diff --git a/en_US.ISO8859-1/books/faq/book.sgml b/en_US.ISO8859-1/books/faq/book.sgml index b17efb704c..2218c579bb 100644 --- a/en_US.ISO8859-1/books/faq/book.sgml +++ b/en_US.ISO8859-1/books/faq/book.sgml @@ -17,7 +17,7 @@ The FreeBSD Documentation Project - $FreeBSD: doc/en_US.ISO8859-1/books/faq/book.sgml,v 1.256 2001/08/19 18:51:53 jim Exp $ + $FreeBSD: doc/en_US.ISO8859-1/books/faq/book.sgml,v 1.257 2001/08/23 22:06:11 dd Exp $ 1995 @@ -2178,52 +2178,37 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on A security profile is a set of configuration options that attempts to achieve the desired ratio of security to convenience by enabling and disabling certain programs and - other settings. The more severe the security profile, the less - programs will be enabled by default; this is one of the basic - principles of security: do not run anything except what you - must. + other settings. The more severe the security profile, the fewer + programs will be enabled by + default. This is one of the basic principles of security: + do not run anything except what you must. Please note that the security profile is just a default setting. All programs can be enabled and disabled after you have installed FreeBSD by editing or adding the appropriate line(s) - to /etc/rc.conf. For more information on - the latter, please see the &man.rc.conf.5; manual page. + to /etc/rc.conf. For more information, + please see the &man.rc.conf.5; manual page. - Following is a table that describes what each security - profile does. The columns are the choices you have for a - security profile, and the rows are the program or feature that - is enabled or disabled. + The following table describes what each of the + security profiles do. The columns are the choices you + have for a security profile, and the rows are the program + or feature that the profile enables or disables. Possible security profiles - + Extreme - High - Moderate - - Low - - &man.inetd.8; - - NO - - NO - - YES - - YES - &man.sendmail.8; @@ -2231,10 +2216,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on NO YES - - YES - - YES @@ -2243,10 +2224,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on NO YES - - YES - - YES @@ -2254,8 +2231,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on NO - NO - MAYBE The portmapper is enabled if the machine has been configured as an NFS client or server earlier in the @@ -2263,7 +2238,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on - YES @@ -2271,10 +2245,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on NO - NO - - YES - YES @@ -2291,10 +2261,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on - YES (1) - - NO - NO @@ -2302,8 +2268,8 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
- The security profile is not a silver bullet! Setting - it high does not mean you do not have to keep up with security + The security profile is not a silver bullet! Even if you use the + extreme setting, you need to keep up with security issues by reading an appropriate mailing list, using good passwords and passphrases, and