PERFORCE change 107577 for review

John Birrell jb at FreeBSD.org
Mon Oct 9 13:44:29 PDT 2006


http://perforce.freebsd.org/chv.cgi?CH=107577

Change 107577 by jb at jb_freebsd7 on 2006/10/09 20:43:52

	IFC

Affected files ...

.. //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/committers-guide/article.sgml#10 integrate
.. //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/contributors/contrib.additional.sgml#29 integrate
.. //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/contributors/contrib.committers.sgml#20 integrate
.. //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/ports/chapter.sgml#7 integrate
.. //depot/projects/dtrace/doc/en_US.ISO8859-1/share/sgml/authors.ent#14 integrate
.. //depot/projects/dtrace/doc/share/pgpkeys/pgpkeys.ent#15 integrate
.. //depot/projects/dtrace/doc/share/pgpkeys/syrinx.key#1 branch
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/audit/chapter.sgml#4 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/eresources/chapter.sgml#4 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/firewalls/chapter.sgml#7 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/introduction/chapter.sgml#5 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/mac/chapter.sgml#7 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/mail/chapter.sgml#5 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/network-servers/chapter.sgml#6 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/ppp-and-slip/chapter.sgml#5 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/x11/chapter.sgml#8 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/books/porters-handbook/book.sgml#11 integrate
.. //depot/projects/dtrace/doc/zh_CN.GB2312/share/sgml/authors.ent#6 integrate
.. //depot/projects/dtrace/doc/zh_TW.Big5/articles/hubs/article.sgml#3 integrate
.. //depot/projects/dtrace/doc/zh_TW.Big5/books/handbook/x11/chapter.sgml#3 integrate
.. //depot/projects/dtrace/doc/zh_TW.Big5/share/sgml/authors.ent#3 integrate
.. //depot/projects/dtrace/ports/KNOBS#8 integrate
.. //depot/projects/dtrace/ports/MOVED#22 integrate
.. //depot/projects/dtrace/ports/Mk/bsd.openssl.mk#5 integrate
.. //depot/projects/dtrace/ports/Mk/bsd.python.mk#5 integrate
.. //depot/projects/dtrace/ports/UPDATING#16 integrate
.. //depot/projects/dtrace/src/Makefile.inc1#21 integrate
.. //depot/projects/dtrace/src/etc/libalias.conf#3 integrate
.. //depot/projects/dtrace/src/games/fortune/datfiles/freebsd-tips#4 integrate
.. //depot/projects/dtrace/src/gnu/usr.bin/binutils/as/Makefile#5 integrate
.. //depot/projects/dtrace/src/gnu/usr.bin/binutils/as/tc-sparc-fixed.c#1 branch
.. //depot/projects/dtrace/src/lib/csu/sparc64/crt1.c#4 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/Makefile.inc#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/cuseeme/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/dummy/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/ftp/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/irc/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/nbt/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/pptp/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/skinny/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libalias/modules/smedia/Makefile#3 integrate
.. //depot/projects/dtrace/src/lib/libc/gen/tls.c#6 integrate
.. //depot/projects/dtrace/src/lib/libc/sparc64/gen/_set_tp.c#4 integrate
.. //depot/projects/dtrace/src/lib/libdisk/Makefile#4 integrate
.. //depot/projects/dtrace/src/lib/libkvm/Makefile#5 integrate
.. //depot/projects/dtrace/src/lib/libkvm/kvm_sparc64.c#4 integrate
.. //depot/projects/dtrace/src/libexec/rtld-elf/sparc64/reloc.c#4 integrate
.. //depot/projects/dtrace/src/share/man/man4/Makefile#14 integrate
.. //depot/projects/dtrace/src/share/man/man4/ddb.4#7 integrate
.. //depot/projects/dtrace/src/share/man/man4/geom_uzip.4#1 branch
.. //depot/projects/dtrace/src/share/man/man4/if_bridge.4#9 integrate
.. //depot/projects/dtrace/src/share/man/man4/snd_hda.4#3 integrate
.. //depot/projects/dtrace/src/sys/boot/Makefile#6 integrate
.. //depot/projects/dtrace/src/sys/boot/ofw/libofw/Makefile#4 integrate
.. //depot/projects/dtrace/src/sys/boot/ofw/libofw/openfirm.c#4 integrate
.. //depot/projects/dtrace/src/sys/boot/sparc64/loader/main.c#4 integrate
.. //depot/projects/dtrace/src/sys/compat/linprocfs/linprocfs.c#7 integrate
.. //depot/projects/dtrace/src/sys/compat/linux/linux_emul.c#4 integrate
.. //depot/projects/dtrace/src/sys/compat/linux/linux_misc.c#9 integrate
.. //depot/projects/dtrace/src/sys/conf/files#33 integrate
.. //depot/projects/dtrace/src/sys/conf/files.sun4v#6 integrate
.. //depot/projects/dtrace/src/sys/ddb/db_command.c#7 integrate
.. //depot/projects/dtrace/src/sys/ddb/db_examine.c#4 integrate
.. //depot/projects/dtrace/src/sys/ddb/db_output.c#5 integrate
.. //depot/projects/dtrace/src/sys/ddb/db_output.h#5 integrate
.. //depot/projects/dtrace/src/sys/dev/ata/ata-chipset.c#11 integrate
.. //depot/projects/dtrace/src/sys/dev/ofw/openfirm.c#4 integrate
.. //depot/projects/dtrace/src/sys/dev/ofw/openfirm.h#4 integrate
.. //depot/projects/dtrace/src/sys/dev/pci/pci.c#8 integrate
.. //depot/projects/dtrace/src/sys/dev/pci/pci_if.m#4 integrate
.. //depot/projects/dtrace/src/sys/dev/pci/pci_private.h#4 integrate
.. //depot/projects/dtrace/src/sys/dev/pci/pcivar.h#5 integrate
.. //depot/projects/dtrace/src/sys/dev/sk/if_sk.c#11 integrate
.. //depot/projects/dtrace/src/sys/dev/sk/if_skreg.h#8 integrate
.. //depot/projects/dtrace/src/sys/dev/sound/pci/hda/hdac.c#5 integrate
.. //depot/projects/dtrace/src/sys/dev/sound/pcm/dsp.c#5 integrate
.. //depot/projects/dtrace/src/sys/net/if_bridge.c#14 integrate
.. //depot/projects/dtrace/src/sys/netinet/libalias/libalias.3#6 integrate
.. //depot/projects/dtrace/src/sys/pci/agp_amd64.c#5 integrate
.. //depot/projects/dtrace/src/sys/sparc64/include/asi.h#5 integrate
.. //depot/projects/dtrace/src/sys/sparc64/pci/ofw_pcibus.c#4 integrate
.. //depot/projects/dtrace/src/sys/sparc64/sparc64/genassym.c#6 integrate
.. //depot/projects/dtrace/src/sys/sun4v/conf/GENERIC#12 integrate
.. //depot/projects/dtrace/src/sys/sun4v/include/asi.h#5 integrate
.. //depot/projects/dtrace/src/sys/sun4v/include/tte.h#5 integrate
.. //depot/projects/dtrace/src/sys/sun4v/sun4v/exception.S#6 integrate
.. //depot/projects/dtrace/src/sys/sun4v/sun4v/machdep.c#7 integrate
.. //depot/projects/dtrace/src/sys/sun4v/sun4v/t1_copy.S#5 integrate
.. //depot/projects/dtrace/src/sys/sun4v/sun4v/tsb.c#6 integrate
.. //depot/projects/dtrace/src/sys/sun4v/sun4v/vnex.c#5 integrate
.. //depot/projects/dtrace/src/sys/vm/vnode_pager.c#5 integrate
.. //depot/projects/dtrace/src/tools/regression/execve/Makefile#3 integrate
.. //depot/projects/dtrace/src/tools/regression/execve/execve.t#3 integrate
.. //depot/projects/dtrace/src/usr.bin/find/find.1#6 integrate
.. //depot/projects/dtrace/src/usr.sbin/sysinstall/disks.c#4 integrate
.. //depot/projects/dtrace/www/en/cgi/dosendpr.cgi#4 integrate
.. //depot/projects/dtrace/www/en/cgi/query-pr-summary.cgi#4 integrate
.. //depot/projects/dtrace/www/en/developers.sgml#11 integrate
.. //depot/projects/dtrace/www/en/donations/donors.sgml#15 integrate
.. //depot/projects/dtrace/www/en/search/site.map#3 integrate
.. //depot/projects/dtrace/www/en/search/web.atoz#3 integrate
.. //depot/projects/dtrace/www/en/where.sgml#6 integrate
.. //depot/projects/dtrace/www/share/sgml/news.xml#5 integrate
.. //depot/projects/dtrace/www/zh_CN/releases/6.1R/errata.html#4 integrate

Differences ...

==== //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/committers-guide/article.sgml#10 (text+ko) ====

@@ -13,7 +13,7 @@
       </author>
     </authorgroup>
 
-    <pubdate>$FreeBSD: doc/en_US.ISO8859-1/articles/committers-guide/article.sgml,v 1.248 2006/09/06 09:22:10 pav Exp $</pubdate>
+    <pubdate>$FreeBSD: doc/en_US.ISO8859-1/articles/committers-guide/article.sgml,v 1.249 2006/10/09 19:28:30 joel Exp $</pubdate>
 
     <copyright>
       <year>1999</year>
@@ -1077,6 +1077,11 @@
       </listitem>
 
       <listitem>
+	<para>Also add your author entity to
+	  <filename>www/en/developers.sgml</filename>.</para>
+      </listitem>
+
+      <listitem>
 	<para>Add yourself to the <quote>Developers</quote> section of
 	  the <ulink url="&url.articles.contributors;/index.html">Contributors List</ulink>
 	  and remove yourself from the <quote>Additional

==== //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/contributors/contrib.additional.sgml#29 (text+ko) ====

@@ -1,4 +1,4 @@
-<!-- $FreeBSD: doc/en_US.ISO8859-1/articles/contributors/contrib.additional.sgml,v 1.623 2006/10/06 02:55:13 alepulver Exp $ -->
+<!-- $FreeBSD: doc/en_US.ISO8859-1/articles/contributors/contrib.additional.sgml,v 1.625 2006/10/08 16:19:30 alepulver Exp $ -->
 <!--
 	NOTE TO COMMITTERS: Contributors lists are sorted in alphabetical
 	order by first name.
@@ -986,6 +986,11 @@
     </listitem>
 
     <listitem>
+      <para>Ashish Shukla
+	<email>wahjava at gmail.com</email></para>
+    </listitem>
+
+    <listitem>
       <para>Ashley Penney
 	<email>ashp at unloved.org</email></para>
     </listitem>
@@ -3428,6 +3433,11 @@
     </listitem>
 
     <listitem>
+      <para>Hernan Di Pietro
+	<email>hernan.di.pietro at gmail.com</email></para>
+    </listitem>
+
+    <listitem>
       <para>Hideaki Machida
 	<email>hido at coreblack.com</email></para>
     </listitem>

==== //depot/projects/dtrace/doc/en_US.ISO8859-1/articles/contributors/contrib.committers.sgml#20 (text+ko) ====

@@ -1,4 +1,4 @@
-<!-- $FreeBSD: doc/en_US.ISO8859-1/articles/contributors/contrib.committers.sgml,v 1.155 2006/09/30 20:41:53 joel Exp $ -->
+<!-- $FreeBSD: doc/en_US.ISO8859-1/articles/contributors/contrib.committers.sgml,v 1.156 2006/10/08 13:18:57 syrinx Exp $ -->
 <!--
 	NOTE TO NEW COMMITTERS: Core and committers lists are sorted in
 	alphabetical order by last name. Please keep in mind that fact while
@@ -1115,6 +1115,10 @@
     </listitem>
 
     <listitem>
+      <para>&a.syrinx;</para>
+    </listitem>
+
+    <listitem>
       <para>&a.vanilla;</para>
     </listitem>
 

==== //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/ports/chapter.sgml#7 (text+ko) ====

@@ -1,7 +1,7 @@
 <!--
      The FreeBSD Documentation Project
 
-     $FreeBSD: doc/en_US.ISO8859-1/books/handbook/ports/chapter.sgml,v 1.259 2006/07/05 06:12:55 linimon Exp $
+     $FreeBSD: doc/en_US.ISO8859-1/books/handbook/ports/chapter.sgml,v 1.260 2006/10/09 18:36:34 trhodes Exp $
 -->
 
 <chapter id="ports">
@@ -1261,6 +1261,11 @@
 
       <screen>&prompt.root; <userinput>portsclean -D</userinput></screen>
 
+      <para>Or to remove all distfiles not referenced by any port
+	currently installed on your system:</para>
+
+      <screen>&prompt.root; <userinput>portsclean -DD</userinput></screen>
+
       <note>
 	<para>The <command>portsclean</command> utility is part of the
 	  <application>portupgrade</application> suite.</para>

==== //depot/projects/dtrace/doc/en_US.ISO8859-1/share/sgml/authors.ent#14 (text+ko) ====

@@ -13,7 +13,7 @@
                  builds for the other languages, and we will poke fun of you
                  in public.
 
