os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Very minor correctness cleanup.

Browse source
This commit is contained in:
Tom Rhodes 2006-03-31 10:09:27 +00:00
parent d889e662c0
commit d3a4549785
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=27441
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
en_US.ISO8859-1/books/handbook/mac/chapter.sgml
View file

@ -1248,7 +1248,7 @@ test: biba/high</screen>
:passwordtime=91d:\ :passwordtime=91d:\
:umask=022:\ :umask=022:\
:ignoretime@:\ :ignoretime@:\
:label=partition/13,mls/5,biba/low:</programlisting> :label=partition/13,mls/5,biba/10:</programlisting>
<para>The &man.cap.mkdb.1; command needs to be ran on <para>The &man.cap.mkdb.1; command needs to be ran on
&man.login.conf.5; before any of the &man.login.conf.5; before any of the
@ -1634,7 +1634,9 @@ test: biba/low</screen>
<para>Observations: a lower integrity subject is unable to write <para>Observations: a lower integrity subject is unable to write
to a higher integrity subject; a higher integrity subject cannot to a higher integrity subject; a higher integrity subject cannot
observe or read a lower integrity object.</para> observe or read a lower integrity object. Setting a label at the
lowest possible grade could make it inaccessible to
subjects.</para>
</sect1> </sect1>
<sect1 id="mac-lomac"> <sect1 id="mac-lomac">
@ -2050,7 +2052,7 @@ cat: test4: Permission denied</screen>
<para>will accomplish this task in a few moments.</para> <para>will accomplish this task in a few moments.</para>
<para>Now create another class, web, a copy of default, <para>Now create another class, web, a copy of default,
with the label setting of <literal>biba/low</literal>.</para> with the label setting of <literal>biba/10</literal>.</para>
<para>Create a user who will be used to work with the <para>Create a user who will be used to work with the
main web data stored in a <application>cvs</application> main web data stored in a <application>cvs</application>
@ -2099,9 +2101,9 @@ exit;</programlisting>
<programlisting>command="setpmac biba/low /usr/local/sbin/httpd"</programlisting> <programlisting>command="setpmac biba/low /usr/local/sbin/httpd"</programlisting>
<para>The <application>Apache</application> configuration must be <para>The <application>Apache</application> configuration must be
altered to work with the <literal>biba/low</literal> policy. In altered to work with the <literal>biba/10</literal> policy. In
this case the software must be configured to append to the this case the software must be configured to append to the
log files in a directory set at <literal>biba/low</literal> log files in a directory set at <literal>biba/10</literal>
or else <errorname>access denied</errorname> errors will be or else <errorname>access denied</errorname> errors will be
returned.</para> returned.</para>