[REVIEW REQUEST]: New chapter on MAC (draft)
Josef El-Rayes
josef at FreeBSD.org
Mon May 10 21:52:23 UTC 2004
Tom Rhodes <trhodes at FreeBSD.org> wrote:
> Hey FreeBSD-doc,
>
> I've written a new chapter for the handbook on implementing the
> MAC features in 5.X. It includes configuration, testing, module
> description that augments the section we already have, and shows
> examples of the policies.
>
> I'm not worried about whitespace right now, only correctness in the
> information presented, markup, and wording.
hi tom!
i had a look at your work and found 4 very minor mistakes.
i attach my patch.
greets, josef
ps: looks very nice, both the framework and the documentation, looks
like i have to test this soon :)
--
Josef El-Rayes (__)
Email: josef at daemon.li \\\'',)
Web: http://daemon.li/ \/ \ ^
FreeBSD: josef at FreeBSD.org .\._/_)
-------------- next part --------------
--- chapter.sgml.orig Mon May 10 23:08:53 2004
+++ chapter.sgml Mon May 10 23:50:01 2004
@@ -24,14 +24,14 @@
<indexterm><primary>Mandatory Access Controls</primary></indexterm>
<para>With security requirements on a rise throughout much of the
- the world, the demand for a more secure environment has
+ world, the demand for a more secure environment has
increased. It is from this demand that the TrustedBSD project
was founded with nothing more than security in mind. The
- TrustedBSD project has aimed at developing userland utilities and kernel
+ TrustedBSD project aimes at developing userland utilities and kernel
interfaces, based on the <acronym>POSIX</acronym>.1e standard, and merging it
back to &os; 5.X. While still in the development stage,
many of the features are nearing production stability. Some of
- those include file system access control lists
+ those include file system Access Control Lists
(<acronym>ACLs</acronym>) and Mandatory Access Control
(<acronym>MAC</acronym>) mechanisms.</para>
@@ -1147,7 +1147,7 @@
<para>The <acronym>MAC</acronym> version of the Low-watermark
integrity policy, not to be confused with the older &man.lomac.4;
- implementation, works almost identical to Biba but with a the
+ implementation, works almost identical to Biba but with the
exception of using floating labels to support subject
demotion via an auxiliary grade compartment. This secondary
compartment takes the form of [auxgrade]. When assigning a
@@ -1635,4 +1635,4 @@
sgml-always-quote-attributes: t
sgml-parent-document: ("../book.sgml" "part" "chapter")
End:
--->
\ No newline at end of file
+-->
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 479 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-doc/attachments/20040510/5078a70e/attachment.sig>
More information about the freebsd-doc
mailing list