diff --git a/appendices/dependencies.xml b/appendices/dependencies.xml index 54b3d65e0..1d693e064 100644 --- a/appendices/dependencies.xml +++ b/appendices/dependencies.xml @@ -1892,7 +1892,7 @@ &dependencies; Bash, Binutils, Coreutils, Diffutils, Gawk, GCC, Glibc, Grep, - Make, and Sed + Make, Perl, and Sed diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml index 22a4bdf1e..e13faf328 100644 --- a/chapter01/changelog.xml +++ b/chapter01/changelog.xml @@ -40,6 +40,32 @@ appropriate for the entry or if needed the entire day's listitem. --> + + 2023-07-15 + + + [bdubbs] - Update to iana-etc-20230629. Addresses + #5006. + + + [bdubbs] - Update to linux-6.4.3. Fixes + #5284. + + + [bdubbs] - Update to libxcrypt-4.4.36. Fixes + #5283. + + + [bdubbs] - Update to groff-1.23.0. Fixes + #5282. + + + [bdubbs] - Update to perl-5.38.0. Fixes + #5281. + + + + 2023-07-02 diff --git a/chapter01/whatsnew.xml b/chapter01/whatsnew.xml index 68ec876ab..a2d4cc179 100644 --- a/chapter01/whatsnew.xml +++ b/chapter01/whatsnew.xml @@ -136,9 +136,9 @@ Grep-&grep-version; - + diff --git a/chapter08/groff.xml b/chapter08/groff.xml index 4ab954d13..3a4dc2c56 100644 --- a/chapter08/groff.xml +++ b/chapter08/groff.xml @@ -57,7 +57,9 @@ make - This package does not come with a test suite. + To test the results, issue: + +make check Install the package: diff --git a/chapter08/shadow.xml b/chapter08/shadow.xml index 93d1f3f7e..0f34d70ac 100644 --- a/chapter08/shadow.xml +++ b/chapter08/shadow.xml @@ -60,11 +60,10 @@ find man -name Makefile.in -exec sed -i 's/getspnam\.3 / /' {} \; find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \; Instead of using the default - crypt method, use the more secure - SHA-512 method of password encryption, which also - allows passwords longer than 8 characters. In addition, set the number of - rounds to 500,000 instead of the default 5000, which is much too low to - prevent brute force password attacks. It is also necessary to change + crypt method, use the much more secure + YESCRYPT method of password encryption, which also + allows passwords longer than 8 characters. + It is also necessary to change the obsolete /var/spool/mail location for user mailboxes that Shadow uses by default to the /var/mail location used currently. And, @@ -81,10 +80,9 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \; -sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD SHA512:' \ - -e 's@#\(SHA_CRYPT_..._ROUNDS 5000\)@\100@' \ - -e 's:/var/spool/mail:/var/mail:' \ - -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \ +sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD YESCRYPT:' \ + -e 's:/var/spool/mail:/var/mail:' \ + -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \ -i etc/login.defs @@ -106,8 +104,9 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;Prepare Shadow for compilation: touch /usr/bin/passwd -./configure --sysconfdir=/etc \ - --disable-static \ +./configure --sysconfdir=/etc \ + --disable-static \ + --with-{b,yes}crypt \ --with-group-name-max-length=32 @@ -122,6 +121,21 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \; + + + --with-{b,yes}crypt + + The shell expands this to two switches, + --with-bcrypt and + --with-yescrypt. They allow shadow to use + the Bcrypt and Yescrypt algorithms implemented by + Libxcrypt for hashing passwords. + These algorithms are more secure (in particular, much more + resistant to GPU-based attacks) than the traditional SHA + algorithms. + + + --with-group-name-max-length=32 diff --git a/chapter10/kernel.xml b/chapter10/kernel.xml index a6c030f9e..a1ac03523 100644 --- a/chapter10/kernel.xml +++ b/chapter10/kernel.xml @@ -166,7 +166,6 @@ General setup ---> < > Enable kernel headers through /sys/kernel/kheaders.tar.xz [CONFIG_IKHEADERS] [*] Control Group support [CONFIG_CGROUPS] ---> [*] Memory controller [CONFIG_MEMCG] - [ ] Enable deprecated sysfs features to support old userspace tools [CONFIG_SYSFS_DEPRECATED] [ ] Configure standard kernel features (expert users) [CONFIG_EXPERT] General architecture-dependent options ---> [*] Enable seccomp to safely compute untrusted bytecode [CONFIG_SECCOMP] diff --git a/packages.ent b/packages.ent index 72bdadd2d..2abb800d1 100644 --- a/packages.ent +++ b/packages.ent @@ -299,10 +299,10 @@ - - + + - + @@ -325,10 +325,10 @@ - - + + - + @@ -430,22 +430,22 @@ - - - - + + + + - + - + - +