diff --git a/en_US.ISO8859-1/books/faq/book.sgml b/en_US.ISO8859-1/books/faq/book.sgml
index b17efb704c..2218c579bb 100644
--- a/en_US.ISO8859-1/books/faq/book.sgml
+++ b/en_US.ISO8859-1/books/faq/book.sgml
@@ -17,7 +17,7 @@
The FreeBSD Documentation Project
- $FreeBSD: doc/en_US.ISO8859-1/books/faq/book.sgml,v 1.256 2001/08/19 18:51:53 jim Exp $
+ $FreeBSD: doc/en_US.ISO8859-1/books/faq/book.sgml,v 1.257 2001/08/23 22:06:11 dd Exp $
1995
@@ -2178,52 +2178,37 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
A security profile
is a set of configuration
options that attempts to achieve the desired ratio of security
to convenience by enabling and disabling certain programs and
- other settings. The more severe the security profile, the less
- programs will be enabled by default; this is one of the basic
- principles of security: do not run anything except what you
- must.
+ other settings. The more severe the security profile, the fewer
+ programs will be enabled by
+ default. This is one of the basic principles of security:
+ do not run anything except what you must.
Please note that the security profile is just a default
setting. All programs can be enabled and disabled after you have
installed FreeBSD by editing or adding the appropriate line(s)
- to /etc/rc.conf. For more information on
- the latter, please see the &man.rc.conf.5; manual page.
+ to /etc/rc.conf. For more information,
+ please see the &man.rc.conf.5; manual page.
- Following is a table that describes what each security
- profile does. The columns are the choices you have for a
- security profile, and the rows are the program or feature that
- is enabled or disabled.
+ The following table describes what each of the
+ security profiles do. The columns are the choices you
+ have for a security profile, and the rows are the program
+ or feature that the profile enables or disables.
Possible security profiles
-
+
Extreme
- High
-
Moderate
-
- Low
-
- &man.inetd.8;
-
- NO
-
- NO
-
- YES
-
- YES
-
&man.sendmail.8;
@@ -2231,10 +2216,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
NO
YES
-
- YES
-
- YES
@@ -2243,10 +2224,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
NO
YES
-
- YES
-
- YES
@@ -2254,8 +2231,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
NO
- NO
-
MAYBE
The portmapper is enabled if the machine has been
configured as an NFS client or server earlier in the
@@ -2263,7 +2238,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
- YES
@@ -2271,10 +2245,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
NO
- NO
-
- YES
-
YES
@@ -2291,10 +2261,6 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
- YES (1)
-
- NO
-
NO
@@ -2302,8 +2268,8 @@ Filesystem 1024-blocks Used Avail Capacity Mounted on
- The security profile is not a silver bullet! Setting
- it high does not mean you do not have to keep up with security
+ The security profile is not a silver bullet! Even if you use the
+ extreme setting, you need to keep up with security
issues by reading an appropriate mailing
list, using good passwords and passphrases, and