-     $FreeBSD: doc/en_US.ISO8859-1/share/sgml/authors.ent,v 1.399 2006/09/29 20:58:53 xride Exp $
+     $FreeBSD: doc/en_US.ISO8859-1/share/sgml/authors.ent,v 1.400 2006/10/08 13:18:57 syrinx Exp $
 -->
 
 <!ENTITY a.aaron "Aaron Dalton <email>aaron at FreeBSD.org</email>">
@@ -906,6 +906,8 @@
 
 <!ENTITY a.swallace "Steven Wallace <email>swallace at FreeBSD.org</email>">
 
+<!ENTITY a.syrinx "Shteryana Shopova <email>syrinx at FreeBSD.org</email>">
+
 <!ENTITY a.tackerman "Tony Ackerman <email>tackerman at FreeBSD.org</email>">
 
 <!ENTITY a.takawata "Takanori Watanabe <email>takawata at FreeBSD.org</email>">

==== //depot/projects/dtrace/doc/share/pgpkeys/pgpkeys.ent#15 (text+ko) ====

@@ -1,5 +1,5 @@
 
-<!-- $FreeBSD: doc/share/pgpkeys/pgpkeys.ent,v 1.122 2006/10/04 10:55:43 chinsan Exp $ -->
+<!-- $FreeBSD: doc/share/pgpkeys/pgpkeys.ent,v 1.123 2006/10/08 13:18:57 syrinx Exp $ -->
 <!-- PGP keyblocks -->
 <!ENTITY pgpkey.aaron SYSTEM "aaron.key">
 <!ENTITY pgpkey.ache SYSTEM "ache.key">
@@ -214,6 +214,7 @@
 <!ENTITY pgpkey.stefan SYSTEM "stefan.key">
 <!ENTITY pgpkey.stefanf SYSTEM "stefanf.key">
 <!ENTITY pgpkey.stephane SYSTEM "stephane.key">
+<!ENTITY pgpkey.syrinx SYSTEM "syrinx.key">
 <!ENTITY pgpkey.tdb SYSTEM "tdb.key">
 <!ENTITY pgpkey.thierry SYSTEM "thierry.key">
 <!ENTITY pgpkey.thomas SYSTEM "thomas.key">

==== //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/audit/chapter.sgml#4 (text+ko) ====

@@ -2,8 +2,8 @@
      The FreeBSD Documentation Project
      The FreeBSD Simplified Chinese Project
 
-     Original Revision: 1.14
-     $FreeBSD: doc/zh_CN.GB2312/books/handbook/audit/chapter.sgml,v 1.3 2006/09/15 04:29:12 delphij Exp $
+     Original Revision: 1.24
+     $FreeBSD: doc/zh_CN.GB2312/books/handbook/audit/chapter.sgml,v 1.4 2006/10/08 16:11:54 delphij Exp $
 -->
 
 <!-- Need more documentation on praudit, auditreduce, etc.  Plus more info
@@ -21,6 +21,10 @@
 	<surname>Rhodes</surname>
 	<contrib>Ô­×÷ </contrib>
       </author>
+      <author>
+	<firstname>Robert</firstname>
+	<surname>Watson</surname>
+      </author>
     </authorgroup>
   </chapterinfo>
 
@@ -35,22 +39,16 @@
       <see>MAC</see>
     </indexterm>
 
-    <para>ÔÚ &os;&nbsp;7-CURRENT ¿ª·¢·ÖÖ§Éϰüº¬Á˶ÔÓÚ»ùÓÚ
-      Sun Ëù·¢²¼µÄ <acronym>BSM</acronym> API ¼°Îļþ¸ñʽµÄʱ¼äÉó¼ÆÖ§³Ö¡£
-      ʼþÉ󼯹¦ÄÜ£¬ ʹµÃÑ¡ÔñÐԵضÔÉæ¼°°²È«µÄϵͳʼþ½øÐмǼ³ÉΪ¿ÉÄÜ£¬
-      Õâ¿É½øÒ»²½Îª³öÏÖÎÊÌâÖ®ºóµÄÑéʬʽ·ÖÎö¡¢ ϵͳ¼à¿Ø£¬ ÒÔ¼°ÈëÇÖ¼ì²âËùÓá£
-      ¾­¹ýÔÚ &os;&nbsp;7-CURRENT ÖÐÒ»¶Îʱ¼äµÄ³ÁµíÖ®ºó£¬
-      ÕâÒ»Ö§³Ö½«±»ºÏ²¢µ½ &os;&nbsp;6-STABLE ²¢³öÏÖÔÚÖ®ºóµÄ·¢ÐаæÖС£</para>
+    <para>FreeBSD 6.2-RELEASE ºÍ¸ü¸ß°æ±¾Öаüº¬Á˶ÔÓÚϸÁ£¶È°²È«Ê¼þÉ󼯵ÄÖ§³Ö¡£
+      ʼþÉó¼ÆÄܹ»Ö§³Ö¿É¿¿µÄ¡¢ ϸÁ£¶ÈÇÒ¿ÉÅäÖõģ¬ ¶ÔÓÚ¸÷ÀàÓ밲ȫÓйصÄϵͳʼþ£¬
+	  °üÀ¨µÇ¼¡¢ ÅäÖñä¸ü£¬ ÒÔ¼°ÎļþºÍÍøÂç·ÃÎʵȵÄÈÕÖ¾¼Ç¼¡£
+	  ÕâЩÈÕÖ¾¼Ç¼¶ÔÓÚÔÚÕýÔÚÔËÐеÄϵͳÉÏʵʩ¼à¿Ø¡¢ ÈëÇÖ¼ì²âºÍʺó·ÖÎö¶¼Ê®·ÖÖØÒª¡£
+      &os; ʵÏÖÁË Sun Ëù·¢²¼µÄ
+      <acronym>BSM</acronym> API ºÍÎļþ¸ñʽ£¬ ²¢ÇÒÓë Sun µÄ Solaris
+	  ºÍ Apple µÄ Mac OS X Éó¼ÆÊµÏÖ¼æÈÝ¡£</para>
 
-    <warning>
-      <para>FreeBSD ÖеÄÉ󼯻úÖÆÄ¿Ç°»¹ÊÇÊÔÑéÐԵģ¬ Ö»ÓÐÔÚ×Ðϸ¿¼Á¿²¿Êð·çÏÕÖ®ºó£¬
-	²ÅÓ¦ÔÚÉú²úϵͳÉϲ¿ÊðÕâÒ»ÊÔÑéÐÔµÄÈí¼þ¡£</para>
-    </warning>
+    <para>ÕâÒ»ÕµÄÖØµãÊǰ²×°ºÍÅäÖÃʼþÉ󼯡£ Ëü½éÉÜÁËʼþ²ßÂÔ£¬ ²¢ÌṩÁËÒ»¸öÉ󼯵ÄÅäÖÃÀý×Ó¡£</para>
 
-    <para>ÕâÒ»Õ½«Ö÷Òª¹Ø×¢Óë°²×°ºÍÅäÖÃʼþÉ󼯻úÖÆ¡£
-      ͬʱ£¬ ΪÁË·½±ã¶ÁÕߣ¬ Ò²½éÉÜÁËÉ󼯲ßÂÔ£¬
-      ²¢¸ø³öÁËÒ»¸öʵÀý¼ÓÒÔ˵Ã÷¡£</para>
-
     <para>¶ÁÍêÕâÕ£¬ Äú½«Á˽⣺</para>
 
     <itemizedlist>
@@ -61,6 +59,9 @@
       <listitem>
 	<para>ÈçºÎÔÚ &os; ÉÏΪÓû§ºÍ½ø³ÌÅäÖÃʼþÉ󼯡£</para>
       </listitem>
+
+      <listitem>
+	<para>ÈçºÎʹÓÃÉ󼯼ǼժҪºÍ¸´É󹤾ßÀ´¶ÔÉ󼯼Ǽ½øÐи´Éó¡£</para>
     </itemizedlist>
 
     <para>ÔĶÁÕâÕÂ֮ǰ£¬ ÄúÓ¦¸Ã£º</para>
@@ -82,47 +83,50 @@
     </itemizedlist>
 
     <warning>
-      <para>ʼþÉó¼Æ¿ÉÄÜ»á²úÉú´óÁ¿µÄÈÕÖ¾ÎļþÊý¾Ý£¬ ÔÚijЩÅäÖÃÖУ¬
-	¿ÉÄÜÿÖܶ¼»á²úÉú³¬¹ýÊý GB µÄÊý¾Ý¡£ ¹ÜÀíÔ±Ó¦ÍêÕûµØÔĶÁÍêÕâÒ»ÕµÄÄÚÈÝ£¬
-	ÒÔ±ÜÃâÓÉÓÚ²»µ±ÅäÖòúÉúµÄ×Ô×÷×ÔÊÜÐÍ <acronym>DoS</acronym>¡£</para>
+      <para>ÔÚ &os; 6.2 ÉϵÄÉ󼯻úÖÆÊÇÊÔÑéÐԵģ¬
+	ÔÚÉú²ú»·¾³Öв¿Êð֮ǰ£¬ Ó¦×ÐϸÆÀ¹À²¿ÊðÊÔÑéÐÔÈí¼þ¿ÉÄÜ´øÀ´µÄ·çÏÕ¡£ ÒÑÖªµÄÏÞÖÆÊÇ£¬
+	²¢²»ÊÇËùÓÐÓ밲ȫÓйصÄϵͳʼþ¶¼ÊÇ¿ÉÉ󼯵ģ¬ ijЩµÇ¼»úÖÆ£¬ ÀýÈç»ùÓÚ X11
+	ÏÔʾ¹ÜÀíÆ÷£¬ ÒÔ¼°µÚÈý·½·þÎñµÄµÇ¼»úÖÆ£¬ ¶¼²»»áÔÚÓû§µÄµÇ¼»á»°ÖÐÕýÈ·ÅäÖÃÉ󼯡£</para>
+    </warning>
+
+    <warning>
+      <para>°²È«É󼯻úÖÆÄܹ»¶Ôϵͳ»î¶¯Éú³É·Ç³£ÏêϸµÄ¼Ç¼ÐÅÏ¢£º ÔÚ·±Ã¦µÄϵͳÖУ¬
+	¼ÇÕÊÊý¾ÝÈç¹ûÅäÖò»µ±»á·Ç³£µÄ´ó£¬ ²¢ÔÚÒ»ÖÜÄÚѸËÙ³¬¹ý¼¸¸ö GB µÄ³ß´ç¡£
+	¹ÜÀíÔ±Ó¦¿¼ÂÇÉó¼ÆÅäÖÃÖеĵ¼Ö´ÅÅ̿ռäÐèÇóµÄÕâЩÎÊÌâ¡£ ÀýÈ磬
+	¿ÉÄÜÐèҪΪ <filename>/var/audit</filename> Ŀ¼µ¥¶À·ÖÅäÒ»¸öÎļþϵͳ£¬
+	ÒÔ·ÀÖ¹ÔÚÉó¼ÆÈÕÖ¾ËùÓõÄÎļþϵͳ±»ÌîÂúʱӰÏìÆäËüÎļþϵͳ¡£</para>
     </warning>
 
