Merge the following from the English version.

handbook/security/chapter.sgml  1.117 -> 1.122

	Add fs-acl section, not tranlated and commented out.
	This section is already translated in "basics",
	and will be moved into this file later (in rev. 1.150)

ja_JP.eucJP/books/handbook/security/chapter.sgml

@@ -2,7 +2,7 @@
      The FreeBSD Documentation Project
      The FreeBSD Japanese Documentation Project
 
-     Original revision: 1.117
+     Original revision: 1.122
      Waiting for:	1.123 or mac/chapter.sgml
 			("mac" referenced from disks).
      Translation note: "fs-acl" section added in rev.1.118 is moved to
@@ -80,6 +80,11 @@
 	<para>FreeBSD で使われている SSH 実装である
 	  OpenSSH の設定および使用方法</para>
       </listitem>
+
+      <listitem>
+	<para>拡張されたファイルシステムアクセス制御リスト
+	  (ACL) の UFS での設定および使用方法</para>
+      </listitem>
     </itemizedlist>
 
     <para>この章を読む前に、次のことが必要になります。</para>
@@ -3795,6 +3800,70 @@ user@unfirewalled.myserver.com's password: <userinput>*******</userinput></scree
       <para>&man.sshd.8; &man.sftp-server.8;</para>
     </sect2>
   </sect1>
+
+<!-- XXX 2006/05/01 hiroo: Do not translate this section.
+     See the translation note in the header for the reason.
+  <sect1 id="fs-acl">
+    <sect1info>
+      <authorgroup>
+	<author>
+	  <firstname>Tom</firstname>
+	  <surname>Rhodes</surname>
+	  <contrib>Contributed by </contrib>
+	</author>
+      </authorgroup>
+    </sect1info>
+    <indexterm>
+      <primary>ACL</primary>
+    </indexterm>
+    <title>File System Access Control Lists</title>
+
+    <para>In conjunction with file system enhancements like snapshots, FreeBSD 5.0
+      and later offers the security of File System Access Control Lists
+      (<acronym>ACLs</acronym>).</para>
+
+    <para>Access Control Lists extend the standard UNIX
+      permission model in a highly compatible (POSIX.1e) way.  This feature
+      permits an administrator to make use of and take advantage of a
+      more sophisticated security model.</para>
+
+    <para>For <acronym>ACLs</acronym> to work:</para>
+
+    <programlisting>options UFS_ACL</programlisting>
+
+    <para>must be compiled into the kernel.  If this option has
+      not been compiled in, a warning message will be displayed
+      when attempting to mount a file system sporting <acronym>ACLs</acronym>.
+      <acronym>ACLs</acronym> rely on extended attributes being enabled on
+      the file system.  This is supported natively in the next generation of
+      the <acronym>UNIX</acronym> file system or <acronym>UFS2</acronym>.</para>
+
+    <note><para>The use of extended attributes on <acronym>UFS1</acronym> file
+      systems will lead to higher administration overhead and lower overall
+      file system performance.  <acronym>UFS2</acronym> does not have this
+      problem.</para></note>
+
+    <para>To enable <acronym>ACLs</acronym> on a file system, the <option>-a</option>
+      option can be passed to &man.tunefs.8; in a manner similar to the Soft Updates
+      process:</para>
+
+    <screen>&prompt.root; <userinput>umount /usr</userinput>
+&prompt.root; <userinput>tunefs -a enable /dev/<replaceable>diskNsNx</replaceable></userinput>
+&prompt.root; <userinput>mount /dev/<replaceable>diskNsNx</replaceable> /usr</userinput></screen>
+
+    <para>This assumes that <devicename>/dev/<replaceable>diskNsNx</replaceable></devicename> is the
+      <filename>/usr</filename> partition.</para>
+
+    <para><acronym>ACLs</acronym> can also be enabled by passing the
+      <option>-o acls</option> argument to &man.mount.8;:</para>
+
+    <screen>&prompt.root; <userinput>mount -o acls /dev/<replaceable>diskNsNx</replaceable> /usr</userinput></screen>
+
+    <para>This flag can also be set  in <filename>/etc/fstab</filename>.
+      It is recommended to use the former over the latter to avoid remount
+      issues with the root file system.</para>
+  </sect1>
+-->
 </chapter>
 
 <!--