mirror of
https://git.linuxfromscratch.org/lfs.git
synced 2025-06-18 19:29:21 +01:00
Straighten out capitalization, correct a few grammatical errors,
improve English idiom, clarify a few things, remove superfluous verbiage, etc.
This commit is contained in:
parent
651f491b51
commit
54948b710c
@ -24,7 +24,7 @@
|
||||
<title/>
|
||||
|
||||
<para>The Acl package contains utilities to administer Access Control Lists,
|
||||
which are used to define more fine-grained discretionary access rights for
|
||||
which are used to define fine-grained discretionary access rights for
|
||||
files and directories.</para>
|
||||
|
||||
<segmentedlist>
|
||||
@ -52,11 +52,11 @@
|
||||
|
||||
<screen><userinput remap="make">make</userinput></screen>
|
||||
|
||||
<para>The Acl tests need to be run on a filesystem that supports access
|
||||
controls after <application>Coreutils</application> has been built with the
|
||||
Acl libraries. If desired, return to this package and run <command>make
|
||||
check</command> after <application>Coreutils</application> has been built
|
||||
later in this chapter.</para>
|
||||
<para>The Acl tests must be run on a filesystem that supports access
|
||||
controls, but not until the <application>Coreutils</application> package has been built,
|
||||
using the <application>Acl</application> libraries. If desired, return to this package
|
||||
and run <command>make check</command> after the <application>Coreutils</application>
|
||||
package has been built.</para>
|
||||
|
||||
<para>Install the package:</para>
|
||||
|
||||
|
@ -23,8 +23,8 @@
|
||||
<sect2 role="package">
|
||||
<title/>
|
||||
|
||||
<para>The attr package contains utilities to administer the extended
|
||||
attributes on filesystem objects.</para>
|
||||
<para>The Attr package contains utilities to administer the extended
|
||||
attributes of filesystem objects.</para>
|
||||
|
||||
<segmentedlist>
|
||||
<segtitle>&buildtime;</segtitle>
|
||||
@ -52,7 +52,7 @@
|
||||
|
||||
<screen><userinput remap="make">make</userinput></screen>
|
||||
|
||||
<para>The tests need to be run on a filesystem that supports extended
|
||||
<para>The tests must be run on a filesystem that supports extended
|
||||
attributes such as the ext2, ext3, or ext4 filesystems.
|
||||
To test the results, issue:</para>
|
||||
|
||||
|
@ -23,9 +23,9 @@
|
||||
<sect2 role="package">
|
||||
<title/>
|
||||
|
||||
<para>The Libcap package implements the user-space interfaces to the POSIX
|
||||
1003.1e capabilities available in Linux kernels. These capabilities are a
|
||||
partitioning of the all powerful root privilege into a set of distinct
|
||||
<para>The Libcap package implements the user-space interface to the POSIX
|
||||
1003.1e capabilities available in Linux kernels. These capabilities
|
||||
partition the all-powerful root privilege into a set of distinct
|
||||
privileges.</para>
|
||||
|
||||
<segmentedlist>
|
||||
@ -116,7 +116,7 @@
|
||||
<varlistentry id="getpcaps">
|
||||
<term><command>getpcaps</command></term>
|
||||
<listitem>
|
||||
<para>Displays the capabilities on the queried process(es)</para>
|
||||
<para>Displays the capabilities of the queried process(es)</para>
|
||||
<indexterm zone="ch-system-libcap getpcaps">
|
||||
<primary sortas="b-getpcaps">getpcaps</primary>
|
||||
</indexterm>
|
||||
|
@ -58,7 +58,7 @@ make html</userinput></screen>
|
||||
Do not skip it under any circumstances.</para>
|
||||
</important>
|
||||
|
||||
<para>Test the results and ensure that all tests passed:</para>
|
||||
<para>Test the results and ensure that all 183 tests passed:</para>
|
||||
|
||||
<screen><userinput remap="test">make check</userinput></screen>
