Hardened Linux From Scratch - Version SVN-20071022

Chapter 4. Packages and Patches

4.3. Needed Patches

In addition to the packages, several patches are also required. These patches correct any mistakes in the packages that should be fixed by the maintainer. The patches also make small modifications to make the packages easier to work with. The following patches will be needed to build an HLFS system:

Bash Arc4random Patch - 8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/bash-3.2-arc4random-1.patch

MD5 sum: 9d3b44581aa9689fb742f28ad72b9108

Bash Upstream Fixes - 52 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/bash-3.2-fixes-6.patch

MD5 sum: 6787b1c94648fde6edb3bbf5e3f042f8

Binutils PT PaX Patch - 20 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/binutils-2.18-pt_pax-1.patch

MD5 sum: 996ec7a58ad803c7e254bd1d653f48cb

Bzip2 Install Docs patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/bzip2-1.0.4-install_docs-1.patch

MD5 sum: 6a5ac7e89b791aae556de0f745916f7f

Coreutils Uname patch - 8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/coreutils-6.9-uname_PIC-1.patch

MD5 sum: 71bac5487a89cefcc0758f286b5200c4

Diffutils Hardened Temp Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/diffutils-2.8.7-hardened_tmp-1.patch

MD5 sum: 8a0af1eb30e55d9cd5d93628e89b6f94

Expect Spawn Patch - 7 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/expect-5.43.0-spawn-2.patch

MD5 sum: 7706e1e8238c72eed8dc905d6f3b6aa9

Gawk Segfault Patch - 1.3 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/gawk-3.1.5-segfault_fix-1.patch

MD5 sum: 7679530d88bf3eb56c42eb6aba342ddb

GCC _FORTIFY_SOURCE Specs Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/gcc-4.2.1-fortify_source-1.patch

MD5 sum: 7d4348448a2a8a71aaddc1dc7d35788a

GCC -fPIE Specs Patch - 8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/gcc-4.2.1-fpie-1.patch

MD5 sum: 3c451deed19a734a73a82881e07b247e

GCC -fstack-protector-all Specs Patch - 12 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/gcc-4.2.1-fstack_protector-1.patch

MD5 sum: 49bcd052ae600315da2c4aa6ede4715a

GCC __strncat_chk Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/gcc-4.2.1-strncat_chk-1.patch

MD5 sum: 8516a1d45457db1148d669555cac60dc

Glibc Arcfour Pseudo-random Patch - 36 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-arc4_prng-1.patch

MD5 sum: b20dc709bdd2d6d7acf8a31531530617

Glibc asprintf() vasprintf() Reset to NULL Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-asprintf_reset2null-1.patch

MD5 sum: 0626990e72a372ef03772bfaca0a0ba7

Glibc Blowfish Patch - 72 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-blowfish-1.patch

MD5 sum: e915250a06979badc4c136f08301f172

Glibc Iconvconfig Trampoline Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-iconvconfig_trampoline-1.patch

MD5 sum: 24015ba1ed9ddf00506e21255417fa30

Glibc issetugid() Patch - 12 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-issetugid-1.patch

MD5 sum: fb00209b93ca5f35c500ec607bafe0fa

Glibc Localedef Trampoline Patch - 2 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-localedef_trampoline-1.patch

MD5 sum: 9234975544859ee20b54720e4eda5302

Glibc PAX Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-pt_pax-1.patch

MD5 sum: d68c0d253d6e709f3ccb304a9499ddab

Glibc SSP High Precision Timing - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-ssp_hp-timing-1.patch

MD5 sum: 80e4cf40942c7f6fd9b9c3104586deb8

Glibc Strlcpy Strlcat Patch - 12 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/glibc-2.6.1-strlcpy_strlcat-1.patch

MD5 sum: b8fc8d8e6cbd84bf8b1f9c33401b3036

GR Security Patch - 188 KB:

Download: http://www.grsecurity.net/grsecurity-2.1.10-2.6.19.2-200701222307.patch.gz

MD5 sum: 718ccce29ce12064673dbe8eb4752696

GRUB Disk Geometry Patch - 28 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/grub-0.97-disk_geometry-1.patch

MD5 sum: bf1594e82940e25d089feca74c6f1879

KBD Backspace Patch - 11 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/kbd-1.12-backspace-1.patch