-    <para>ÔÚ &os; ÖеÄʼþÉ󼯻úÖÆ£¬ Óë &sun; µÄ»ù±¾°²È«Ä£¿é£¬
-      ¼´ <acronym>BSM</acronym> ¿âÀàËÆ¡£ Òò´Ë£¬ ÕâЩÅäÖÃÓë &solaris;
-      ºÍ Mac OS X/Darwin ²Ù×÷ϵͳ֮¼ä¿ÉÒÔÍêÈ«»¥»»¡£</para>
   </sect1>
 
   <sect1 id="audit-inline-glossary">
-    <title>ÄúÐèÒªÁ˽âµÄһЩ¹Ø¼üÊõÓï</title>
+    <title>±¾ÕÂÖеÄһЩ¹Ø¼üÊõÓï</title>
 
-    <para>ÔÚ¿ªÊ¼ÔĶÁÕâÕÂ֮ǰ£¬ Ê×ÏÈÐèÒª½âÊÍһЩ¹Ø¼üµÄÊõÓï¡£
-      ÕâÊÇΪÁËÇå³ýһЩÓÉÓÚÒýÈëÐÂÊõÓï¶ø´øÀ´µÄÀ§»óºÍÔĶÁÕϰ­¡£</para>
+    <para>ÔÚ¿ªÊ¼ÔĶÁÕâÕÂ֮ǰ£¬ ÎÒÃÇÐèÒª½âÊÍÒ»ÏÂÓëÉó¼ÆÓйصÄһЩ¹Ø¼üµÄÊõÓ</para>
 
     <itemizedlist>
       <listitem>
 	<para><emphasis>ʼþ (event)</emphasis>£º
-	  ¿ÉÉó¼ÆÊ¼þÊÇÖ¸Äܹ»±»Éó¼Æ×Óϵͳ¼Ç¼µÄʼþ¡£
-	  ¹ÜÀíÔ±¿ÉÒÔÅäÖÃÉó¼ÆÄÄЩʼþ¡£ ¾ÙÀý˵À´£¬ Ó밲ȫÓйصÄʼþ°üÀ¨´´½¨Îļþ¡¢
+	  ¿ÉÉó¼ÆÊ¼þÊÇÖ¸Äܹ»±»Éó¼Æ×Óϵͳ¼Ç¼µÄÈκÎʼþ¡£
+	  ¾ÙÀý˵À´£¬ Ó밲ȫÓйصÄʼþ°üÀ¨´´½¨Îļþ¡¢
 	  ½¨Á¢ÍøÂçÁ¬½Ó£¬ ÒÔ¼°ÒÔijһÓû§Éí·ÝµÇ¼£¬ µÈµÈ¡£
-	  ÈκÎʼþ±ØÊôÓÚ <quote>ÓÐÖ÷ (attributable)</quote>£¬
-	  ¼´¿ÉÒÔ×îÖÕ¹éÓÚijһÓû§Éí·Ý£¬ »ò <quote>ÎÞÖ÷(non-attributable)</quote>
-	  ¶þÕßÖ®Ò»¡£ ¾ÙÀý¶øÑÔ£¬ ÎÞÖ÷ʼþ¿ÉÒÔÊÇÈκη¢ÉúÔڵǼ¹ý³Ì³É¹¦Ö®Ç°µÄʼþ£¬
-	  ÀýÈçʧ°ÜµÄµÇ¼³¢ÊÔ£¬ µÈµÈ¡£</para>
+	  ÈκÎʼþ±ØÒªÃ´ÊÇ <quote>ÓÐÖ÷ (attributable)</quote> µÄ£¬
+	  ¼´¿ÉÒÔ×îÖÕ¹éÓÚijһÒÑͨ¹ýÑéÖ¤µÄÓû§µÄÉí·Ý£¬ ·´Ö®£¬ Ôò³Æ¸ÃʼþÊÇ
+	  <quote>ÎÞÖ÷ (non-attributable)</quote> µÄ¡£
+	  ÎÞÖ÷ʼþ¿ÉÒÔÊÇ·¢ÉúÔڵǼ¹ý³Ì³É¹¦Ö®Ç°µÄÈκÎʼþ£¬ ÀýÈç³¢ÊÔÒ»´ÎÎÞЧÃÜÂëµÈ¡£</para>
       </listitem>
 
       <listitem>
-        <para><emphasis>Àà (class)</emphasis>£º ʼþ¿ÉÒÔÖ¸¶¨ÎªÒ»¸ö»ò¶à¸öÀ࣬
-	  ͨ³£ÕâÊÇ»ùÓÚʼþµÄÒ»°ãÀà±ðÀ´½øÐеģ¬ ÀýÈç <quote>´´½¨Îļþ</quote>¡¢
-	  <quote>·ÃÎÊÎļþ</quote>£¬ »ò <quote>ÍøÂç</quote>¡£ µÇ¼ºÍ×¢Ïúʼþ£¬
-	  ÔòÖ¸¶¨Îª <literal>lo</literal> Àà¡£ ͨ¹ýʹÓÃÀ࣬
-	  ¹ÜÀíÔ±Äܹ»Ö¸¶¨¸ü¸ß²ã´ÎµÄÉ󼯹æÔò£¬
-	  ¶øÎÞÐèÒ»Ò»Ö¸¶¨Ã¿¸öÐèÒª½øÐмǼµÄ¿ÉÉ󼯲Ù×÷¡£</para>
+        <para><emphasis>Àà (class)</emphasis>£º ʼþÀàÊÇÖ¸Ïà¹ØÊ¼þµÄÒ»¸öÃüÃû¼¯ºÏ£¬
+	  ͨ³£ÔÚɸѡ±í´ïʽÖÐʹÓᣠ³£ÓõÄʼþÀà°üÀ¨ <quote>´´½¨Îļþ</quote> (fc)¡¢
+	  <quote>Ö´ÐÐ</quote> (ex) ºÍ <quote>µÇÈëºÍ×¢Ïú</quote>
+	  (lo)¡£</para>
       </listitem>
 
       <listitem>
-	<para><emphasis>¼Ç¼ (record)</emphasis>£º ¼Ç¼ÊÇÃèÊö°²È«Ê¼þµÄÒ»¸öÈÕÖ¾Ïî¡£
-	  µäÐ͵ļǼ°üÀ¨¼Ç¼Ê¼þÀàÐÍ¡¢ ÓëʼþÓйصÄÖ÷Ìå (Óû§) ÐÅÏ¢¡¢
-	  ʱ¼äÐÅÏ¢¡¢ Ïà¹ØµÄÈκζÔÏóÐÅÏ¢£¬ ÒÔ¼°Ê¼þËù¹ØÁªµÄ²Ù×÷ÊÇ·ñ³É¹¦µÄÐÅÏ¢¡£</para>
+	<para><emphasis>¼Ç¼ (record)</emphasis>£º ¼Ç¼ÊÇÖ¸ÃèÊöÒ»¸ö°²È«Ê¼þµÄÈÕÖ¾Ïî¡£
+	  ¼Ç¼°üÀ¨¼Ç¼Ê¼þÀàÐÍ¡¢ Ö´ÐвÙ×÷µÄÖ÷Ìå (Óû§) ÐÅÏ¢¡¢
+	  ÈÕÆÚºÍʼþÐÅÏ¢£¬ ÒÔ¼°ÓëÖ®Ïà¹ØµÄ¶ÔÏó»ò²ÎÊýÐÅÏ¢£¬ ×îºóÊDzÙ×÷³É¹¦»òʧ°Ü¡£</para>
       </listitem>
 
       <listitem>
@@ -132,8 +136,23 @@
 	  ²ÅÄܹ»ÏòÉó¼ÆÕËÄ¿ÖÐÌá½»¼Ç¼¡£</para>
 
       <listitem>
-	<para><emphasis>ǰ׺ (prefix)</emphasis>£º
-	  ǰ׺ÊÇÖ¸±»ÓÃÀ´¿ª¹Ø¶Ô³É¹¦ºÍʧ°ÜʼþÉ󼯵ÄÅäÖÃÔªËØ¡£</para>
+	<para><emphasis>ɸѡ±í´ïʽ (selection expression)</emphasis>£º
+	  ɸѡ±í´ïʽÊǰüº¬Ò»ÏµÁÐǰ׺ºÍÉó¼ÆÊ¼þÀàÃû×Ö£¬
+	  ÓÃÒÔÆ¥ÅäʼþµÄ×Ö·û´®¡£</para>
+      </listitem>
+
+      <listitem>
+	<para><emphasis>Ԥѡ (preselection)</emphasis>£º ϵͳͨ¹ýÕâÒ»¹ý³ÌÀ´Ê¶±ðʼþÊÇ·ñÊǹÜÀíÔ±Ëù¸ÐÐËȤµÄ£¬
+	  ´Ó¶ø±ÜÃâΪËûÃDz»¸ÐÐËȤµÄʼþÉú³É¼Ç¼¡£ ԤѡÅäÖÃʹÓÃһϵÁÐÑ¡Ôñ±í´ïʽ£¬
+	  ÓÃÒÔʶ±ðʼþÀà±ð¡¢ ÒªÉ󼯵ÄÓû§£¬ ÒÔ¼°ÊÊÓÃÓÚÑéÖ¤¹ýÓû§Éí·Ý£¬ ÒÔ¼°Î´ÑéÖ¤Óû§Éí·ÝµÄ½ø³ÌµÄÈ«¾ÖÅäÖá£</para>
+      </listitem>
+
+      <listitem>
+	<para><emphasis>ŨËõ (reduction)</emphasis>£º ´ÓÏÖÓеÄÉ󼯼ÇÕÊÖÐɸѡ³öÓÃÓÚ±£Áô¡¢
+	  ´òÓ¡»ò·ÖÎöµÄ¹ý³Ì¡£ ³ý´ËÖ®Í⣬ ËüÒ²±íʾ´ÓÉ󼯼ÇÕÊÖÐɾȥ²»ÐèÒªµÄÉ󼯼ǼµÄ¹ý³Ì¡£
+	  ͨ¹ýʹÓÃŨËõ²Ù×÷£¬ ¹ÜÀíÔ±¿ÉÒÔʵÏÖÔ¤ÁôÉó¼ÆÊý¾ÝµÄ²ßÂÔ¡£ ÀýÈ磬 ÏêϸµÄÉ󼯼ÇÕÊÐÅÏ¢£¬
+	  ¿ÉÄܻᱣÁôÒ»¸öÔÂÖ®¾Ã£¬ µ«ÔÚÕâÖ®ºó£¬ Ôò¶ÔÕâЩ¼ÇÕÊÐÅÏ¢Ö´ÐÐŨËõ²Ù×÷£¬
+	  Ö»±£ÁôµÇ¼ÐÅÏ¢ÓÃÓÚ´æµµ¡£</para>
       </listitem>
     </itemizedlist>
   </sect1>
@@ -147,19 +166,23 @@
       ÄúÓ¦ÄÜ¿´µ½Ò»Ð©Ãû×ÖÒÔ <emphasis>audit</emphasis> ¿ªÍ·µÄÎļþ£¬
       ÀýÈç <filename>audit_event</filename>¡£</para>
 