|
||||
|
||||
|
@ -66,16 +66,16 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s
|
||||
the obsolete <filename class="directory">/var/spool/mail</filename> location
|
||||
for user mailboxes that Shadow uses by default to the <filename
|
||||
class="directory">/var/mail</filename> location used currently. And,
|
||||
get rid of <filename class="directory">/bin</filename> and
|
||||
<filename class="directory">/sbin</filename> from <envar>PATH</envar>,
|
||||
since they are simply symlinks to their counterpart in
|
||||
remove <filename class="directory">/bin</filename> and
|
||||
<filename class="directory">/sbin</filename> from the <envar>PATH</envar>,
|
||||
since they are simply symlinks to their counterparts in
|
||||
<filename class="directory">/usr</filename>.</para>
|
||||
|
||||
<note>
|
||||
<para>If <filename class="directory">/bin</filename> and/or
|
||||
<filename class="directory">/sbin</filename> are preferred to be
|
||||
left over in <envar>PATH</envar> for some reason, modify
|
||||
<envar>PATH</envar> in <filename>.bashrc</filename> after LFS is
|
||||
<para>If you wish to include <filename class="directory">/bin</filename>
|
||||
and/or <filename class="directory">/sbin</filename> in the <envar>PATH</envar>
|
||||
for some reason, modify the
|
||||
<envar>PATH</envar> in <filename>.bashrc</filename> after LFS has been
|
||||
built.</para>
|
||||
</note>
|
||||
|
||||
@ -85,7 +85,7 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s
|
||||
-i etc/login.defs</userinput></screen>
|
||||
|
||||
<note>
|
||||
<para>If you chose to build Shadow with Cracklib support, run the following:</para>
|
||||
<para>If you chose to build Shadow with Cracklib support, issue this command:</para>
|
||||
|
||||
<screen role="nodump"><userinput>sed -i 's:DICTPATH.*:DICTPATH\t/lib/cracklib/pw_dict:' etc/login.defs</userinput></screen>
|
||||
</note>
|
||||
@ -108,21 +108,22 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s
|
||||
--with-group-name-max-length=32</userinput></screen>
|
||||
|
||||
<variablelist>
|
||||
<title>The meaning of the configure option:</title>
|
||||
<title>The meaning of the new configuration options:</title>
|
||||
|
||||
<varlistentry>
|
||||
<term><command>touch /usr/bin/passwd</command></term>
|
||||
<listitem>
|
||||
<para>The file <filename>/usr/bin/passwd</filename> needs
|
||||
to exist because its location is hardcoded in some programs, and
|
||||
if it does not exist, the default location is not right.</para>
|
||||
to exist because its location is hardcoded in some programs;
|
||||
if it does not already exist, the installation script will
|
||||
create it in the wrong place.</para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
<varlistentry>
|
||||
<term><parameter>--with-group-name-max-length=32</parameter></term>
|
||||
<listitem>
|
||||
<para>The maximum user name is 32 characters. Make the maximum
|
||||
group name the same.</para>
|
||||
<para>The longest permissible user name is 32 characters. Make the maximum
|
||||
length of a group name the same.</para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
@ -153,9 +154,9 @@ make -C man install-man</userinput></screen>
|
||||
groups; set and change their passwords; and perform other administrative
|
||||
tasks. For a full explanation of what <emphasis>password shadowing</emphasis>
|
||||
means, see the <filename>doc/HOWTO</filename> file within the unpacked
|
||||
source tree. If using Shadow support, keep in mind that programs which need
|
||||
source tree. If you use Shadow support, keep in mind that programs which need
|
||||
to verify passwords (display managers, FTP programs, pop3 daemons, etc.)
