Pre-commit review requested
Tom Rhodes
trhodes at FreeBSD.org
Mon Sep 8 19:05:31 UTC 2003
Any -doc committer want to review the following patch. It is by no
way an in depth cleanup, but it will take us (myself anyway) one
step further toward my goal of a good security chapter.
This diff:
o Adds <application>, <acronym>, and other tags as required.
o Uses the &os; entity.
o Cleans up the introduction by pointing out what
version of Kerberos is in what FreeBSD Release.
o Modifies <indexterm> and title's to help seperate KerberosIV and Kerberos5.
I'm only looking for either objections or "please commit"s and would rather
not bounce this around for the next three days. Thanks!
--
Tom Rhodes
--- chapter.sgml Mon Sep 8 14:16:05 2003
+++ chapter.new Mon Sep 8 14:13:32 2003
@@ -24,7 +24,7 @@
<para>This chapter will provide a basic introduction to system security
concepts, some general good rules of thumb, and some advanced topics
- under FreeBSD. A lot of the topics covered here can be applied
+ under &os;. A lot of the topics covered here can be applied
to system and Internet security in general as well. The Internet
is no longer a <quote>friendly</quote> place in which everyone
wants to be your kind neighbor. Securing your system is imperative
@@ -39,12 +39,12 @@
<itemizedlist>
<listitem>
- <para>Basic system security concepts, in respect to FreeBSD.</para>
+ <para>Basic system security concepts, in respect to &os;.</para>
</listitem>
<listitem>
- <para>About the various crypt mechanisms available in FreeBSD,
- such as DES and MD5.</para>
+ <para>About the various crypt mechanisms available in &os;,
+ such as <acronym>DES</acronym> and MD5.</para>
</listitem>
<listitem>
@@ -52,27 +52,32 @@
</listitem>
<listitem>
- <para>How to set up Kerberos, another alternative
- authentication system.</para>
+ <para>How to set up <application>KerberosIV</application> on &os;
+ releases prior to 5.0.</para>
</listitem>
<listitem>
- <para>How to create firewalls using IPFW.</para>
+ <para>How to set up <application>Kerberos5<application> on
+ post &os; 5.0 releases.<para>
</listitem>
<listitem>
- <para>How to configure IPsec and create a VPN between
- FreeBSD/&windows; machines.</para>
+ <para>How to create firewalls using <acronym>IPFW</acronym>.</para>
+ </listitem>
+
+ <listitem>
+ <para>How to configure IPsec and create a <acronym>VPN</acronym> between
+ &os;/&windows; machines.</para>
</listitem>
<listitem>
- <para>How to configure and use <application>OpenSSH</application>, FreeBSD's SSH
+ <para>How to configure and use <application>OpenSSH</application>, &os;'s <acronym>SSH</acronym>
implementation.</para>
</listitem>
<listitem>
<para>How to configure and load access control extension
- modules using the TrustedBSD MAC Framework.</para>
+ modules using the TrustedBSD <acronym>MAC</acronym> Framework.</para>
</listitem>
<listitem>
@@ -85,7 +90,7 @@
<itemizedlist>
<listitem>
- <para>Understand basic FreeBSD and Internet concepts.</para>
+ <para>Understand basic &os; and Internet concepts.</para>
</listitem>
</itemizedlist>
@@ -1433,7 +1438,7 @@
</sect2>
</sect1>
- <sect1 id="kerberos">
+ <sect1 id="kerberosIV">
<sect1info>
<authorgroup>
<author>
@@ -1451,8 +1456,8 @@
</authorgroup>
</sect1info>
- <title>Kerberos</title>
- <indexterm><primary>Kerberos</primary></indexterm>
+ <title>KerberosIV</title>
+ <indexterm><primary>KerberosIV</primary></indexterm>
<para>Kerberos is a network add-on system/protocol that allows users to
authenticate themselves through the services of a secure server.
@@ -1472,7 +1477,7 @@
<primary>Kerberos</primary>
<secondary>installing</secondary>
</indexterm>
- <para>Kerberos is an optional component of FreeBSD. The easiest
+ <para>Kerberos is an optional component of &os;. The easiest
way to install this software is by selecting the <literal>krb4</literal> or
<literal>krb5</literal> distribution in <application>sysinstall</application>
during the initial installation of FreeBSD. This will install
@@ -1939,6 +1944,8 @@
</sect1info>
<title><application>Kerberos5</application></title>
+
+ <indexterm><primary>Kerberos5</primary></indexterm>
<para>Every &os; release beyond &os;-5.1 includes support
only for <application>Kerberos5</application>. Hence
More information about the freebsd-doc
mailing list