-    <para>´ËÍ⣬ »¹±ØÐë¼ÓÈëÄں˲¿·ÖµÄÖ§³Ö¡£
-      Õâ¿ÉÒÔͨ¹ýÔÚ±¾µØµÄÄÚºËÅäÖÃÎļþÖмÓÈëÏÂÃæÒ»ÐÐÀ´ÊµÏÖ£º</para>
+    <para>´Ó &os; 6.2-RELEASE ¿ªÊ¼£¬ ¶ÔʼþÉ󼯵ÄÖ§³ÖÒѾ­×÷Ϊ»ù±¾ÏµÍ³µÄÒ»²¿·Ö°²×°¡£
+      µ«ÊÇ£¬ Äú»¹ÐèÒª½«ÏÂÃæÕâЩÅäÖüÓÈëµ½ÄÚºËÅäÖÃÎļþÖУ¬
+      ÒԱ㽫ʼþÉó¼ÆÖ§³Ö¼ÓÈëµ½Äںˣº</para>
 
     <programlisting>options	AUDIT</programlisting>
 
     <para>½ÓÏÂÀ´£¬ ÄúÓ¦°´ÕÕ
       <xref linkend="kernelconfig"> ÖÐËù½éÉܵIJ½ÖèÀ´Íê³ÉÒ»´ÎÄں˵ıàÒëºÍ°²×°¡£</para>
 
-    <para>Ò»µ©Íê³É£¬ ¿ÉÒÔͨ¹ýÏÂÁÐ &man.rc.conf.5; ÅäÖÃÀ´Æô¶¯É󼯷þÎñ£º</para>
+    <para>ÔÚ±àÒëºÃ²¢°²×°ÁËÄںˣ¬ ²¢ÖØÐÂÆô¶¯ÁËϵͳ֮ºó£¬ ¾Í¿ÉÒÔÔÚ
+      &man.rc.conf.5; ÖÐÔö¼ÓÏÂÁÐÅäÖÃÀ´ÆôÓÃÉ󼯷þÎñÁË£º</para>
 
     <programlisting>auditd_enable="YES"</programlisting>
 
-    <para>ĬÈϲ»ÆôÓõÄÄÇЩ¹¦ÄÜ¿ÉÒÔÔÚ´Ë´¦ÒÔ <option>auditd_flags</option> Ñ¡ÏîÀ´Ôö¼Ó¡£</para>
+    <para>´Ëºó£¬ ±ØÐëÖØÐÂÆô¶¯ÏµÍ³£¬ »òͨ¹ýÏÂÃæµÄÃüÁîÊÖ¹¤Æô¶¯É󼯷þÎñÀ´Æô¶¯Éó¼ÆÖ§³Ö£º</para>
+
+    <programlisting>/etc/rc.d/auditd start</programlisting>
   </sect1>
 
   <sect1 id="audit-config">
@@ -176,42 +199,45 @@
 
       <listitem>
 	<para><filename>audit_control</filename> - ¿ØÖÆÉó¼Æ×ÓϵͳµÄÌØÐÔ£¬
-	  ÀýÈçĬÈÏÉó¼ÆÀà¡¢ ÔÚÉó¼ÆÈÕÖ¾ËùÔڵľíÉϱ£ÁôµÄ×îС¿Õ¼ä£¬ µÈµÈ¡£</para>
+	  ÀýÈçĬÈÏÉó¼ÆÀà¡¢ ÔÚÉó¼ÆÈÕÖ¾ËùÔڵľíÉϱ£ÁôµÄ×îС¿Õ¼ä¡¢
+	  Éó¼ÆÈÕÖ¾µÄ×î´ó³ß´ç£¬ µÈµÈ¡£</para>
       </listitem>
 
       <listitem>
-	<para><filename>audit_event</filename> - ¶¨ÒåÄÚºËÉó¼ÆÊ¼þ¡£
-	  ËüÃǶàÊý¶¼¶ÔÓ¦ÓÚijЩϵͳµ÷Óá£</para>
+	<para><filename>audit_event</filename> - ÎÄ×Ö»¯µÄϵͳÉó¼ÆÊ¼þÃû³ÆºÍÃèÊö£¬
+	  ÒÔ¼°Ã¿¸öʼþÊôÓÚÄĸöÀà±ð¡£</para>
       </listitem>
 
       <listitem>
-	<para><filename>audit_user</filename> - Õë¶ÔÌØ¶¨Óû§½øÐеÄʼþÉ󼯡£
-	  ûÓÐÔÚ´Ë´¦Ö¸¶¨µÄÓû§£¬ Ôò°´¿ØÖÆÅäÖÃÎļþÖеÄĬÈÏÅäÖô¦Àí¡£</para>
+	<para><filename>audit_user</filename> - Õë¶ÔÌØ¶¨Óû§µÄÉó¼ÆÐèÇó£¬
+	  ÕâЩÅäÖÃÔڵǼʱ»áÓëÈ«¾ÖµÄĬÈÏÖµºÏ²¢¡£</para>
       </listitem>
 
       <listitem>
-	<para><filename>audit_warn</filename> - ÓÉ auditd µ÷Óã¬
-	  ÓÃÓÚÔÚÒâÍâÇé¿ö£¬ ÈçÓÃÓڼǼÉó¼ÆÊ¼þµÄ¿Õ¼ä¹ýµÍʱ·¢³ö¾¯¸æµÄ shell
-	  ½Å±¾¡£</para>
+	<para><filename>audit_warn</filename> - ÓÉ auditd µ÷ÓõÄÒ»¸ö¿É¶¨ÖÆµÄ shell
+	  ½Å±¾£¬ ÓÃÓÚÔÚÒâÍâÇé¿ö£¬ ÈçÓÃÓÚÉó¼ÆÈÕÖ¾µÄ¿Õ¼ä¹ýÉÙ£¬ »òÉó¼ÆÈÕÖ¾Îļþ±»·­×ªÊ±£¬
+	  Éú³É¾¯¸æÐÅÏ¢¡£</para>
       </listitem>
     </itemizedlist>
 
+    <warning>
+      <para>Ôڱ༭ºÍά»¤Éó¼ÆÅäÖÃÎļþʱһ¶¨ÒªÐ¡ÐÄ£¬ ÒòΪÅäÖÃÎļþÖеĴíÎó»áµ¼Ö¼Ç¼Ê¼þ²»ÕýÈ·¡£</para>
+    </warning>
+
     <sect2>
-      <title>Éó¼ÆÎļþµÄÓï·¨</title>
+      <title>ʼþɸѡ±í´ïʽ</title>
 
-      <para>ÅäÖÃÎļþµÄÓï·¨¿´ÉÏÈ¥¿ÉÄÜÓеã¹ÖÒ죬 ¾¡¹ÜÓÃÆðÀ´»áºÜÈÝÒס£
-	¹ÜÀíÔ±±ØÐë·Ç³£½÷É÷µÄÒ»¼þÊÂÊǸıäϵͳµÄĬÈÏÖµ£¬
-	ÒòΪÕâÑù×ö¿ÉÄÜ»áÔì³ÉDZÔÚµÄÎÞ·¨ÕýÈ·ÊÕ¼¯Éó¼ÆÊý¾ÝµÄÎÊÌâ¡£</para>
+      <para>ÔÚÉó¼ÆÅäÖÃÎļþÖеÄÐí¶àµØ·½»áÓõ½É¸Ñ¡±í´ïʽÀ´È·¶¨ÄÄЩʼþÊÇÐèÒªÉ󼯵ġ£
+	±í´ïʽÖÐÐèÒªÖ¸¶¨ÒªÆ¥ÅäµÄʼþÀàÐÍ£¬ ²¢Ê¹ÓÃǰ׺ָ¶¨ÊÇ·ñÓ¦½ÓÊÜ»òºöÂÔÆ¥ÅäµÄʼþ£¬
+	´ËÍ⣬ »¹¿ÉÒÔÖ¸¶¨Ò»¸ö¿ÉÑ¡ÏîÖ¸Ã÷Æ¥Åä³É¹¦»òʧ°ÜµÄ²Ù×÷¡£
+	Ñ¡Ôñ±í´ïʽÊǰ´´Ó×óµ½ÓÒµÄ˳Ðò¼ÆËãµÄ£¬ ¶ø¶ÔÓÚÁ½¸ö±í´ïʽµÄÇéÐΣ¬
+	ÔòÊÇͨ¹ý½«ºóÒ»¸ö×·¼Óµ½Ç°Ò»¸öÖ®ºóÀ´ÊµÏֵġ£</para>
 
-      <para>Éó¼Æ×ÓϵͳÄܹ»Í¬Ê±½ÓÊÜÅäÖÃÓï·¨Öеij¤¶ÌÃû×Ö¡£ ½ÓÏÂÀ´£¬
-	ÎÒÃǽ«¸ø³öÓï·¨±í¡£</para>
+      <para>ÏÂÃæÁгöÁËÔÚ <filename>audit_class</filename> ÖеÄĬÈÏʼþÀàÐÍ£º</para>
 
-      <para>ÏÂÃæÊÇËùÖ§³ÖµÄÈ«²¿Éó¼ÆÀࣺ</para>
-
       <itemizedlist>
 	<listitem>
-	  <para><option>all</option> - <literal>all</literal> -
-	    ÉèÖÃÈ«²¿É󼯱êÖ¾¡£</para>
+	  <para><option>all</option> - <literal>all</literal> - ±íʾƥÅäÈ«²¿Ê¼þÀà¡£</para>
 	</listitem>
 
 	<listitem>
@@ -230,8 +256,10 @@
 	</listitem>
 
 	<listitem>
-	  <para><option>ex</option> - <literal>exec</literal> -
-	    É󼯳ÌÐò»òʵÓù¤¾ßµÄÖ´ÐС£</para>
+	  <para><option>ex</option> - <literal>exec</literal> - É󼯳ÌÐòµÄÖ´ÐС£
+	    ¶ÔÓÚÃüÁîÐвÎÊýºÍ»·¾³±äÁ¿µÄÉó¼ÆÊÇͨ¹ýÔÚ &man.audit.control.5;
+	    ÖÐ <literal>policy</literal> µÄ <literal>argv</literal> ºÍ <literal>envv</literal>
+	    ²ÎÊýÀ´¿ØÖƵġ£</para>
 	</listitem>
 
 	<listitem>
@@ -289,7 +317,7 @@
 
 	<listitem>
 	  <para><option>no</option> - <literal>no_class</literal> -
-	    ¿ÕÀ࣬ ÓÃÓÚ½ûÓÃʼþÉ󼯡£</para>
+	    ±íʾ²»Æ¥ÅäÈκÎʼþ¡£</para>
 	</listitem>
 
 	<listitem>
@@ -308,45 +336,48 @@
 	    É󼯽ø³Ì²Ù×÷£¬ ÀýÈç &man.exec.3; ºÍ
 	    &man.exit.3;¡£</para>
 	</listitem>
+
       </itemizedlist>
 
-      <para>ÏÂÃæÊÇÈ«²¿Ö§³ÖµÄÉó¼ÆÇ°×º£º</para>
+      <para>ÕâЩÉó¼ÆÊ¼þ£¬ ¿ÉÒÔͨ¹ýÐÞ¸Ä
+	<filename>audit_class</filename> ºÍ
+	<filename>audit_event</filename> ÕâÁ½¸öÅäÖÃÎļþÀ´½øÐж¨ÖÆ¡£</para>
+
+      <para>Õâ¸öÁбíÖУ¬ ÿ¸öÉó¼ÆÀà¾ù°üº¬Ò»¸ö±íʾƥÅä³É¹¦/ʧ°Ü²Ù×÷µÄǰ׺£¬
+	ÒÔ¼°ÕâÒ»ÏîÊÇ·ñÊÇÔö¼Ó»òɾȥ¶ÔʼþÀà»òÀàÐÍµÄÆ¥Åä¡£</para>
 
