Mercurial > dropbear
view libtomcrypt/doc/makefile @ 1930:299f4f19ba19
Add /usr/sbin and /sbin to default root PATH
When dropbear is used in a very restricted environment (such as in a
initrd), the default user shell is often also very restricted
and doesn't take care of setting the PATH so the user ends up
with the PATH set by dropbear. Unfortunately, dropbear always
sets "/usr/bin:/bin" as default PATH even for the root user
which should have /usr/sbin and /sbin too.
For a concrete instance of this problem, see the "Remote Unlocking"
section in this tutorial: https://paxswill.com/blog/2013/11/04/encrypted-raspberry-pi/
It speaks of a bug in the initramfs script because it's written "blkid"
instead of "/sbin/blkid"... this is just because the scripts from the
initramfs do not expect to have a PATH without the sbin directories and
because dropbear is not setting the PATH appropriately for the root user.
I'm thus suggesting to use the attached patch to fix this misbehaviour (I
did not test it, but it's easy enough). It might seem anecdotic but
multiple Kali users have been bitten by this.
From https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903403
author | Raphael Hertzog <hertzog@debian.org> |
---|---|
date | Mon, 09 Jul 2018 16:27:53 +0200 |
parents | 6dba84798cd5 |
children |
line wrap: on
line source
ifeq ($V,1) silent= silent_stdout= else silent=@ silent_stdout= > /dev/null endif #Files left over from making the crypt.pdf. LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out *.lof #build the doxy files (requires Doxygen, tetex and patience) .PHONY: doxygen doxygen: doxygen $(silent_stdout) patched_doxygen: (cat Doxyfile && echo "HAVE_DOT=no") | doxygen - $(silent_stdout) doxy: patched_doxygen ${MAKE} -C doxygen/latex $(silent_stdout) && mv -f doxygen/latex/refman.pdf . @echo The huge doxygen PDF should be available as doc/refman.pdf #This builds the crypt.pdf file. Note that the rm -f *.pdf has been removed #from the clean command! This is because most people would like to keep the #nice pre-compiled crypt.pdf that comes with libtomcrypt! We only need to #delete it if we are rebuilding it. docs crypt.pdf: crypt.tex rm -f crypt.pdf $(LEFTOVERS) cp crypt.tex crypt.bak touch -r crypt.tex crypt.bak (printf "%s" "\def\fixedpdfdate{"; date +'D:%Y%m%d%H%M%S%:z' -d @$$(stat --format=%Y crypt.tex) | sed "s/:\([0-9][0-9]\)$$/'\1'}/g") > crypt-deterministic.tex printf "%s\n" "\pdfinfo{" >> crypt-deterministic.tex printf "%s\n" " /CreationDate (\fixedpdfdate)" >> crypt-deterministic.tex printf "%s\n}\n" " /ModDate (\fixedpdfdate)" >> crypt-deterministic.tex cat crypt.tex >> crypt-deterministic.tex mv crypt-deterministic.tex crypt.tex touch -r crypt.bak crypt.tex echo "hello" > crypt.ind latex crypt $(silent_stdout) latex crypt $(silent_stdout) makeindex crypt.idx $(silent_stdout) perl ../helper.pl --fixupind crypt.ind pdflatex crypt $(silent_stdout) sed -b -i 's,^/ID \[.*\]$$,/ID [<0> <0>],g' crypt.pdf mv crypt.bak crypt.tex rm -f $(LEFTOVERS) docdvi: crypt.tex echo hello > crypt.ind latex crypt $(silent_stdout) latex crypt $(silent_stdout) makeindex crypt.idx perl ../helper.pl --fixupind crypt.ind latex crypt $(silent_stdout) latex crypt $(silent_stdout) termdoc: docdvi dvi2tty crypt.dvi -w120 clean: rm -f $(LEFTOVERS) rm -rf doxygen/