTECTED] automagically my backside...it's the book. 6.54. Sysklogd-1.4.1 cat /etc/groups EOF

Re: --with-arch=i486 (was Re: Merging the jh branch to trunk)

2007-09-15 Thread Robert Connolly
This should also work: ./configure... echo CFLAGS += -march=i486 configparms make Instead of an Sed command. The 'configparms' file is lightly documented in the 'INSTALL' file, and is the suggested way to override Makefile parameters. This is a powerfull way to have very fine grained control

Re: --with-arch=i486 (was Re: Merging the jh branch to trunk)

2007-09-15 Thread Robert Connolly
The 'configparms' file can exist before or after ./configure is run, in the build directory. I'm not sure which was looks better in the LFS book. robert pgpI6nWm3zIdy.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ:

Re: --with-arch=i486 (was Re: Merging the jh branch to trunk)

2007-09-06 Thread Robert Connolly
On Thursday September 6 2007 02:09:02 am Greg Schafer wrote: Jeremy Huntwork wrote: On Fri, Aug 31, 2007 at 04:54:50PM -0500, Bruce Dubbs wrote: There also needs to be more explanation in the text interspersed with the instructions. For instance in 5.4. GCC-4.2.1 - Pass 1 we have:

Re: Hints project has been abandoned

2007-08-10 Thread Robert Connolly
I agree that the wiki is the best solution to all problems Getting people to use it is however another story... I admit that I do not check the BLFS wiki for every package, but ore often that not this is where hints belong. robert On Friday August 10 2007 03:30:18 am TheOldFellow wrote: On

Re: Hints project has been abandoned

2007-08-08 Thread Robert Connolly
I don't mind doing the commits, but I don't have permissions. robert On Wednesday August 8 2007 12:24:34 pm Randy McMurchy wrote: Hi all, Mostly just an FYI, so we can start working on a method to get the hints project going again. There is over 10 hints in the span of over 3 months

Re: Bootscript patches

2007-06-16 Thread Robert Connolly
If anyone knows how, I would love it if 'ctrl c' could be used to skip stuff during boot. For example if something hangs and I don't want to reboot in single user mode. The boot may be screwed up after, but it's convenient to have this as an option to save some time. robert pgpqryuVeB8Kn.pgp

Re: sysklogd

2007-05-23 Thread Robert Connolly
Do any of you know assembly well enough to convert this: http://www.linuxfromscratch.org/~robert/new/dd.asm to something gcc can compile? And remove all the options, making bs=1 the default, and 'dd from-file to-file' the only thing it does. robert pgp81S3OfJ8HD.pgp Description: PGP signature

Re: time for syslog-ng? (was Re: klogd)

2007-05-22 Thread Robert Connolly
On Tuesday May 22 2007 02:24:44 pm Douglas J Hunley wrote: On Monday 21 May 2007 16:08:02 Robert Connolly wrote: Changes to linux-2.6's printk, and possible other things, have broken klogd's EIP translation. There are no patches available to fix klogd. Which in my mind just says it's time

klogd

2007-05-21 Thread Robert Connolly
With LFS sysklogd, linux-2.6 with loadable module support, do any of you get this from /var/log/sys.log: kernel: No module symbols loaded - kernel modules not enabled. ? robert pgpRYZ6HvcLkc.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ:

Re: klogd

2007-05-21 Thread Robert Connolly
Changes to linux-2.6's printk, and possible other things, have broken klogd's EIP translation. There are no patches available to fix klogd. See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=126616 and Suse bug #40651 Adding the '-x' option to klogd's boot script will get rid of the error by

Re: libcap

2007-05-21 Thread Robert Connolly
The packages I was able to find that can use libcap, and are in the BLFS book, are: zsh (version 4.3.x). I have no idea why a shell would use libcap, but it does. ntp (version 4.2.4) samba vsftpd gnupg has experimental support (version 1.9.x) jack-audio is referenced in BLFS, I think, and can

Re: [RFC] Drop the Coreutils Uname patch

2007-04-24 Thread Robert Connolly
On Tuesday April 24 2007 02:50, Randy McMurchy wrote: Matthew Burgess wrote these words on 04/20/07 16:55 CST: Given that all 3 books use different patches, it serves a purely cosmetic purpose (as far as I know), and upstream will not entertain the patch at all in its current form, I'd like

Re: [RFC] Drop the Coreutils Uname patch

2007-04-23 Thread Robert Connolly
On Friday April 20 2007 17:55, Matthew Burgess wrote: Hi, http://wiki.linuxfromscratch.org/lfs/ticket/1990 proposes to have LFS use the same uname patch for Coreutils that HLFS uses. Note also that CLFS uses another version of the uname code that adds outputs for more architectures still.