|
||||
must be Shadow-compliant. That is, they need to be able to work with
|
||||
must be Shadow-compliant. That is, they must be able to work with
|
||||
shadowed passwords.</para>
|
||||
|
||||
<para>To enable shadowed passwords, run the following command:</para>
|
||||
@ -167,44 +168,44 @@ make -C man install-man</userinput></screen>
|
||||
<screen><userinput>grpconv</userinput></screen>
|
||||
|
||||
<para>Shadow's default configuration for the <command>useradd</command>
|
||||
utility has a few caveats that need some explanation. First, the default
|
||||
utility needs some explanation. First, the default
|
||||
action for the <command>useradd</command> utility is to create the user and
|
||||
a group of the same name as the user. By default the user ID (UID) and
|
||||
group ID (GID) numbers will begin with 1000. This means if you don't pass
|
||||
parameters to <command>useradd</command>, each user will be a member of a
|
||||
a group with the same name as the user. By default the user ID (UID) and
|
||||
group ID (GID) numbers will begin at 1000. This means if you don't pass
|
||||
extra parameters to <command>useradd</command>, each user will be a member of a
|
||||
unique group on the system. If this behavior is undesirable, you'll need
|
||||
to pass one of the <parameter>-g</parameter> or <parameter>-N</parameter>
|
||||
parameter to <command>useradd</command> or to change the setting of
|
||||
to pass either the <parameter>-g</parameter> or <parameter>-N</parameter>
|
||||
parameter to <command>useradd</command>, or else change the setting of
|
||||
<parameter>USERGROUPS_ENAB</parameter> in
|
||||
<filename>/etc/login.defs</filename>. See <filename>useradd(8)</filename>
|
||||
for more information.</para>
|
||||
|
||||
<para>Second, to change the default parameters, the file
|
||||
<filename>/etc/default/useradd</filename> needs to be created and tailored
|
||||
<filename>/etc/default/useradd</filename> must be created and tailored
|
||||
to suit your particular needs. Create it with:</para>
|
||||
|
||||
<screen><userinput>mkdir -p /etc/default
|
||||
useradd -D --gid 999</userinput></screen>
|
||||
|
||||
<variablelist>
|
||||
<title><filename>/etc/default/useradd</filename> Parameter Explanations</title>
|
||||
<title><filename>/etc/default/useradd</filename> parameter explanations</title>
|
||||
|
||||
<varlistentry>
|
||||
<term><parameter>GROUP=999</parameter></term>
|
||||
<listitem>
|
||||
<para>This parameter sets the beginning of the group numbers used in
|
||||
the <filename>/etc/group</filename> file. The particular value 999
|
||||
comes from the <parameter>--gid</parameter> parameter above. You can
|
||||
modify it to anything you desire.
|
||||
comes from the <parameter>--gid</parameter> parameter above. You
|
||||
may set it to any desired value.
|
||||
|
||||
Note that <command>useradd</command> will never reuse a UID or GID.
|
||||
If the number identified in this parameter is used, it will use the
|
||||
next available number. Note also that if you don't have a group with
|
||||
an ID equal to this number on your system the first time you use
|
||||
an ID equal to this number on your system, then the first time you use
|
||||
<command>useradd</command> without the <parameter>-g</parameter>
|
||||
parameter, you will get a message displayed on the terminal that
|
||||
says: <computeroutput>useradd: unknown GID 999</computeroutput>,
|
||||
although the account is correctly created. That is why we have
|
||||
parameter, an error message will be generated—<computeroutput>useradd:
|
||||
unknown GID 999</computeroutput>,
|
||||
even though the account has been created correctly. That is why we
|
||||
created the group <systemitem class="groupname">users</systemitem>
|
||||
with this group ID in <xref linkend='ch-tools-createfiles'/>.</para>
|
||||
|
||||
