6.37.1. Installation of Inetutils
./configure --prefix=/usr --libexecdir=/usr/sbin \
--localstatedir=/var --disable-ifconfig \
--disable-logger --disable-syslogd --disable-whois \
--disable-servers
The meaning of the configure options:
-
--disable-ifconfig
-
This option prevents Inetutils from installing the
ifconfig
program, which can be used to configure network interfaces.
LFS uses ip
from IPRoute2 to perform this task.
-
--disable-logger
-
This option prevents Inetutils from installing the
logger program,
which is used by scripts to pass messages to the System Log
Daemon. Do not install it because Util-linux installed a
version earlier.
-
--disable-syslogd
-
This option prevents Inetutils from installing the System Log
Daemon, which is installed with the Sysklogd package.
-
--disable-whois
-
This option disables the building of the Inetutils
whois client,
which is out of date. Instructions for a better whois client are in the
BLFS book.
-
--disable-servers
-
This disables the installation of the various network servers
included as part of the Inetutils package. These servers are
deemed not appropriate in a basic LFS system. Some are
insecure by nature and are only considered safe on trusted
networks. More information can be found at
http://www.linuxfromscratch.org/blfs/view/svn/basicnet/inetutils.html.
Note that better replacements are available for many of these
servers.
Compile the package:
make
This package does not come with a test suite.
Install the package:
make SUIDMODE="-o root -m 755" install
This package installs the suid-root programs group writable, which
is not only unnecessary but can also be a security risk. So the
SUIDMODE variable is redefined to
install these programs with more conservative permissions.
Move some programs to their FHS-compliant place:
mv -v /usr/bin/{hostname,ping,ping6} /bin
mv -v /usr/bin/traceroute /sbin
Use Linux Capabilities instead of suid:
chmod -v -s /bin/ping
setcap -v cap_net_raw=ep /bin/ping
chmod -v -s /bin/ping6
setcap -v cap_net_raw=ep /bin/ping6