diff --git a/en_US.ISO8859-1/books/arch-handbook/mac/chapter.sgml b/en_US.ISO8859-1/books/arch-handbook/mac/chapter.sgml index 4dc8023ea8..bfeeae352b 100644 --- a/en_US.ISO8859-1/books/arch-handbook/mac/chapter.sgml +++ b/en_US.ISO8859-1/books/arch-handbook/mac/chapter.sgml @@ -224,9 +224,9 @@ Framework Management Interfaces The TrustedBSD MAC Framework may be directly managed using - sysctls, loader tunables, and system calls. + sysctl's, loader tunables, and system calls. - In most cases, sysctls and loader tunables of the same name + In most cases, sysctl's and loader tunables of the same name modify the same parameters, and control behavior such as enforcement of protections relating to various kernel subsystems. In addition, @@ -314,7 +314,7 @@ Policy Synchronization and Concurrency Policy modules must be written to assume that many - kernel threads may simultaneously enter one more more + kernel threads may simultaneously enter one more policy entry points due to the parallel and preemptive nature of the FreeBSD kernel. If the policy module makes use of mutable state, this may require the use of @@ -468,7 +468,7 @@ security labels on vnodes--currently this support is present only in the UFS2 file system. Policy authors may choose to implement multilabel file system object labels using one - (or more) extended attributes. For effiency reasons, the + (or more) extended attributes. For efficiency reasons, the vnode label (v_label) is a cache of any on-disk label; policies are able to load values into the cache when the vnode is instantiated, and update the cache @@ -529,7 +529,7 @@ - mac_set_fd() may be used to request a + mac_set_fd() may be used to request a change in the label of an object (file, socket, pipe, ...) referenced by a file descriptor. @@ -577,7 +577,7 @@ mac_get_peer(), actually implemented via a socket option, retrieves the label of a remote peer on a - socket, if availabl. + socket, if available. @@ -5322,7 +5322,7 @@ Label destruction o EPERM for lack of privilege, or ESRCH to hide visibility. This call may be made in a number of situations, including - inter-process status sysctls used by ps, + inter-process status sysctl's used by ps, and in procfs lookups.