Re: Thoughts

2007-04-22 Thread Robert Connolly
On Sunday April 22 2007 04:32, Luca2 wrote: - Original Message - From: Robert Connolly [EMAIL PROTECTED] To: LFS Developers Mailinglist lfs-dev@linuxfromscratch.org Sent: Sunday, April 22, 2007 2:33 AM Subject: Re: Thoughts This belongs in a hint. No one needs to use hash-style=gnu

Re: AES based prng

2007-04-17 Thread Robert Connolly
On Thursday April 12 2007 12:06, Heiko Zuerker wrote: It sounds interesting, but it looks like it didn't get maintained for quite a while. It would also be interesting to find out why it got removed from the -mm tree. The patch goes on 2.6.20.6, except the Kconig hunk. Not everyone runs the

Grammar in section 6.9.2.

2007-04-17 Thread Robert Connolly
In 6.9.2. Configuring Glibc we have: One way to determine the local time zone, run the following script: It's missing adverbs I think. Wouldn't this be clearer: One way to determine the local time zone is to run the following script: robert pgpHAYIGF0AgB.pgp Description: PGP signature --

Re: dummy user for testsuites

2007-04-02 Thread Robert Connolly
On Monday April 2 2007 22:22, Jeremy Huntwork wrote: And the addition of 'su' to /tools/bin in chapter 5 (as was suggested in ticket #1877) is unnecessary now because coreutils is installed before bash in chapter 6. What I think I'm going to do - unless someone has on objection - is add the

Re: Install Vim to /bin?

2007-03-28 Thread Robert Connolly
On Wednesday March 28 2007 10:20, Kevin Day wrote: Perhaps that is a test for syntax being supported in vim and not being available. In that case, have the /bin/vim built with syntax off and the /usr/bin/vim built with syntax. Hopefully the PREFIX has /usr/bin before /bin, this way the

vim in /bin

2007-03-28 Thread Robert Connolly
Hello. With a small change to the vimrc file it looks like vim can be installed to /bin without complaining about missing /usr: if (/usr/share/vim) if has('syntax') syntax on endif endif Build Vim normally, then move /usr/bin/vim to /bin/vim. Some packages like Sudo expect to find

Re: vim in /bin

2007-03-28 Thread Robert Connolly
Oops, sorry, I ment: if (isdirectory(/usr/share/vim)) syntax on endif On Wednesday March 28 2007 11:05, Robert Connolly wrote: ... if (/usr/share/vim) if has('syntax') syntax on endif endif pgpH3mq4ausAK.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo

Re: vim in /bin

2007-03-28 Thread Robert Connolly
On Wednesday March 28 2007 11:17, Randy McMurchy wrote: However, the reason I'm posting, Robert, is to ask you not to top-post. We get on folks all the time about it, yet you as a developer in the community set a bad example when you do it. Okay. I don't think I've read the faq/#netiquette

Re: Util-linux to use OpenSSL for MD5

2007-03-28 Thread Robert Connolly
On Wednesday March 28 2007 13:12, Jan Dvořák wrote: Hi there again, reworked patch for Util-linux. The patch can be downloaded from http://jh.gvn.cz/~jd870911/hlfs/openssl/util-linux-2.12r-openssl-2.patch and patch to the book is attached for discussion. This relates to quite old

Re: user nobody and test suites

2007-03-27 Thread Robert Connolly
On Monday March 26 2007 02:41, Bruce Dubbs wrote: One of the reasons for LFS and BLFS is to explain what is gong on. If there is no technical merit to it and there are reasons against it, then we have always done it that way is insufficient. Okay, fair enough. 'nobody' isn't a human user and