MD5 sum: 692c88bb76906d99cc20446fadfb6499

KBD GCC4 Fixes Patch - 1.4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/kbd-1.12-gcc4_fixes-1.patch

MD5 sum: 615bc1e381ab646f04d8045751ed1f69

LFS Boot Scripts Sysklogd Privilege Separation Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/lfs-bootscripts-3.2.2-sysklogd_piv_sep-1.patch

MD5 sum: 168e9862ab9fad33b40a074edf88f90f

Linux Frandom Patch - 16 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/linux-2.6.19.2-frandom-1.patch

MD5 sum: 1cb961b3c6621464953e9133f94402d9

M4 Fixes Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/m4-1.4.10-fixes-1.patch

MD5 sum: c89ccda02aba3a6c22f8d29790f5f226

Mktemp Tempfile Patch - 3.5 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/mktemp-1.5-add_tempfile-3.patch

MD5 sum: 65d73faabe3f637ad79853b460d30a19

Module-init-tools Patch - 1.2 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/module-init-tools-3.2.2-modprobe-1.patch

MD5 sum: f1e452fdf3b8d7ef60148125e390c3e8

Module-Init-Tools No Static Patch - 4.5 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/module-init-tools-3.2.2-nostatic-1.patch

MD5 sum: 0d21b73f57ff249d486b936b6fba15da

Ncurses Coverity Fixes Patch - 20 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/ncurses-5.6-coverity_fixes-1.patch

MD5 sum: aa2fa9d0e89bbfdb4ce7e0e6b4b46670

OpenSSL Fix Man Pages Patch - 72 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/openssl-0.9.8e-fix_manpages-1.patch

MD5 sum: 04a6a88c2ee4badd4f8649792b73eaf3

Patch Upstream Fixes Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/patch-2.5.9-fixes-1.patch

MD5 sum: a2f0901f42e87ad3d5fefbccee6a09f4

Patch Mkstemp Patch - 8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/patch-2.5.9-mkstemp-1.patch

MD5 sum: c53c2f8a7349010da6afb002042ecec9

Perl Libc Patch - 1.5 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/perl-5.8.8-libc-2.patch

MD5 sum: 3bf8aef1fb6eb6110405e699e4141f99

Readline Fixes Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/readline-5.2-fixes-3.patch

MD5 sum: dfa4b750f226cf9ea034ec753a78a742

Shadow Useradd Fix Patch - 8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/shadow-4.0.18.1-useradd_fix-2.patch

MD5 sum: 5f35528f38d5432d5fa2dd79d04bdfdd

Sysklogd Community Fixes Patch - 56 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/sysklogd-1.4.1-community_fixes-1.patch

MD5 sum: 6f7d319be62271d66375209c018c21d2

Sysklogd Privilege Separation Patch - 16 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/sysklogd-1.4.1-priv_sep-2.patch

MD5 sum: 30846fb8c04d0060302d14d8c3cf5329

Texinfo -keep/-nokeep Patch - 20 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/texinfo-4.9-nokeep-1.patch

MD5 sum: 1bc98058535285ef5586123a2b75b382

Util-linux Cramfs Patch - 2.8 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/util-linux-2.12r-cramfs-1.patch

MD5 sum: 1c3f40b30e12738eb7b66a35b7374572

Util-linux lseek Patch - 12 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/util-linux-2.12r-lseek-1.patch

MD5 sum: 5d6c86321c1ea74d7ed7cf57861da423

Vim Fixes Patch - 296 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/vim-7.1-fixes-2.patch

MD5 sum: 4b33bda20c4e75601cd581b745477a2d

Vim Hardened Temp Patch - 4 KB:

Download: http://www.linuxfromscratch.org/patches/hlfs/svn/vim-7.1-hardened_tmp-1.patch

MD5 sum: 940d1adfda6b99e13c9c825cb5c411e1

Total size of these patches: about 1,068.2 KB

In addition to the above required patches, there exist a number of optional patches created by the LFS community. These optional patches solve minor problems or enable functionality that is not enabled by default. Feel free to peruse the patches database located at http://www.linuxfromscratch.org/patches/ and acquire any additional patches to suit the system needs.