Changeset d2ecc65 for BOOK/boot/common/changingowner.xml

Timestamp:

Apr 19, 2014, 10:07:08 PM (10 years ago)

Author:

Chris Staub <chris@…>

Branches:

clfs-3.0.0-systemd, clfs-3.0.0-sysvinit, master, systemd, sysvinit

Children:

76ccba3

Parents:

03679c8

Message:

Reorganized boot section

File:

• BOOK/boot/common/changingowner.xml (modified) (1 diff)

BOOK/boot/common/changingowner.xml

@@ -11 +11 @@
   <title>Changing Ownership</title>
 
-  <para os="a">Currently, the <filename class="directory">${CLFS}</filename>
-  directory and all of its subdirectories  are owned by the user
-  <systemitem class="username">clfs</systemitem>, a user that exists only
-  on the host system. For security reasons, the ${CLFS} root directory and
-  all of its subdirectories should be owned by
-  <systemitem class="username">root</systemitem>. Change the ownership
-  for ${CLFS} and its subdirectories by running this command:</para>
+  <para os="a">Currently, the <filename class="directory">/tools</filename>
+  and <filename class="directory">/cross-tools</filename> directories
+  are owned by the user <emphasis>clfs</emphasis>, a user that
+  exists only on the host system. Although <filename
+  class="directory">/tools</filename> and <filename
+  class="directory">/cross-tools</filename> can be deleted once the CLFS
+  system has been finished, they can be retained to build
+  additional CLFS systems. If the <filename class="directory">/tools</filename>
+  and <filename class="directory">/cross-tools</filename> directories are
+  kept as is, the files are owned by a user ID without a corresponding
+  account. This is dangerous because a user account created later could
+  get this same user ID and would own these directories and all the files
+  therein, thus exposing those files to possible malicious manipulation.</para>
 
-<screen os="b"><userinput>chown -Rv &uid-root;:&gid-root; ${CLFS}</userinput></screen>
+  <para os="b">One possible fix for this issue might be to add the
+  <systemitem class="username">clfs</systemitem> user to the new CLFS system
+  later when creating the <filename>/etc/passwd</filename> file, taking care
+  to assign it the same user and group IDs as on the host system. Alternatively,
+  assign the contents of the <filename class="directory">/tools</filename>
+  and <filename class="directory">/cross-tools</filename> directories to
+  user <systemitem class="username">root</systemitem> by running the
+  following commands:</para>
+
+<screen os="c"><userinput>chown -Rv 0:0 ${CLFS}/tools
+chown -Rv 0:0 ${CLFS}/cross-tools</userinput></screen>
 
 </sect1>