svn commit: r43732 - projects/zfsupdate-201307/en_US.ISO8859-1/books/handbook/zfs

Benedict Reuschling bcr at FreeBSD.org
Mon Feb 3 09:09:53 UTC 2014


Author: bcr
Date: Mon Feb  3 09:09:52 2014
New Revision: 43732
URL: http://svnweb.freebsd.org/changeset/doc/43732

Log:
  Change literal tags for the root user to the proper systemitem tags.
  While here, also add application tags to SSH.
  
  Noticed by:	wblock

Modified:
  projects/zfsupdate-201307/en_US.ISO8859-1/books/handbook/zfs/chapter.xml

Modified: projects/zfsupdate-201307/en_US.ISO8859-1/books/handbook/zfs/chapter.xml
==============================================================================
--- projects/zfsupdate-201307/en_US.ISO8859-1/books/handbook/zfs/chapter.xml	Mon Feb  3 03:39:03 2014	(r43731)
+++ projects/zfsupdate-201307/en_US.ISO8859-1/books/handbook/zfs/chapter.xml	Mon Feb  3 09:09:52 2014	(r43732)
@@ -955,9 +955,9 @@ History for 'tank':
 2013-02-27.18:51:09 zfs set checksum=fletcher4 tank [user 0 (root) on myzfsbox:global]
 2013-02-27.18:51:18 zfs create tank/backup [user 0 (root) on myzfsbox:global]</screen>
 
-      <para>This output clearly shows that the <literal>root</literal>
-	user created the mirrored pool (consisting of
-	<filename>/dev/ada0</filename> and
+      <para>This output clearly shows that the <systemitem
+	  class="username">root</systemitem> user created the mirrored
+	pool (consisting of <filename>/dev/ada0</filename> and
 	<filename>/dev/ada1</filename>).  In addition to that, the
 	hostname (<literal>myzfsbox</literal>) is also shown in the
 	commands following the pool's creation.  The hostname display
@@ -1444,21 +1444,22 @@ mypool                 50.0M   878M  44.
 	  </listitem>
 
 	  <listitem>
-	    <para>The <literal>root</literal> user needs to be able to
-	      log into the receiving system because only that user can
-	      send streams from the pool.  SSH should be configured so
-	      that <literal>root</literal> can only execute
-	      <command>zfs recv</command> and nothing else to prevent
-	      users that might have hijacked this account from doing
-	      any harm on the system.</para>
+	    <para>The <systemitem class="username">root</systemitem>
+	      user needs to be able to log into the receiving system
+	      because only that user can send streams from the pool.
+	      <application>SSH</application> should be configured so
+	      that <systemitem class="username">root</systemitem> can
+	      only execute <command>zfs recv</command> and nothing
+	      else to prevent users that might have hijacked this
+	      account from doing any harm on the system.</para>
 	  </listitem>
 	</itemizedlist>
 
 	<para>After these security measures have been put into place
-	  and <literal>root</literal> can connect via passwordless
-	  <application>SSH</application> to the receiving system, the
-	  encrypted stream can be sent using the following
-	  commands:</para>
+	  and <systemitem class="username">root</systemitem> can
+	  connect via passwordless <application>SSH</application> to
+	  the receiving system, the encrypted stream can be sent using
+	  the following commands:</para>
 
 	<screen>&prompt.root; <userinput>zfs snapshot -r <replaceable>mypool/home</replaceable>@<replaceable>monday</replaceable></userinput>
 &prompt.root; <userinput>zfs send -R <replaceable>mypool/home</replaceable>@<replaceable>monday</replaceable> | ssh <replaceable>backuphost</replaceable> zfs recv -dvu <replaceable>backuppool</replaceable></userinput></screen>


More information about the svn-doc-projects mailing list