       <itemizedlist>
 	<listitem>
-	  <para><literal>none</literal> - ͬʱÉó¼ÆÊ¼þµÄ³É¹¦ºÍʧ°Ü¡£
-	    ÀýÈ磬 ÖÈÐòÁгöÒ»¸öʼþÀà¾Í¿ÉÒÔͬʱÉ󼯯ä³É¹¦»òʧ°Ü¡£</para>
+	  <para>(none) Éó¼ÆÊ¼þµÄ³É¹¦ºÍʧ°ÜʵÀý¡£</para>
 	</listitem>
 
 	<listitem>
-	  <para><literal>+</literal> - Ö»É󼯳ɹ¦Ê¼þ¡£</para>
+	  <para><literal>+</literal> Éó¼ÆÕâÒ»ÀàµÄ³É¹¦Ê¼þ¡£</para>
 	</listitem>
 
 	<listitem>
-	  <para><literal>-</literal> - Ö»Éó¼ÆÊ§°Üʼþ¡£</para>
+	  <para><literal>-</literal> Éó¼ÆÕâÒ»ÀàµÄʧ°Üʼþ¡£</para>
 	</listitem>
-      </itemizedlist>
 
-      <warning>
-	<para>ʹÓà <option>all</option> À࣬ ÎÞÂÛÊÇÕý»¹ÊǸººÅ×÷Ϊǰ׺£¬
-	  ¶¼»áÒÔ¼«¿ìµÄËٶȲúÉú´óÁ¿µÄÊý¾Ý¡£</para>
-      </warning>
-
-      <para>ÆäËûÓÃÓڸıäĬÈÏÅäÖÃÖµµÃǰ׺£º</para>
-<!-- XXX: Perhaps a variable listing here. -->
-      <itemizedlist>
 	<listitem>
-	  <para>^- - ½ûÓöÔÓÚʧ°ÜʼþµÄÉ󼯡£</para>
+	  <para><literal>^</literal> ²»É󼯱¾ÀàÖеijɹ¦»òʧ°Üʼþ¡£</para>
 	</listitem>
 
 	<listitem>
-	  <para>^+ - ÆôÓöÔÓڳɹ¦Ê¼þµÄÉ󼯡£</para>
+	  <para><literal>^+</literal> ²»É󼯱¾ÀàÖеijɹ¦Ê¼þ¡£</para>
 	</listitem>
 
 	<listitem>
-	  <para>^ - ͬʱ½ûÓóɹ¦ºÍʧ°ÜʼþµÄÉ󼯡£</para>
+	  <para><literal>^-</literal> ²»É󼯱¾ÀàÖеÄʧ°Üʼþ¡£</para>
 	</listitem>
+
       </itemizedlist>
+
+      <para>ÏÂÃæÀý×ÓÖеÄɸѡ×Ö·û´®±íʾɸѡ³É¹¦ºÍʧ°ÜµÄµÇ¼/×¢Ïúʼþ£¬
+	¶ø¶ÔÖ´ÐÐʼþ£¬ ÔòÖ»É󼯳ɹ¦µÄ£º</para>
+
+      <programlisting>lo,+ex</programlisting>
+
     </sect2>
 
     <sect2>
@@ -354,112 +385,176 @@
 
       <para>¶àÊýÇé¿öÏ£¬ ÔÚÅäÖÃÉó¼ÆÏµÍ³Ê±£¬
 	¹ÜÀíÔ±Ö»ÐèÐÞ¸ÄÁ½¸öÎļþ£º <filename>audit_control</filename>
-	ºÍ <filename>audit_user</filename>¡£ µÚÒ»¸öÎļþ¿ØÖÆÏµÍ³¼¶µÄÉ󼯲ÎÊý£¬
-	ÒÔ¼°ËùÓÐÓÐÖ÷»òÎÞÖ÷ʼþµÄĬÈϲÎÊý¡£ µÚ¶þ¸öÎļþÓÃÓÚµ÷ÕûÕë¶Ô¾ßÌåÓû§µÄÉ󼯼¶±ðºÍÐÔÖÊ¡£</para>
+	ºÍ <filename>audit_user</filename>¡£ ǰÕß¿ØÖÆÏµÍ³¼¶µÄÉó¼ÆÊôÐԺͲßÂÔ£¬
+	¶øºóÕßÔòÓÃÓÚÕë¶Ô¾ßÌåµÄÓû§À´Î¢µ÷¡£</para>
 
       <sect3 id="audit-auditcontrol">
-        <title>´«ËµÖÐµÄ <filename>audit_control</filename> Îļþ</title>
+        <title><filename>audit_control</filename> Îļþ</title>
 
-	<para><filename>audit_control</filename> Îļþ°üº¬ÁËһЩ»ù±¾µÄĬÈÏÖµ£¬
-	  ¹ÜÀíԱͨ³£»áÏ£Íû¼ÓÒÔÐ޸ģ¬ ÓÐʱÉõÖÁÊÇÉèÖÃһЩеÄÅäÖá£
-	  ²ì¿´Õâ¸öÎļþµÄÄÚÈÝ£¬ ÎÒÃǻᷢÏÖ£º</para>
+	<para><filename>audit_control</filename> ÎļþÖ¸¶¨ÁËһϵÁÐÓÃÓÚÉó¼Æ×ÓϵͳµÄĬÈÏÉèÖá£
+	  ͨ¹ý²é¿´Õâ¸öÎļþ£¬ ÎÒÃÇ¿ÉÒÔ¿´µ½ÏÂÃæµÄÄÚÈÝ£º</para>
 
 	<programlisting>dir:/var/audit
 flags:lo
 minfree:20
-naflags:lo</programlisting>
+naflags:lo
+policy:cnt
+filesz:0</programlisting>
 
-	<para>ÕâÀïµÄ <option>dir</option> ÓÃÓÚÉèÖÃÉó¼ÆÈÕÖ¾µÄĬÈÏ´æ·ÅĿ¼¡£
+	<para>ÕâÀïµÄ <option>dir</option> Ñ¡Ïî¿ÉÒÔÓÃÀ´ÉèÖÃÓÃÓÚ±£´æÉó¼ÆÈÕÖ¾µÄÒ»¸ö»ò¶à¸öĿ¼¡£
+	  Èç¹ûÖ¸¶¨Á˶à¸öĿ¼£¬ Ôò½«ÔÚÌîÂúÒ»¸öÖ®ºó»»ÓÃÏÂÒ»¸ö¡£ Ò»°ã¶øÑÔ£¬
 	  Éó¼ÆÍ¨³£¶¼»áÅäÖÃΪ±£´æÔÚÒ»¸öרÓõÄÎļþϵͳ֮Ï£¬
 	  ÒÔ±ÜÃâÉó¼ÆÏµÍ³ÓëÆäËü×ÓϵͳÔÚÎļþϵͳÂúµÄʱºòËù²úÉúµÄ³åÍ»¡£
 	  </para>
 
-	<para><option>flags</option> Ñ¡ÏîÔòÓÃÀ´ÉèÖÃϵͳ¼¶µÄĬÈÏ¡£
-	  ĿǰµÄÉèÖ㬠¼´ <option>lo</option>
-	  ÅäÖÃÉó¼ÆËùÓÐµÄ &man.login.1; ºÍ &man.logout.1;
-	  ¶¯×÷¡£ ¶ø¸üΪ¸´ÔÓµÄÀý×Ó£¬
-	  <option>lo,ad,-all,^-fa,^-fc,^-cl</option> ±íʾÉó¼ÆËùÓеÄϵͳ
-	  &man.login.1; ºÍ &man.logout.1; ¶¯×÷¡¢ ËùÓйÜÀí¶¯×÷£¬
-	  ÒÔ¼°ËùÓÐϵͳÖÐʧ°ÜµÄ¶¯×÷£¬ µ«×îºó½ûÓÃ¶Ô <option>fa</option>¡¢
-	  <option>fc</option>£¬ ÒÔ¼° <option>cl</option> µÄʧ°Ü³£ÊÇ¡£
-	  ¾¡¹Ü <option>-all</option> »á´ò¿ªËùÓÐʼþµÄʧ°Ü³£ÊÇ£¬
-	  µ«Ö®ºóµÄÑ¡ÏîÖÐµÄ <option>^-</option> ǰ׺Ôò»á¸Ä±äÏàÓ¦µÄÉèÖá£</para>
+	<para><option>flags</option> ×Ö¶ÎÓÃÓÚΪÓÐÖ÷ʼþÅäÖÃϵͳ¼¶µÄԤѡÌõ¼þ¡£
+	  ÔÚÇ°ÃæµÄÀý×ÓÖУ¬ ËùÓÐÓû§³É¹¦ºÍʧ°ÜµÄµÇ¼ºÍ×¢Ïú¶¼»á±»É󼯡£</para>
+
+	<para><option>minfree</option> ²ÎÊýÓÃÓÚ¶¨Òå±£´æÉó¼ÆÈÕÖ¾µÄÎļþϵͳÉÏÊ£Óà¿Õ¼äµÄ×îС°Ù·Ö±È¡£
+	  µ±³¬¹ýÕâÒ»ãÐֵʱ£¬ ½«²úÉúÒ»¸ö¾¯¸æ¡£ Ç°ÃæµÄÀý×ÓÖУ¬ ×îСʣÓà¿Õ¼ä±ÈÀýÉèÖóÉÁËÁ½³É¡£</para>
 
-	<para>Çë×¢Òâǰһ½ÚҲ˵Ã÷ÁËÅäÖÃÊÇ´Ó×óµ½ÓÒ¶ÁÈ¡µÄ¡£ ͬÑùµØ£¬
-	  ½ÏΪ¿¿ÓÒµÄÖµ¿ÉÒÔÌæ´ú¿¿×óµÄÖµËùÉ趨µÄĬÈÏ¡£</para>
+	<para><option>naflags</option> Ñ¡Ïî±íʾÉó¼ÆÀàÉó¼ÆÎÞÖ÷ʼþ£¬
+	  ÀýÈç×÷ΪµÇ¼½ø³ÌºÍϵͳ·þÎñµÄÄÇЩ½ø³ÌµÄʼþ¡£</para>
 
-	<para><option>minfree</option> ²ÎÊý¶¨ÒåÁËÓÃÓÚÉ󼯵ÄÎļþϵͳÉÏ£¬
-	  Ê£Óà¿Õ¼äµÄ×îСֵ¡£ ÕâÒ»°Ù·Ö±ÈÖµÊÇÏà¶ÔÓÚ±£´æÉó¼ÆÈÕÖ¾µÄÎļþϵͳÀ´¼ÆËãµÄ¡£
-	  ÀýÈ磬 Èç¹û <option>dir</option> Ö¸¶¨ÁË
-	  <filename role="directory">/var/audit</filename> ¶ø
-	  <option>minfree</option> ÉèΪÁ½³É (20)£¬ Ôòµ±
-	  <filename role="directory">/var</filename> ÎļþϵͳÓа˳É
-	  (80) ¿Õ¼ä±»ÌîÂúʱ½«»á¸ø³ö¾¯¸æÏûÏ¢¡£</para>
+	<para><option>policy</option> Ñ¡ÏîÓÃÓÚÖ¸¶¨Ò»¸öÒÔ¶ººÅ·Ö¸ôµÄ²ßÂÔ±êÖ¾±í£¬
+	  ÒÔ¿ØÖÆÒ»ÏµÁÐÉó¼ÆÐÐΪ¡£ ĬÈ쵀 <literal>cnt</literal> ±êÖ¾±íʾϵͳӦÔÚÉó¼ÆÊ§°Üʱ¼ÌÐøÔËÐÐ
+	  (Ç¿ÁÒ½¨ÒéʹÓÃÕâ¸ö±êÖ¾)¡£ ÁíÒ»¸ö³£ÓõıêÖ¾ÊÇ
+	  <literal>argv</literal>£¬ Ëü±íʾÔÚÉó¼ÆÃüÁîÖ´ÐвÙ×÷ʱ£¬
+	  ͬʱÉ󼯴«¸ø &man.execve.2; ϵͳµ÷ÓõÄÃüÁîÐвÎÊý¡£</para>
 