@ -214,12 +215,11 @@ useradd -D --gid 999</userinput></screen>
|
||||
<term><parameter>CREATE_MAIL_SPOOL=yes</parameter></term>
|
||||
<listitem>
|
||||
<para>This parameter causes <command>useradd</command> to create a
|
||||
mailbox file for the newly created user. <command>useradd</command>
|
||||
will make the group ownership of this file to the
|
||||
mailbox file for each new user. <command>useradd</command>
|
||||
will assign the group ownership of this file to the
|
||||
<systemitem class="groupname">mail</systemitem> group with 0660
|
||||
permissions. If you would prefer that these mailbox files are not
|
||||
created by <command>useradd</command>, issue the following
|
||||
command:</para>
|
||||
permissions. If you would rather not create these files,
|
||||
issue the following command:</para>
|
||||
|
||||
<screen><userinput>sed -i '/MAIL/s/yes/no/' /etc/default/useradd</userinput></screen>
|
||||
</listitem>
|
||||
@ -230,7 +230,7 @@ useradd -D --gid 999</userinput></screen>
|
||||
</sect2>
|
||||
|
||||
<sect2 role="configuration">
|
||||
<title>Setting the root password</title>
|
||||
<title>Setting the Root Password</title>
|
||||
|
||||
<para>Choose a password for user <emphasis>root</emphasis> and set it
|
||||
by running:</para>
|
||||
@ -329,7 +329,7 @@ useradd -D --gid 999</userinput></screen>
|
||||
<term><command>faillog</command></term>
|
||||
<listitem>
|
||||
<para>Is used to examine the log of login failures, to set a maximum
|
||||
number of failures before an account is blocked, or to reset the
|
||||
number of failures before an account is blocked, and to reset the
|
||||
failure count</para>
|
||||
<indexterm zone="ch-system-shadow faillog">
|
||||
<primary sortas="b-faillog">faillog</primary>
|
||||
@ -509,9 +509,8 @@ useradd -D --gid 999</userinput></screen>
|
||||
<varlistentry id="nologin">
|
||||
<term><command>nologin</command></term>
|
||||
<listitem>
|
||||
<para>Displays a message that an account is not available; it is designed
|
||||
to be used as the default shell for accounts that have been
|
||||
disabled</para>
|
||||
<para>Displays a message saying an account is not available; it is designed
|
||||
to be used as the default shell for disabled accounts</para>
|
||||
<indexterm zone="ch-system-shadow nologin">
|
||||
<primary sortas="b-nologin">nologin</primary>
|
||||
</indexterm>
|
||||
@ -597,7 +596,7 @@ useradd -D --gid 999</userinput></screen>
|
||||
<varlistentry id="userdel">
|
||||
<term><command>userdel</command></term>
|
||||
<listitem>
|
||||
<para>Deletes the given user account</para>
|
||||
<para>Deletes the specified user account</para>
|
||||
<indexterm zone="ch-system-shadow userdel">
|
||||
<primary sortas="b-userdel">userdel</primary>
|
||||
</indexterm>
|
||||
@ -607,8 +606,8 @@ useradd -D --gid 999</userinput></screen>
|
||||
<varlistentry id="usermod">
|
||||
<term><command>usermod</command></term>
|
||||
<listitem>
|
||||
<para>Is used to modify the given user's login name, User
|
||||
Identification (UID), shell, initial group, home directory, etc.</para>
|
||||
<para>Is used to modify the given user's login name, user
|
||||
identification (UID), shell, initial group, home directory, etc.</para>
|
||||
<indexterm zone="ch-system-shadow usermod">
|
||||
<primary sortas="b-usermod">usermod</primary>
|
||||
</indexterm>
|
||||
@ -640,7 +639,7 @@ useradd -D --gid 999</userinput></screen>
|
||||
<varlistentry id="libsubid">
|
||||
<term><filename class='libraryfile'>libsubid</filename></term>
|
||||
<listitem>
|
||||
<para>library for process subordinate id ranges for users</para>
|
||||
<para>library for processing subordinate id ranges for users</para>
|
||||
<indexterm zone="ch-system-shadow libsubid">
|
||||
<primary sortas="c-libsubid">libsubid</primary>
|
||||
</indexterm>
|
||||
|
Loading…
Reference in New Issue
Block a user