diff options
| author | Matthew Burgess <matthew@linuxfromscratch.org> | 2004-05-03 10:59:46 +0000 |
|---|---|---|
| committer | Matthew Burgess <matthew@linuxfromscratch.org> | 2004-05-03 10:59:46 +0000 |
| commit | 673b0d84ba9591e07c0bdf0ee49d92eba10f502c (patch) | |
| tree | 129e27a1450727b440da4378e0117a468eb9c25e /chapter06/changingowner.xml | |
| parent | 287ea55da70ceb1f0990554b7db921d525fef816 (diff) | |
* Merged newxml into HEAD
git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@3435 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
Diffstat (limited to 'chapter06/changingowner.xml')
| -rw-r--r-- | chapter06/changingowner.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/chapter06/changingowner.xml b/chapter06/changingowner.xml new file mode 100644 index 000000000..cef15f8ba --- /dev/null +++ b/chapter06/changingowner.xml @@ -0,0 +1,36 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN" "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [ + <!ENTITY % general-entities SYSTEM "../general.ent"> + %general-entities; +]> +<sect1 id="ch-system-changingowner"> +<title>Changing ownership</title> +<?dbhtml filename="changingowner.html"?> + +<para>Right now the <filename class="directory">/tools</filename> directory +is owned by the user <emphasis>lfs</emphasis>, a user that exists only on your +host system. Although you will probably want to delete the +<filename class="directory">/tools</filename> directory once you have +finished your LFS system, you may want to keep it around, for example to +build more LFS systems. But if you keep the +<filename class="directory">/tools</filename> directory as it is, you end up +with files owned by a user ID without a corresponding account. This is +dangerous because a user account created later on could get this same user ID +and would suddenly own the <filename class="directory">/tools</filename> +directory and all the files therein, thus exposing these files to possible +malicious manipulation.</para> + +<para>To avoid this issue, you could add the <emphasis>lfs</emphasis> user to +your new LFS system later on when creating the <filename>/etc/passwd</filename> +file, taking care to assign it the same user and group IDs as on your host +system. Alternatively, you can (and the book assumes you do) assign the +contents of the <filename class="directory">/tools</filename> directory to +user <emphasis>root</emphasis> by running the following command:</para> + +<screen><userinput>chown -R 0:0 /tools</userinput></screen> + +<para>The command uses <quote>0:0</quote> instead of <quote>root:root</quote>, +because <userinput>chown</userinput> is unable to resolve the name +<quote>root</quote> until the password file has been created.</para> + +</sect1> |