Re: syslogd build error

2007-03-27 Thread Robert Connolly
For now use: make RPM_OPT_FLAGS=-D_FORTIFY_SOURCE=0 Notice the added _. I'll fix it in svn right now. robert On Tuesday March 27 2007 23:06, George Boudreau wrote: Robert, With a little hand-holding I was able to convince jhalfs to build most of HLFS/glibc. At the moment I have bumped

Re: blfs-bootscripts-6.1-HLFS patch

2007-03-27 Thread Robert Connolly
I think I'll remove this patch for now. robert On Tuesday March 27 2007 23:36, George Boudreau wrote: The patch sets up calls to /bin/install, should this not be /usr/bin/install ? pgpMt1q82tpBg.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/hlfs-dev FAQ:

user nobody and test suites

2007-03-25 Thread Robert Connolly
I dunno if any of you have tried it, but we can use nobody for the Coreutils tests. Add nogroup and nobody to /etc/group, and nobody in /etc/passwd in the nobody group. For the src/su command, add '-s /bin/sh' so that /bin/false won't be used. I'd also like to suggest we use /sbin/nologin

Re: user nobody and test suites

2007-03-25 Thread Robert Connolly
On Sunday March 25 2007 22:30, Dan Nicholson wrote: Also, I'm wondering if there would be problems running scripts, etc., when HOME=/dev/null. The dummy user we create for coreutils is given /root as it's home directory. Robert, do you see any issues running the testsuites as nobody? I used

Re: user nobody and test suites

2007-03-25 Thread Robert Connolly
On Monday March 26 2007 01:11, Bruce Dubbs wrote: The use of 65534 for a uid or gid is not a good idea. It comes from old time usage in nfs and nowhere else. *If* nfs does not find a nobody user, it defaults to -2. Since the uid/gid are 16 bit numbers, this equates to 65534. There are two

Re: debugging strategies

2007-03-23 Thread Robert Connolly
GDB doesn't build, or doesn't work? Robert On Friday March 23 2007 03:11, Rogelio Serrano wrote: Whats the best debugging strategy for an PIE and ET_DYN system? i cant get gdb to work. im being forced to add self test code in all programs that crash. making them all verbose is not an option.

Re: debugging strategies

2007-03-23 Thread Robert Connolly
This thread is the same as what you're asking about: http://grsecurity.net/pipermail/grsecurity/2005-October/000581.html It says to run 'paxctl -spm' on the program and libraries, but it sounds like you tried that. CFLAGS=-nopie -fno-pic -norelro -nonow -fno-stack-protector -D_FORTIFY_SOURCE=0

book brokenness, etc

2007-02-09 Thread Robert Connolly
Hello. I just realized linuxfromscratch.org is the mail server now, not mail.linuxfromscratch.org. 1800 messages later, I'm back. I fixed some of the uClibc 2.4-book issues this week. Chapter 5 builds now. I haven't finished a chapter 6 build in a very long time, and I know there are various

Install Vim to /bin?

2007-02-09 Thread Robert Connolly
Hi. I'm not sure about FHS compliance or whatever, but Vim is the only interactive editor we have in the base system. Other than Sed and Awk there isn't really any way to edit any system files unless /usr is mounted. If we had Ed it might be a different story, but I think Vim should be

Nobody user

2006-12-08 Thread Robert Connolly
Hi. In chapter06/createfiles.html this: nobody:x:99:99:nobody:Unprivileged User:/bin/false isn't right. The template, according to 'man 5 passwd', is: login_name:password:UID:GID:comment_field:home_directory:shell We should have: nobody:x:99:99:Unprivileged User:/nonexistant:/bin/false

Re: openssl and coreutils and more

2006-12-05 Thread Robert Connolly
Is this correct?: $ cat nologin.S .section .data message: .ascii This account is currently not available.\n\0 .section .text .globl _start _start: movl $4, %eax movl $42, %edx movl $message, %ecx movl $1, %ebx int $0x80 movl $1, %eax movl $1, %ebx int $0x80 $ as -o