-	<para><option>naflags</option> ²ÎÊýÓÃÓÚÖ¸¶¨ÎÞÖ÷ʼþ &mdash;
-	  Ò²¾ÍÊÇÄÇЩ²¢²»ÓëÌØ¶¨Óû§¹ØÁªµÄʼþµÄÉ󼯡£
-	  </para>
+	<para><option>filesz</option> Ñ¡ÏîÖ¸Ã÷ÁËÉó¼ÆÈÕÖ¾ÔÚ×Ô¶¯Í£Ö¹¼Ç¼ºÍ·­×ªÖ®Ç°ÔÊÐíµÄ×î´ó³ß´ç¡£
+	  ĬÈÏÖµ 0 ±íʾ½ûÓÃ×Ô¶¯ÈÕÖ¾·­×ª¡£ Èç¹ûÅäÖõÄÖµ²»ÊÇÁ㣬 µ«Ð¡ÓÚ×îСֵ 512k£¬
+	  ÔòÕâ¸öÅäÖûᱻºöÂÔ£¬ ²¢ÔÚÈÕÖ¾ÖмǼÕâÒ»ÏûÏ¢¡£</para>
       </sect3>
 
       <sect3 id="audit-audituser">
 	<title><filename>audit_user</filename> Îļþ</title>
 
-	<para><filename>audit_user</filename> ÎļþÔÊÐí¹ÜÀíÔ±¾ö¶¨ÄÄЩϵͳÓû§Ëù²úÉúµÄÄÄЩÀàµÄʼþÓ¦±»¼Ç¼ÔÚ°¸¡£</para>
+	<para><filename>audit_user</filename> ÎļþÔÊÐí¹ÜÀíÔ±ÎªÌØ¶¨Óû§Ö¸¶¨½øÒ»²½µÄÉó¼ÆÐèÇó¡£
+	  ÿһÐÐʹÓÃÁ½¸ö×Ö¶ÎÀ´ÅäÖÃÓû§µÄÉ󼯣º
+	  µÚÒ»¸öÊÇ <literal>alwaysaudit</literal> ×ֶΣ¬ ËüÖ¸Ã÷ÁËÒ»×é¶Ô¸ÃÓû§×Ü»á½øÐÐÉ󼯵Äʼþ£»
+	  ¶øµÚ¶þ¸öÔòÊÇ <literal>neveraudit</literal> ×ֶΣ¬
+	  ËüÖ¸Ã÷ÁËһϵÁжԸÃÓû§²»É󼯵Äʼþ¡£</para>
 
-	<para>ÏÂÃæÊÇ <filename>audit_user</filename> ÎļþÖеÄһЩĬÈÏÖµ£º</para>
+	<para>ÔÚÏÂÊö <filename>audit_user</filename> ʾÀýÎļþÖУ¬
+	  Éó¼ÆÁË root Óû§µÄ µÇ¼/×¢Ïú ʼþ£¬ ÒÔ¼°³É¹¦µÄÃüÁîÖ´ÐÐʼþ£¬
+	  ´ËÍ⣬ »¹Éó¼ÆÁË www Óû§µÄÎļþ´´½¨ºÍ³É¹¦µÄÃüÁîÖ´ÐÐʼþ¡£
+	  Èç¹ûÓëÇ°ÃæµÄʾ·¶ <filename>audit_control</filename> ÎļþÅäºÏʹÓã¬
+	  Ôò <literal>root</literal> µÄ <literal>lo</literal> Ïî¾ÍÊǶàÓàµÄ£¬ ¶ø¶Ô
+	  <literal>www</literal> Óû§¶øÑÔ£¬ ÆäµÇ¼/×¢ÏúʼþÒ²»á±»É󼯣º</para>
 
-	<programlisting>root:lo:no
-audit:fc:no</programlisting>
+	<programlisting>root:lo,+ex:no
+www:fc,+ex:no</programlisting>
 
-	<para>×¢ÒâĬÈÏÖµ½«Éó¼ÆËùÓеÄ
-	  <command>login</command>/<command>logout</command>
-	  ʼþ£¬ ¶ø½ûÖ¹Éó¼ÆËùÓÐÆäËûÓÉ
-	  <username>root</username> Íê³ÉµÄ¶¯×÷¡£
-	  ÕâÒ»ÅäÖÃÒ²»áÉó¼ÆËùÓÐÎļþ´´½¨²Ù×÷£¬
-	  ²¢½ûÖ¹ËùÓÐÆäËûÓÉ <username>audit</username>
-	  Óû§Íê³ÉµÄ²Ù×÷¡£ ¾¡¹ÜʼþÉ󼯲¢²»ÒÀÀµÌØÊâµÄÓû§²ÅÄÜÕý³£¹¤×÷£¬
-	  ijЩÅäÖã¬ ÌØ±ðÊÇʹÓÃÁË <acronym>MAC</acronym> µÄ»·¾³ÖУ¬
-	  È´¿ÉÄÜÐèÒªÕâ¸öÓû§´æÔÚ¡£</para>
       </sect3>
     </sect2>
   </sect1>
 
   <sect1 id="audit-administration">
-    <title>¹ÜÀíʼþÉó¼Æ</title>
+    <title>¹ÜÀíÉó¼Æ×Óϵͳ</title>
+
+    <sect2>
+      <title>²é¿´Éó¼ÆÈÕÖ¾</title>
+
+      <para>É󼯼ÇÕÊÊÇÒÔ BSM ¶þ½øÖƸñʽ±£´æµÄ£¬ Òò´Ë±ØÐëʹÓù¤¾ßÀ´¶ÔÆä½øÐÐÐ޸ģ¬
+	»ò½«Æäת»»ÎªÎı¾¡£ <command>praudit</command>
+	ÃüÁîÄܹ»½«¼ÇÕÊÎļþת»»Îª¼òµ¥µÄÎı¾¸ñʽ£» ¶ø
+	<command>auditreduce</command> ÃüÁîÔò¿ÉÒÔΪ·ÖÎö¡¢ ´æµµ»ò´òÓ¡Ä¿µÄÀ´Å¨ËõÉó¼ÆÈÕÖ¾Îļþ¡£
+	<command>auditreduce</command> Ö§³ÖһϵÁÐɸѡ²ÎÊý£¬ °üÀ¨Ê¼þÀàÐÍ¡¢ ʼþÀà¡¢
+	Óû§¡¢ ʼþµÄÈÕÆÚºÍʱ¼ä£¬ ÒÔ¼°Îļþ·¾¶»ò²Ù×÷¶ÔÏó¡£</para>
+
+      <para>ÀýÈ磬 <command>praudit</command> ¹¤¾ß»á½«Ö¸¶¨µÄÉ󼯼ÇÕÊת´æÎª¼òµ¥Îı¾¸ñʽµÄÉó¼ÆÈÕÖ¾£º</para>
+
+      <screen>&prompt.root; <userinput>praudit /var/audit/AUDITFILE</userinput></screen>
+
+      <para>´Ë´¦ <replaceable>AUDITFILE</replaceable> ÊÇҪת´æµÄÉó¼ÆÈÕÖ¾Îļþ¡£</para>
+
+      <para>É󼯼ÇÕÊÖаüÀ¨Ò»ÏµÁÐÉ󼯼Ǽ£¬ ÕâЩ¼Ç¼ÓÉһϵÁжÌÓï (token) ×é³É£¬
+	¶ø <command>praudit</command> ÄܰÑËüÃÇ˳ÐòÏÔʾΪһÐС£
+	ÿ¸ö¶ÌÓï¶¼ÊôÓÚij¸öÌØ¶¨µÄÀàÐÍ£¬ ÀýÈç
+	<literal>header</literal> ±íʾÉ󼯼Ǽͷ£¬ ¶ø
+	<literal>path</literal> Ôò±íʾÔÚÒ»´ÎÃû×Ö²éÕÒÖеÄÎļþ·¾¶¡£ ÏÂÃæÊÇÒ»¸ö
+	<literal>execve</literal> ʼþµÄÀý×Ó£º</para>
+
+      <programlisting>header,133,10,execve(2),0,Mon Sep 25 15:58:03 2006, + 384 msec
+exec arg,finger,doug
+path,/usr/bin/finger
+attribute,555,root,wheel,90,24918,104944
+subject,robert,root,wheel,root,wheel,38439,38032,42086,128.232.9.100
+return,success,0
+trailer,133</programlisting>
 
-    <para>ÓÉÄÚºËÉó¼Æ×Óϵͳд³öµÄʼþ£¬ ²¢²»ÄÜÒÔÆÕͨÎı¾µÄÐÎʽ¼ÓÒÔÐ޸ĻòÔĶÁ¡£
-      ÕâЩÊý¾ÝÒÔÀàËÆ &man.ktrace.1; ºÍ &man.kdump.1; ÄÇÑùµÄ·½Ê½À´´æ´¢ºÍ·ÃÎÊ£¬
-      Ò²¾ÍÊÇ˵£¬ Ö»ÄÜͨ¹ýʹÓÃ
-      <command>praudit</command> ÃüÁîÖ´ÐÐת´æ²Ù×÷²ÅÄܲ쿴ËüÃÇ£»
-      Éó¼ÆÕËÄ¿¿ÉÒÔͨ¹ý <command>auditreduce</command> ÃüÁîÀ´¼õÉÙ£¬
-      ËüÄܹ»¸ù¾ÝÄú¸ÐÐËȤµÄÊôÐÔ£¬ ÀýÈçÓû§¡¢ ʼþ·¢ÉúµÄʱ¼ä£¬
-      ÒÔ¼°²Ù×÷ÀàÐÍÀ´Ñ¡Ôñ²éѯ¼Ç¼¡£</para>
+      <para>Õâ¸öÉ󼯼Ǽ±íʾһ´Î³É¹¦µÄ <literal>execve</literal>
+	µ÷Ó㬠ִÐÐÁË "finger doug"¡£ ÔÚ²ÎÊý¶ÌÓïÖÐÊÇÓÉ shell Ìá½»¸øÄں˵ÄÃüÁîÐС£
+	path ¶ÌÓï°üº¬ÁËÓÉÄں˲éÕҵõ½µÄ¿ÉÖ´ÐÐÎļþ·¾¶¡£ ÊôÐÔ¶ÌÓïÖаüº¬Á˶ԿÉÖ´ÐÐÎļþµÄÃèÊö£¬
+	ÌØ±ðµØ£¬ Ëü°üÀ¨ÁËÎļþµÄȨÏÞģʽ£¬ ÓÃÒÔÈ·¶¨Ó¦ÓóÌÐòÊÇ·ñÊÇ setuid µÄ¡£
+	Ö÷Ìå¶ÌÓïÃèÊöÁËÖ÷Ìå½ø³Ì£¬ ²¢Ë³Ðò¼Ç¼ÁËÉó¼ÆÓû§ ID¡¢ ÉúЧÓû§ ID ºÍ×é ID¡¢
+	ʵ¼ÊÓû§ ID ºÍ×é ID¡¢ ½ø³Ì ID¡¢ »á»° ID¡¢ ¶Ë¿Ú ID£¬ ÒÔ¼°µÇ¼µØÖ·¡£
+	×¢ÒâÉó¼ÆÓû§ ID ºÍʵ¼ÊÓû§ ID ÊDz»Í¬µÄ£º
+	Óû§ <literal>robert</literal> ÔÚÖ´ÐÐÕâ¸öÃüÁî֮ǰÒѾ­Çл»Îª
+	<literal>root</literal> ÕÊ»§£¬ µ«Ëü»áÒÔ×î³õ½øÐÐÉí·ÝÑéÖ¤µÄÓû§Éí·Ý½øÐÐÉ󼯡£
+	×îºó£¬ ·µ»ØÖµ¶ÌÓï±íʾִÐгɹ¦£¬ ²¢ÖÕ½áÕâÒ»¼Ç¼¡£</para>
 
