--- Em seg, 9/1/12, Bruce Dubbs escreveu: > De: Bruce Dubbs > Assunto: Re: [blfs-dev] Security LFS7.0 > Para: "BLFS Development List" <blfs-...@linuxfromscratch.org> > Data: Segunda-feira, 9 de Janeiro de 2012, 19:06 > Fernando de Oliveira wrote: > > $ uname -a > > Linux VMWLFS70 3.2.0 #1 SMP Sun Jan 8 22:25:33 BRT > 2012 i686 i686 i386 GNU/Linux > > > > These packages were successfully installed:
... > > Three of them are more recent than the book's ones, > > It's really hard to keep up with every package. The > packages were > current when updated: Thanks for the reply, Bruce. Just to complete my previous information, it is not plain 7.0: $ cat /etc/issue Linux From Scratch 7.0 (SVN-20111210) \v \n \l \d \t \s \m \r ... > actually current is > > gnutls-3.0.11.tar.xz I mentioned the packages becauseit was aked (I thought it was you) to inform when upgrading with respect to the book. Thanks for the news about gnutls, which I will be upgrading soon. > however, > Linux-PAM-1.1.5 cannot be installed by the book, without > modification, > as has been already discussed in blfs-support. .. > --with-gnu-ld \ > > > --enable-read-both-confs --enable-shared > --disable-static \ > > > --disable-nis > > > While "--enable-shared --disable-static" where not > essential, make > failed without "--disable-nis". I did not wish to install > libtirpc just > for that. > > Did you try with the changes at > http://www.linuxfromscratch.org/lfs/errata/stable/ I am quite sure I did. The copy commands are in the body of SVN-20111210 and in my script. The log shows: ... `../glibc-2.14.1/sunrpc/rpc/auth.h' -> `/usr/include/rpc/auth.h' `../glibc-2.14.1/sunrpc/rpc/auth_des.h' -> `/usr/include/rpc/auth_des.h' `../glibc-2.14.1/sunrpc/rpc/auth_unix.h' -> `/usr/include/rpc/auth_unix.h' `../glibc-2.14.1/sunrpc/rpc/clnt.h' -> `/usr/include/rpc/clnt.h' `../glibc-2.14.1/sunrpc/rpc/des_crypt.h' -> `/usr/include/rpc/des_crypt.h' `../glibc-2.14.1/sunrpc/rpc/key_prot.h' -> `/usr/include/rpc/key_prot.h' `../glibc-2.14.1/sunrpc/rpc/netdb.h' -> `/usr/include/rpc/netdb.h' `../glibc-2.14.1/sunrpc/rpc/pmap_clnt.h' -> `/usr/include/rpc/pmap_clnt.h' `../glibc-2.14.1/sunrpc/rpc/pmap_prot.h' -> `/usr/include/rpc/pmap_prot.h' `../glibc-2.14.1/sunrpc/rpc/pmap_rmt.h' -> `/usr/include/rpc/pmap_rmt.h' `../glibc-2.14.1/sunrpc/rpc/rpc.h' -> `/usr/include/rpc/rpc.h' `../glibc-2.14.1/sunrpc/rpc/rpc_des.h' -> `/usr/include/rpc/rpc_des.h' `../glibc-2.14.1/sunrpc/rpc/rpc_msg.h' -> `/usr/include/rpc/rpc_msg.h' `../glibc-2.14.1/sunrpc/rpc/svc.h' -> `/usr/include/rpc/svc.h' `../glibc-2.14.1/sunrpc/rpc/svc_auth.h' -> `/usr/include/rpc/svc_auth.h' `../glibc-2.14.1/sunrpc/rpc/types.h' -> `/usr/include/rpc/types.h' `../glibc-2.14.1/sunrpc/rpc/xdr.h' -> `/usr/include/rpc/xdr.h' `../glibc-2.14.1/sunrpc/rpcsvc/bootparam.h' -> `/usr/include/rpcsvc/bootparam.h' `../glibc-2.14.1/nis/rpcsvc/nis.h' -> `/usr/include/rpcsvc/nis.h' `../glibc-2.14.1/nis/rpcsvc/nis_callback.h' -> `/usr/include/rpcsvc/nis_callback.h' `../glibc-2.14.1/nis/rpcsvc/nis_tags.h' -> `/usr/include/rpcsvc/nis_tags.h' `../glibc-2.14.1/nis/rpcsvc/nislib.h' -> `/usr/include/rpcsvc/nislib.h' `../glibc-2.14.1/nis/rpcsvc/yp.h' -> `/usr/include/rpcsvc/yp.h' `../glibc-2.14.1/nis/rpcsvc/yp_prot.h' -> `/usr/include/rpcsvc/yp_prot.h' `../glibc-2.14.1/nis/rpcsvc/ypclnt.h' -> `/usr/include/rpcsvc/ypclnt.h' `../glibc-2.14.1/nis/rpcsvc/ypupd.h' -> `/usr/include/rpcsvc/ypupd.h' ... I have the log of the failed PAM build. At the end: ... libtool: link: gcc -shared .libs/bigcrypt.o .libs/pam_unix_acct.o .libs/pam_unix_auth.o .libs/pam_unix_passwd.o .libs/pam_unix_sess.o .libs/support.o .libs/passverify.o .libs/yppasswd_xdr.o .libs/md5_good.o .libs/md5_broken.o -Wl,-rpath -Wl,/home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/libpam/.libs -L/home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/libpam /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/libpam/.libs/libpam.so -ldl -lcrypt -lnsl -Wl,--version-script=./../modules.map -Wl,--as-needed -Wl,--no-undefined -Wl,-O1 -Wl,-soname -Wl,pam_unix.so -o .libs/pam_unix.so .libs/pam_unix_passwd.o: In function `_do_setpass': /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/pam_unix_passwd.c:363: undefined reference to `clnt_create' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/pam_unix_passwd.c:364: undefined reference to `authunix_create_default' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/pam_unix_passwd.c:368: undefined reference to `xdr_int' .libs/yppasswd_xdr.o: In function `xdr_xpasswd': /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:23: undefined reference to `xdr_string' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:24: undefined reference to `xdr_string' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:25: undefined reference to `xdr_int' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:26: undefined reference to `xdr_int' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:27: undefined reference to `xdr_string' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:28: undefined reference to `xdr_string' /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:29: undefined reference to `xdr_string' .libs/yppasswd_xdr.o: In function `xdr_yppasswd': /home/fernando/tmp/paco-build-2012.01.08/Linux-PAM-1.1.5/modules/pam_unix/yppasswd_xdr.c:36: undefined reference to `xdr_string' collect2: ld returned 1 exit status make[3]: ** [pam_unix.la] Erro 1 ... > > When I did PAM, I did have libtirpc installed, but I > generally don't > like or install PAM. I really don't see any value > added unless you are > using ldap to replace /etc/{passwd,shadow}. I believe I needed PAM for some package, slim or lxdm, maybe. So, I am doing it soon. > > > I would like to know if the choice "--enable-shared > --disable-static" > > is safe, and what are the consequences of > "--disable-nis". > > Some here advocate --enable-shared and > --disable-static. It's a > personal choice. I doubt --with-gnu-ld does > anything. > > I'm not sure --disable-static is needed if the glibc nis > headers have > been installed. That does need to be rechecked. Thank you for this, Bruce. []s, Fernando -- http://linuxfromscratch.org/mailman/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