Re: bash and msgfmt

2006-11-12 Thread Robert Connolly
There are now 5 patches in: http://ftp.gnu.org/gnu/bash/bash-3.2-patches/ Maybe its worth combining them. robert On Sunday 12 November 2006 01:41, Jeremy Huntwork wrote: Here's an interesting error. Happens in Chapter 5 Bash, when running 'make install', using lfslivecd-x86-6.2-3 as the host:

Section 6.40.2 (inetutils)

2006-11-05 Thread Robert Connolly
The new Inetutils installs 'ping6'. Maybe add it to the list of contents. robert pgpsDR2xbehDU.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page

Re: Binutils testsuite

2006-10-25 Thread Robert Connolly
I noticed -O3 causes tests to fail, too, with binutils-2.17. robert On Wednesday 25 October 2006 00:03, Alexander E. Patrakov wrote: Hello, if the user includes -Os in his CFLAGS, binutils tests in LFS-6.2 will show 21 failures (visibility and shared tests). pgptyyKHU2YsY.pgp Description:

Re: util-linux 'cp -v'

2006-10-21 Thread Robert Connolly
In chapter06/util-linux.html: mkdir -p /var/lib/hwclock Should have a -v. robert pgpEdRkcJkINJ.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page

vim 'rm -vf'

2006-10-21 Thread Robert Connolly
In chapter06/vim.html: rm -f /usr/share/vim/vim70/tutor/tutor.{gr,pl,ru,sk} rm -f /usr/share/vim/vim70/tutor/tutor.??.* Should those have -v? robert pgp0U4a7WTxid.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/

Re: vim 'rm -vf'

2006-10-21 Thread Robert Connolly
' is not necessary. 2006/10/22, Robert Connolly [EMAIL PROTECTED]: In chapter06/vim.html: rm -f /usr/share/vim/vim70/tutor/tutor.{gr,pl,ru,sk} rm -f /usr/share/vim/vim70/tutor/tutor.??.* Should those have -v? robert -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http

Amateur auditing (how I'm doing it), in case any of you want to know.

2006-10-16 Thread Robert Connolly
Silencing the warnings in many packages doesn't have to be left to maintainers, and often isn't very complicated. I've had to learn to figure this out for myself, and I'm writting this to hopefully help others learn this faster, smoother, and with less aggravation (I'll add something like this

util-linux 'cp -v'

2006-10-10 Thread Robert Connolly
The chapter 5 util-linux page still isn't using '-v' for the cp command. robert pgpXoKShrBML4.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page

Re: Status of HLFS project

2006-09-20 Thread Robert Connolly
Great :-) I can't wait to see. robert On Tuesday 19 September 2006 17:37, Robert Baker wrote: Well I have about the same schedule as you Robert, but I am willing to throw my hat in the ring to help maintain HLFS-Stable. I have a big interest in seeing that we can work out a hardened

Re: cryptodev

2006-09-17 Thread Robert Connolly
On Sunday 17 September 2006 12:38, Alex Merry wrote: On Sunday 17 September 2006 00:00, Robert Connolly wrote: I'm not much of an sh scripter. I think a shell script would be better than patching Coreutils to use libcrypto. OpenSSL also Why? openssl already does what md5sum does, and more

Re: cryptodev

2006-09-17 Thread Robert Connolly
I like it. It works well. Thanks. Is it practical to add a --selftest option which checks known values, to make sure it's working? Also, maybe add openssl's version to --version? robert On Sunday 17 September 2006 16:13, Jan Dvořák wrote: gpgkeys: key A1707213418A684D not found on keyserver

auditing

2006-09-08 Thread Robert Connolly
I'd like to start making 'audit notes' for each program and script installed, highlighting security concerns. A man page audit would be nice too. I'm wondering if a wiki page for each program is a good idea like what blfs does, or if it should be maintained in the book, or a bit of each. Wiki

autotools and patches

2006-08-30 Thread Robert Connolly
I'm lucky to have a job that allows me to daydream. I was thinking today, and so here is the resulting rant :-) I think it would be a good idea to install autoconf, automake, libtool, and probably autogen too, in chapter 5 /tools, to allow us to autoreconf everything in chapter 6 chroot.