-    <para>ÀýÈ磬 <command>praudit</command> Äܹ»½«Ñ¡¶¨Éó¼ÆÈÕÖ¾µÄÍêÕûÄÚÈÝ£¬
-      ת´æÎªÆÕͨµÄÎı¾Îļþ¡£ Òª½«Õû¸öÉó¼ÆÈÕ־ת´æ£¬ ¿ÉʹÓãº</para>
+    </sect2>
 
-    <screen>&prompt.root; <userinput>praudit /var/audit/AUDITFILE</userinput></screen>
+    <sect2>
+      <title>ŨËõÉ󼯼ÇÕÊ</title>
 
-    <para>ÕâÀï <replaceable>AUDITFILE</replaceable> ÊÇÏ£Íû²é¿´µÄÉó¼ÆÈÕÖ¾¡£
-      ÓÉÓÚÉó¼ÆÈÕÖ¾¿ÉÄܰüº¬´óÁ¿µÄÊý¾Ý£¬
-      ¹ÜÀíÔ±¿ÉÄܸüÏ£ÍûÑ¡ÔñÄ³Ò»ÌØ¶¨Óû§µÄÏà¹ØÊ¼þ¡£
-      Òª´ïµ½Õâ¸öÄ¿µÄ£¬ ¿ÉÒÔʹÓÃÏÂÃæµÄÃüÁ
-      ÕâÀïÎÒÃÇÑ¡ÔñµÄÓû§ÊÇ <username>trhodes</username>£º</para>
+      <para>ÓÉÓÚÉó¼ÆÈÕÖ¾¿ÉÄÜ»áºÜ´ó£¬ ¹ÜÀíÔ±¿ÉÄÜ»áÏ£ÍûÑ¡Ôñ¼Ç¼µÄÒ»¸ö×Ó¼¯À´Ê¹Óã¬
+	ÀýÈçÓëÌØ¶¨Óû§Ïà¹ØµÄ¼Ç¼£º</para>
 
-    <screen>&prompt.root; <userinput>auditreduce -e trhodes /var/audit/AUDITFILE | praudit</userinput></screen>
+      <screen>&prompt.root; <userinput>auditreduce -u trhodes /var/audit/AUDITFILE | praudit</userinput></screen>
 
     <para>Õ⽫ѡÔñ±£´æÔÚ <replaceable>AUDITFILE</replaceable> ÖеÄËùÓÐÓÉ
       <username>trhodes</username> ²úÉúµÄÉó¼ÆÈÕÖ¾¡£</para>
+    </sect2>
+
+    <sect2>
+      <title>ίÅÉÉ󼯏´ÉóȨÏÞ</title>
+
+      <para>ÔÚ <literal>audit</literal> ×éÖеÄÓû§£¬
+	ÓµÓжÁÈ¡ <filename>/var/audit</filename> ϵÄÉ󼯼ÇÕʵÄȨÏÞ£»
+	ĬÈÏÇé¿öÏ£¬ Õâ¸ö×éÊǿյģ¬ Òò´ËÖ»ÓÐ root Óû§¿ÉÒÔ¶ÁÈ¡É󼯼ÇÕÊ¡£
+	Èç¹ûÏ£Íû¸øÄ³¸öÓû§Ö¸¶¨É󼯏´ÉóȨ£¬ Ôò¿ÉÒÔ½«Æä¼ÓÈë <literal>audit</literal>¡£
+	ÓÉÓڲ鿴Éó¼ÆÈÕÖ¾µÄÄÚÈÝ¿ÉÒÔÌṩ¹ØÓÚÓû§ºÍ½ø³ÌÐÐΪµÄ´óÁ¿Éî¶ÈÐÅÏ¢£¬
+	ÔÚÄúίÅÉÕâЩȨÁ¦Ê±£¬ ÇëÎñ±Ø½÷É÷ÐÐÊ¡£</para>
+    </sect2>
 
-    <para>»¹ÓÐÐí¶àÆäËûÑ¡Ïî¿ÉÒÔÔÚÔĶÁÉ󼯼ǼʱʹÓᣠÇë²Î¼ûǰÊöÃüÁîµÄÁª»úÊé²á£¬
-      ÒÔ»ñµÃ½øÒ»²½µÄ½âÊÍ¡£</para>
+    <sect2>
+      <title>ͨ¹ýÉ󼯹ܵÀÀ´ÊµÊ±¼à¿Ø</title>
+
+      <para>É󼯹ܵÀÊÇλÓÚÉ豸ÎļþϵͳÖеÄ×Ô¶¯¸´ÖÆ (cloning) µÄÐéÄâÉ豸£¬
+	ÓÃÓÚÈÃÓ¦ÓóÌÐò¿ØÖÆÕýÔÚÔËÐеÄÉ󼯼ǼÁ÷£¬ ÕâÖ÷ÒªÊÇΪÁËÂú×ãÈëÇÖ¼ì²âºÍϵͳ¼à¿ØÈí¼þ×÷ÕßµÄÐèÒª¡£
+	²»¹ý£¬ ¶Ô¹ÜÀíÔ±¶øÑÔ£¬ É󼯹ܵÀÉ豸ҲÌṩÁËÒ»ÖÖÎÞÐèðÉ󼯼ÇÕÊÎļþÊôÖ÷³öÏÖÎÊÌâµÄÂé·³£¬
+	»òÓÉÓÚÈÕÖ¾·­×ª¶ø´ò¶ÏʼþÁ÷µÄÂé·³£¬ ¶øÊµÏÖʵʱ¼à¿ØµÄ·½±ã;¾¶¡£ Òª¸ú×ÙʵʱʼþÁ÷£¬
+	ʹÓÃÏÂÃæµÄÃüÁîÐУº</para>
+
+      <screen>&prompt.root; <userinput>praudit /dev/auditpipe</userinput></screen>
+
+      <para>ĬÈÏÇé¿öÏ£¬ É󼯹ܵÀÉ豸½ÚµãÖ»ÓÐ root Óû§²ÅÄÜ·ÃÎÊ¡£ Èç¹ûÏ£Íû
+	<literal>audit</literal> ×éµÄ³ÉÔ±Äܹ»·ÃÎÊËü£¬ Ó¦ÔÚ <filename>devfs.rules</filename>
+	ÖмÓÈëÏÂÊö <literal>devfs</literal> ¹æÔò£º</para>
+
+      <programlisting>add path 'auditpipe*' mode 0440 group audit</programlisting>
+
+      <para>Çë²Î¼û &man.devfs.rules.5; ÒÔÁË½â¹ØÓÚÅäÖà devfs ÎļþϵͳµÄ½øÒ»²½ÐÅÏ¢¡£</para>
+
+      <warning>
+	<para>ºÜÈÝÒ×ÅäÖóöÉó¼ÆÊ¼þ·´À¡Ñ­»·£¬ Ò²¾ÍÊDz鿴ʼþµÄ²Ù×÷±¾Éí»á²úÉú¸ü¶àµÄʼþ¡£
+	  ÀýÈ磬 Èç¹ûËùÓеÄÍøÂç I/O ¾ù±»É󼯣¬ ÓÖÔÚ SSH »á»°ÖÐÖ´ÐÐ
+	  praudit£¬ ¾Í»áÒԺܸߵÄËÙÂʲúÉú³ÖÐøµÄÉó¼ÆÊ¼þÁ÷£¬
+	  ÒòΪÿÏÔʾһ¸öʼþ¶¼»á²úÉúеÄʼþ¡£ ½¨ÒéÄúÔÚÐèÒªÔÚÉ󼯹ܵÀÉ豸ÉÏÖ´ÐÐ
+	  praudit ʱ£¬ Ñ¡ÔñÒ»¸öûÓнøÐÐϸÁ£¶È
+	  I/O Éó¼ÆµÄ»á»°À´ÔËÐС£</para>
+      </warning>
+    </sect2>
 
     <sect2>
-      <title>Éó¼ÆÈÕÖ¾ÎļþµÄÂÖת</title>
+      <title>É󼯼ÇÕÊÎļþµÄÂÖת</title>
 
-      <para>ÓÉÓÚÈÕÖ¾¿É¿¿ÐÔµÄÒªÇó£¬ É󼯼ÆÕËÖ»ÓÉÄÚºËдÈ룬 ÇÒÖ»ÄÜÓÉ
+      <para>É󼯼ÆÕËÖ»ÓÉÄÚºËдÈ룬 ÇÒÖ»ÄÜÓÉ
 	<command>auditd</command> ¹ÜÀí¡£ ¹ÜÀíÔ±²»Ó¦³¢ÊÔʹÓà &man.newsyslog.conf.5;
-	»òÆäËü¹¤¾ßÀ´Íê³ÉÉó¼ÆÈÕÖ¾µÄÂÖת¹¤×÷¡£ ÄúӦʹÓà <command>audit</command>
+	»òÆäËü¹¤¾ßÀ´Íê³ÉÉó¼ÆÈÕÖ¾µÄÂÖת¹¤×÷¡£ Äú¿ÉÒÔʹÓà <command>audit</command>
 	¹ÜÀí¹¤¾ßÀ´¹Ø±ÕÉ󼯡¢ ÖØÐÂÅäÖÃÉó¼ÆÏµÍ³£¬ ²¢Íê³ÉÈÕÖ¾ÂÖת¡£
 	ÏÂÃæµÄÃüÁÈÃÉ󼯷þÎñ´´½¨ÐµÄÉó¼ÆÈÕÖ¾£¬
 	²¢·¢ÐźŸøÄÚºËÒªÇóÆäʹÓÃеÄÈÕÖ¾¡£ ¾ÉÈÕÖ¾½«ÖÕÖ¹²¢±»¸ÄÃû£¬
@@ -469,7 +564,7 @@
 
       <warning>
 	<para>Èç¹û <command>auditd</command> ·þÎñ³ÌÐòûÓÐÔÚÔËÐУ¬
-	  ÔòǰÊöÃüÁʧ°Ü²¢¸ø³ö´íÎóÌáʾ¡£</para>
+	  ÔòÕâ¸öÃüÁʧ°Ü²¢¸ø³ö´íÎóÌáʾ¡£</para>
       </warning>
 
       <para>ÔÚ <filename>/etc/crontab</filename> ¼ÓÈëÈçÏÂÉèÖã¬
@@ -478,17 +573,30 @@
       <programlisting>*     */12       *       *       *       root    /usr/sbin/audit -n</programlisting>
 
       <para>ÕâЩÐ޸ĻáÔÚÄú±£´æ <filename>/etc/crontab</filename> ºóÉúЧ¡£</para>
+
+      <para>¶ÔÓÚÉ󼯼ÇÕÊÎļþ»ùÓڳߴçµÄ×Ô¶¯·­×ª£¬ ¿ÉÒÔͨ¹ý
+	&man.audit.control.5; ÖÐµÄ <option>filesz</option> Ñ¡ÏîÀ´ÅäÖã¬
+	Õâ¸öÑ¡ÏîÔÚÕâÒ»ÕµÄÅäÖÃÎļþÒ»½ÚÖÐÒѾ­½éÉܹý¡£</para>
     </sect2>
 
