diff --git a/appendices/dependencies.xml b/appendices/dependencies.xml
index 54b3d65e0..1d693e064 100644
--- a/appendices/dependencies.xml
+++ b/appendices/dependencies.xml
@@ -1892,7 +1892,7 @@
&dependencies;
Bash, Binutils, Coreutils, Diffutils, Gawk, GCC, Glibc, Grep,
- Make, and Sed
+ Make, Perl, and Sed
diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index 22a4bdf1e..e13faf328 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -40,6 +40,32 @@
appropriate for the entry or if needed the entire day's listitem.
-->
+
+ 2023-07-15
+
+
+ [bdubbs] - Update to iana-etc-20230629. Addresses
+ #5006.
+
+
+ [bdubbs] - Update to linux-6.4.3. Fixes
+ #5284.
+
+
+ [bdubbs] - Update to libxcrypt-4.4.36. Fixes
+ #5283.
+
+
+ [bdubbs] - Update to groff-1.23.0. Fixes
+ #5282.
+
+
+ [bdubbs] - Update to perl-5.38.0. Fixes
+ #5281.
+
+
+
+
2023-07-02
diff --git a/chapter01/whatsnew.xml b/chapter01/whatsnew.xml
index 68ec876ab..a2d4cc179 100644
--- a/chapter01/whatsnew.xml
+++ b/chapter01/whatsnew.xml
@@ -136,9 +136,9 @@
Grep-&grep-version;
-
+
diff --git a/chapter08/groff.xml b/chapter08/groff.xml
index 4ab954d13..3a4dc2c56 100644
--- a/chapter08/groff.xml
+++ b/chapter08/groff.xml
@@ -57,7 +57,9 @@
make
- This package does not come with a test suite.
+ To test the results, issue:
+
+make check
Install the package:
diff --git a/chapter08/shadow.xml b/chapter08/shadow.xml
index 93d1f3f7e..0f34d70ac 100644
--- a/chapter08/shadow.xml
+++ b/chapter08/shadow.xml
@@ -60,11 +60,10 @@ find man -name Makefile.in -exec sed -i 's/getspnam\.3 / /' {} \;
find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;
Instead of using the default
- crypt method, use the more secure
- SHA-512 method of password encryption, which also
- allows passwords longer than 8 characters. In addition, set the number of
- rounds to 500,000 instead of the default 5000, which is much too low to
- prevent brute force password attacks. It is also necessary to change
+ crypt method, use the much more secure
+ YESCRYPT method of password encryption, which also
+ allows passwords longer than 8 characters.
+ It is also necessary to change
the obsolete /var/spool/mail location
for user mailboxes that Shadow uses by default to the /var/mail location used currently. And,
@@ -81,10 +80,9 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;
-sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD SHA512:' \
- -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@' \
- -e 's:/var/spool/mail:/var/mail:' \
- -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \
+sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD YESCRYPT:' \
+ -e 's:/var/spool/mail:/var/mail:' \
+ -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \
-i etc/login.defs
@@ -106,8 +104,9 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;Prepare Shadow for compilation:
touch /usr/bin/passwd
-./configure --sysconfdir=/etc \
- --disable-static \
+./configure --sysconfdir=/etc \
+ --disable-static \
+ --with-{b,yes}crypt \
--with-group-name-max-length=32
@@ -122,6 +121,21 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;
+
+
+ --with-{b,yes}crypt
+
+ The shell expands this to two switches,
+ --with-bcrypt and
+ --with-yescrypt. They allow shadow to use
+ the Bcrypt and Yescrypt algorithms implemented by
+ Libxcrypt for hashing passwords.
+ These algorithms are more secure (in particular, much more
+ resistant to GPU-based attacks) than the traditional SHA
+ algorithms.
+
+
+
--with-group-name-max-length=32
diff --git a/chapter10/kernel.xml b/chapter10/kernel.xml
index a6c030f9e..a1ac03523 100644
--- a/chapter10/kernel.xml
+++ b/chapter10/kernel.xml
@@ -166,7 +166,6 @@ General setup --->
< > Enable kernel headers through /sys/kernel/kheaders.tar.xz [CONFIG_IKHEADERS]
[*] Control Group support [CONFIG_CGROUPS] --->
[*] Memory controller [CONFIG_MEMCG]
- [ ] Enable deprecated sysfs features to support old userspace tools [CONFIG_SYSFS_DEPRECATED]
[ ] Configure standard kernel features (expert users) [CONFIG_EXPERT]
General architecture-dependent options --->
[*] Enable seccomp to safely compute untrusted bytecode [CONFIG_SECCOMP]
diff --git a/packages.ent b/packages.ent
index 72bdadd2d..2abb800d1 100644
--- a/packages.ent
+++ b/packages.ent
@@ -299,10 +299,10 @@
-
-
+
+
-
+
@@ -325,10 +325,10 @@
-
-
+
+
-
+
@@ -430,22 +430,22 @@
-
-
-
-
+
+
+
+
-
+
-
+
-
+