/bin/ping is group writtable

2006-08-27 Thread Robert Connolly
I don't know how many of you feel comfortable with an suid-root program being group writtable. I suggest we add: sed 's/4775/4755/' -i ping/Makefile.in to the LFS book. robert pgpyM2Y29kbqy.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/lfs-dev FAQ:

Re: /bin/ping is group writtable

2006-08-27 Thread Robert Connolly
It's an open door for someone in group root to escalate their privileges. Anyone in group root can copy /bin/bash to /bin/ping. robert On Sunday 27 August 2006 21:16, Bruce Dubbs wrote: Robert Connolly wrote: I don't know how many of you feel comfortable with an suid-root program being

Re: /bin/ping is group writtable

2006-08-27 Thread Robert Connolly
All I'm trying to say is that adding someone to group root should not be exploitable, at least not without further misconfiguration. robert On Sunday 27 August 2006 21:37, Bruce Dubbs wrote: Robert Connolly wrote: It's an open door for someone in group root to escalate their privileges

Re: Attribute warn_unused_result

2006-08-24 Thread Robert Connolly
problem or always a bug, such as realloc. robert On Thursday 24 August 2006 00:03, Robert Connolly wrote: Those warnings are from -D_FORTIFY_SOURCE=2, and I didn't realize it produced warnings. I removed -Werror for now until it can be fixed. I don't remember having a problem with butterfly

Re: Attribute warn_unused_result

2006-08-23 Thread Robert Connolly
Those warnings are from -D_FORTIFY_SOURCE=2, and I didn't realize it produced warnings. I removed -Werror for now until it can be fixed. I don't remember having a problem with butterfly toolchain with --enable-werror-always though. robert On Wednesday 23 August 2006 15:33, Filip Bartmann

Re: Owl tmp patches

2006-08-20 Thread Robert Connolly
Original copies of the patches, from Owl's cvs, are here: http://www.topside.org/~ashes/hlfs/Owl-tmp-patches/ robert pgpmutIQRkzDN.pgp Description: PGP signature -- http://linuxfromscratch.org/mailman/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the

Blowfish

2006-08-03 Thread Robert Connolly
Hi. I have a couple patches ported from the Owl blowfish patches: http://www.topside.org/~ashes/new/glibc-2.4-owl_blowfish.patch http://www.topside.org/~ashes/new/shadow-4.0.17-owl_blowfish.patch I'm not sure if sulogin needs a patch or not. I noticed sulogin.c doesn't seem to care what hash

Re: --with-pic

2006-08-03 Thread Robert Connolly
With -fPIC in the gcc specs the --with-pic option makes no difference on i386, but it does make a difference on m68k, ppc, and sparc. The gcc specs in hlfs-unstable allow -fpic to override -fPIC. The --with-pic options would allow the package developers to choose which flag is appropriate. A

Re: 0.2 Roadmap

2006-07-26 Thread Robert Connolly
On July 26, 2006 09:11 am, Sebastian Faulborn wrote: What about adding blowfish passwords which is a major improvement in security. I've been planning to port the Owl blowfish patch for Glibc to uClibc. There was also some debate about adding blowfish to HLFS a year or two ago, that's why it

Re: Stability and debugging

2006-07-22 Thread Robert Connolly
On July 22, 2006 03:56 pm, Declan Moriarty wrote: These sort of results question the whole business of compiling from scratch. I have gathered this much 1. Compiling new versions (particularly gcc-4.1x) the way LFS does it is somewhere between a major PITA and impossible. I'm not sure what

Adjusting toolchain

2006-07-22 Thread Robert Connolly
Hi. Sorry if this has been discused before. Rather than: SPECFILE=`dirname $(gcc -print-libgcc-file-name)`/specs gcc -dumpspecs $SPECFILE sed '[EMAIL PROTECTED]/lib/ld-linux.so.2@/tools@g' $SPECFILE tempspecfile mv -vf tempspecfile $SPECFILE unset SPECFILE I find it cleaner and easier to

  1   2   >