     <sect2>
-      <title>ΪÆäËüÓû§Ö¸ÅÉÉ󼯏´ÉóȨÏÞ</title>
+      <title>ѹËõÉ󼯼ÇÕÊ</title>
+
+      <para>ÓÉÓÚÉ󼯼ÇÕÊÎļþ»á±äµÃºÜ´ó£¬ ͨ³£»áÏ£ÍûÔÚÉ󼯷þÎñ¹Ø±ÕËüʱ£¬
+	¶ÔÆä½øÐÐѹËõ»ò¹éµµ¡£ <filename>audit_warn</filename> ½Å±¾¿ÉÒÔÓÃÀ´ÔÚһϵÁÐÓëÉó¼ÆÓйصÄʼþ·¢Éúʱ£¬
+	Ö´ÐÐһЩÓû§¶¨ÒåµÄ²Ù×÷£¬ ÕâÒ²°üÀ¨ÔÚÉ󼯼ÇÕÊ·­×ªÊ±½øÐÐÇåÀí²Ù×÷¡£ ¾ÙÀý¶øÑÔ£¬ ¿ÉÒÔÔÚ
+	<filename>audit_warn</filename> ½Å±¾ÖмÓÈëÏÂÁÐÄÚÈÝÀ´ÔÚÉ󼯼ÇÕʹرÕʱѹËõËü£º</para>
+
+      <programlisting>#
+# Compress audit trail files on close.
+#
+if [ "$1" = closefile ]; then
+        gzip -9 $2
+fi</programlisting>
 
-      <para>ĬÈÏÇé¿öÏ£¬ Ö»ÓÐ root Óû§ÓµÓжÁȡϵͳÉó¼ÆÈÕÖ¾µÄȨÏÞ¡£
-	µ«ÄúÒ²¿ÉÒÔ½«ÕâÖÖȨÏÞͨ¹ý
-	<literal>audit</literal> ×éµÄ³ÉÔ±Éí·ÝÀ´Ö¸¶¨¸øÆäËüÓû§£¬
-	ÒòΪÉó¼ÆÄ¿Â¼ºÍ¼ÇÕËÎļþ¶¼ÊÇÊôÓÚÕâ¸ö×éµÄ£¬ ¶øÇÒÊÇͬ×é¿É¶ÁµÄ¡£
-	ÓÉÓÚÔĶÁÉó¼ÆÈÕÖ¾µÄÄÚÈÝ»áÌṩ¹ØÓÚÓû§ºÍ½ø³ÌµÄ´óÁ¿ÐÐΪÐÅÏ¢£¬
-	Ç¿ÁÒ½¨ÒéÔÚÖ¸ÅÉÕâһȨÏÞʱ½÷É÷ÐÐÊ¡£</para>
+      <para>ÆäËü´æµµ²Ù×÷Ò²°üÀ¨½«É󼯼ÇÕʸ´ÖƵ½Ò»¸öÖÐÑëµÄ·þÎñÆ÷£¬ ɾ³ý¾ÉµÄ¼ÇÕÊÎļþ£¬
+	»òŨËõÉ󼯼ÇÕʲ¢É¾³ý²»ÐèÒªµÄ¼Ç¼µÈ¡£ Õâ¸ö½Å±¾»áÔÚÉ󼯼ÇÕÊÎļþÕý³£¹Ø±ÕʱִÐÐÒ»´Î£¬
+	Òò´ËÔÚ·ÇÕý³£¹Ø±Õϵͳʱ£¬ ¾Í²»»áÖ´ÐÐËüÁË¡£</para>
     </sect2>
   </sect1>
 </chapter>

==== //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/eresources/chapter.sgml#4 (text+ko) ====

@@ -2,8 +2,8 @@
      The FreeBSD Documentation Project
      The FreeBSD Simplified Chinese Project
 
-     Original Revision: 1.177
-     $FreeBSD: doc/zh_CN.GB2312/books/handbook/eresources/chapter.sgml,v 1.5 2006/07/08 13:01:34 delphij Exp $
+     Original Revision: 1.178
+     $FreeBSD: doc/zh_CN.GB2312/books/handbook/eresources/chapter.sgml,v 1.6 2006/10/08 16:13:05 delphij Exp $
 -->
 
 <appendix id="eresources">
@@ -1372,6 +1372,11 @@
 	  <para><ulink
 	    url="news:it.comp.os.freebsd">it.comp.os.freebsd</ulink> (Òâ´óÀûÓï)</para>
 	</listitem>
+
+	<listitem>
+	  <para><ulink
+	    url="news:tw.bbs.comp.386bsd">tw.bbs.comp.386bsd</ulink> (·±ÌåÖÐÎÄ)</para>
+	</listitem>
       </itemizedlist>
     </sect2>
 

==== //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/firewalls/chapter.sgml#7 (text+ko) ====

@@ -3,7 +3,7 @@
      The FreeBSD Simplified Chinese Project
 
      Original Revision: 1.72
-     $FreeBSD: doc/zh_CN.GB2312/books/handbook/firewalls/chapter.sgml,v 1.7 2006/08/26 13:45:54 delphij Exp $
+     $FreeBSD: doc/zh_CN.GB2312/books/handbook/firewalls/chapter.sgml,v 1.9 2006/10/08 16:16:16 delphij Exp $
 -->
 
 <chapter id="firewalls">
@@ -347,7 +347,7 @@
       <para>Packet Filter »á´Ó
 	&man.pf.conf.5; ÎļþÖжÁÈ¡ÅäÖùæÔò£¬ ²¢¸ù¾ÝÄÇÀïµÄ¹æÔòÐ޸ġ¢
 	¶ªÆú»òÈÃÊý¾Ý°üͨ¹ý¡£ ĬÈϰ²×°µÄ &os;
-	ÒѾ­ÌṩÁËÒ»¸ñĬÈϵġ¢ °üº¬Ò»Ð©ÓÐÓÃÀý×ÓºÍ×¢Ê͵Ä
+	ÒѾ­ÌṩÁËÒ»¸öĬÈϵġ¢ °üº¬Ò»Ð©ÓÐÓÃÀý×ÓºÍ×¢Ê͵Ä
 	<filename>/etc/pf.conf</filename>¡£</para>
 
       <para>¾¡¹Ü &os; ÌṩÁË×Ô¼ºµÄ <filename>/etc/pf.conf</filename>£¬

==== //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/introduction/chapter.sgml#5 (text+ko) ====

@@ -2,8 +2,8 @@
      The FreeBSD Documentation Project
      The FreeBSD Simplified Chinese Project
 
-     Original Revision: 1.114
-     $FreeBSD: doc/zh_CN.GB2312/books/handbook/introduction/chapter.sgml,v 1.7 2006/07/08 13:01:34 delphij Exp $
+     Original Revision: 1.116
+     $FreeBSD: doc/zh_CN.GB2312/books/handbook/introduction/chapter.sgml,v 1.8 2006/10/08 16:20:40 delphij Exp $
 -->
 
 <chapter id="introduction">
@@ -557,15 +557,15 @@
       ÕâÊǽ«½üÈýÄêµÄ¿ª·¢µÄáÛ·åÖ®×÷£¬ ͬʱҲ±êÖ¾ÁË FreeBSD
       ÔÚÏȽøµÄ¶à´¦ÀíÆ÷ºÍÓ¦ÓóÌÐòÏß³ÌÖ§³ÖµÄ¾Þ´ó³É¾Í£¬ ²¢ÒýÈëÁ˶ÔÓÚ
       &ultrasparc; ºÍ <literal>ia64</literal> ƽ̨µÄÖ§³Ö¡£
-      Ö®ºóÓÚ 2003 Äê 6 Ô·¢²¼ÁË 5.1¡£ ×îºóÒ»¸ö
+      Ö®ºóÓÚ 2003 Äê 6 Ô·¢²¼ÁË 5.1¡£ ×îºóÒ»¸ö´Ó
       -CURRENT ·ÖÖ§µÄ  5.X °æ±¾ÊÇ 5.2.1-RELEASE£¬ ËüÔÚ
       2004 Äê 2 ÔÂÕýʽ·¢²¼¡£</para>
 
-      <para>RELENG_5 ÓÚ 2004 Äê 8 ÔÂÕýʽ´´½¨£¬ ÆäºóÊÇ 5.3-RELEASE£¬
+      <para>RELENG_5 ÓÚ 2004 Äê 8 ÔÂÕýʽ´´½¨£¬ ½ôËæÆäºóµÄÊÇ 5.3-RELEASE£¬
 	ËüÊÇ 5-STABLE ·ÖÖ§µÄ±êÖ¾ÐÔ·¢Ðа档 ×îÐ嵀  &rel2.current;-RELEASE
-	ÊÇÔÚ &rel2.current.date; ·¢²¼µÄ£¬ RELENG_5 ·ÖÖ§»¹½«ÓкóÐøµÄ·¢Ðа档</para>
+	ÊÇÔÚ &rel2.current.date; ·¢²¼µÄ¡£ RELENG_5 ·ÖÖ§²»»áÓкóÐøµÄ·¢ÐаæÁË¡£</para>
 
-      <para>ÆäºóÔÚ 2005 Äê 7 Ô½¨Á¢ÁË RELENG_6 ·ÖÖ§¡£ 6.X ·ÖÖ§ÉϵĵÚÒ»¸ö°æ±¾£¬
+      <para>ÆäºóÔÚ 2005 Äê 7 ÔÂÓÖ½¨Á¢ÁË RELENG_6 ·ÖÖ§¡£ ¶ø 6.X ·ÖÖ§ÉϵĵÚÒ»¸ö°æ±¾£¬
 	¼´ 6.0-RELEASE£¬ ÔòÊÇÔÚ 2005 Äê 11 Ô·¢²¼µÄ¡£
 	×îÐ嵀 &rel.current;-RELEASE ·¢²¼ÓÚ &rel.current.date;¡£
 	ÎÒÃÇ»¹½«¼ÌÐø´Ó RELENG_6 ·¢²¼Ðµİ汾¡£</para>

==== //depot/projects/dtrace/doc/zh_CN.GB2312/books/handbook/mac/chapter.sgml#7 (text+ko) ====

@@ -3,7 +3,7 @@
      The FreeBSD Simplified Chinese Project
 
      Original Revision: 1.68
-     $FreeBSD: doc/zh_CN.GB2312/books/handbook/mac/chapter.sgml,v 1.7 2006/08/14 02:26:10 delphij Exp $
+     $FreeBSD: doc/zh_CN.GB2312/books/handbook/mac/chapter.sgml,v 1.8 2006/10/08 16:22:59 delphij Exp $
 -->
 
 <chapter id="mac">
@@ -17,31 +17,31 @@
     </authorgroup>
   </chapterinfo>
 
-  <title>¼¯È¨Ê½·ÃÎÊ¿ØÖÆ</title>
+  <title>Ç¿ÖÆ·ÃÎÊ¿ØÖÆ</title>
 
   <sect1 id="mac-synopsis">
     <title>¸ÅÒª</title>
 
     <indexterm><primary>MAC</primary></indexterm>
     <indexterm>
-      <primary>¼¯È¨Ê½·ÃÎÊ¿ØÖÆ</primary>
+      <primary>Ç¿ÖÆ·ÃÎÊ¿ØÖÆ</primary>
       <see>MAC</see>
     </indexterm>
 
     <para>&os;&nbsp;5.X ÔÚ &posix;.1e ²Ý°¸µÄ»ù´¡ÉÏÒýÈëÁË TrustedBSD
       ÏîÄ¿ÌṩµÄÐµİ²È«ÐÔÀ©Õ¹¡£ а²È«»úÖÆÖÐ×îÖØÒªµÄÁ½¸ö£¬

>>> TRUNCATED FOR MAIL (1000 lines) <<<


More information about the p4-projects mailing list