Changeset 3df86b66 for postlfs/security


Ignore:
Timestamp:
09/30/2003 07:21:06 PM (21 years ago)
Author:
Larry Lawrence <larry@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, v5_0, v5_0-pre1, v5_1, v5_1-pre1, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
2df36e4
Parents:
b028890
Message:

incorporate option and parameter tags

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@1249 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:
postlfs/security
Files:
7 edited

Legend:

Unmodified
Added
Removed
  • postlfs/security/firewalling/masqrouter.xml

    rb028890 r3df86b66  
    33
    44<para>A true Firewall has two interfaces, one connected to an intranet,
    5 in this example, eth0, and one connected to the internet, here, ppp0.
     5in this example, <emphasis role="strong">eth0</emphasis>, and one
     6connected to the internet, here, <emphasis role="strong">ppp0</emphasis>.
    67To provide the maximum security against the box itself being broken into,
    7 make sure that there are no servers running on it, especially not X11 et
     8make sure that there are no servers running on it, especially not
     9<application>X11</application> et
    810al.  And, as a general principle, the box itself should not access any untrusted
    911service (Think of a name server giving answers that make your
     
    8890<para>Note: if the interface you're connecting to the Internet
    8991doesn't connect via ppp, you will need to change
    90 <userinput>ppp+</userinput> to the name of the interface which you are
     92<replaceable>ppp+</replaceable> to the name of the interface which you are
    9193using.  If you are using the same interface type to connect to both your
    9294intranet and the internet, you need to use the actual name of the
    93 interface such as <emphasis>eth<userinput>0</userinput></emphasis>,
     95interface such as <emphasis role="strong">eth0</emphasis>,
    9496on both interfaces.</para>
    9597
  • postlfs/security/gnupg/gnupg-exp.xml

    rb028890 r3df86b66  
    22<title>Command explanations</title>
    33
    4 <para><command>--libexecdir=/usr/sbin</command> : This command
     4<para><option>--libexecdir=/usr/sbin</option>: This command
    55creates a <filename>gnupg</filename> directory in <filename>/usr/sbin</filename> instead of
    66<filename>/usr/libexec</filename>.</para>
  • postlfs/security/iptables/iptables-exp.xml

    rb028890 r3df86b66  
    22<title>Command explanations</title>
    33
    4 <para><command>PREFIX=/usr</command> : Compiles and installs
     4<para><parameter>PREFIX=/usr</parameter>: Compiles and installs
    55<application>iptables</application> into the
    66<filename class="directory">/usr</filename> hierarchy instead of
  • postlfs/security/pam/linux_pam-exp.xml

    rb028890 r3df86b66  
    22<title>Command explanations</title>
    33
    4 <para><command>--enable-static-libpam</command> : This switch builds
     4<para><option>--enable-static-libpam</option>: This switch builds
    55static <acronym>PAM</acronym> libraries as well as the dynamic libraries.</para>
    66
    7 <para><command>--with-mailspool=/var/mail</command> : This switch makes
     7<para><option>--with-mailspool=/var/mail</option>: This switch makes
    88the mailspool directory <acronym>FHS</acronym> compliant.</para>
    99
    10 <para><command>--enable-read-both-confs</command>  : This switch lets the local administrator choose which configuration file setup to use.</para>
     10<para><option>--enable-read-both-confs</option>: This switch lets the local administrator choose which configuration file setup to use.</para>
    1111
    1212<para><command>mv /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a
    13 /usr/lib</command> : This command moves the static libraries to
     13/usr/lib</command>: This command moves the static libraries to
    1414<filename>/usr/lib</filename> to comply with <acronym>FHS</acronym>.</para>
    1515
  • postlfs/security/shadow/shadow-exp.xml

    rb028890 r3df86b66  
    22<title>Command explanations</title>
    33
    4 <para><command>cp debian/securetty /etc/securetty</command> : This
     4<para><command>cp debian/securetty /etc/securetty</command>: This
    55command sets the tty's that allow logins through <acronym>PAM</acronym>.</para>
    66
  • postlfs/security/tripwire/tripwire-config.xml

    rb028890 r3df86b66  
    3838tripwire -m i</command></userinput></screen>
    3939
    40 <para>During configuration tripwire will create 2 keys: a site key and
     40<para>During configuration tripwire will create two (2) keys: a site key and
    4141 a local key which will be stored in <filename class="directory">/etc/tripwire/
    4242</filename>.</para>
  • postlfs/security/tripwire/tripwire-exp.xml

    rb028890 r3df86b66  
    22<title>Command explanations</title>
    33
    4 <para><command>ln -s make /usr/bin/gmake</command> : The reason we create the
     4<para><command>ln -s make /usr/bin/gmake</command>: The reason we create the
    55<command>gmake</command> symlink is that <application>Tripwire</application>
    66will only install if the symlink is present. It may be safely removed after
    77installation.</para>
    88
    9 <para><command>gmake release</command> : This command creates the
     9<para><command>gmake release</command>: This command creates the
    1010<application>Tripwire</application> binaries.</para>
    1111
    12 <para><command>cp install.{sh,cfg} .</command> : These are copied to the main
     12<para><command>cp install.{sh,cfg} .</command>: These are copied to the main
    1313<application>Tripwire</application> directory so that the script can be used to
    1414install the package.</para>
    1515
    16 <para><command>cp policy/*.txt /usr/share/doc/tripwire</command> : This command
     16<para><command>cp policy/*.txt /usr/share/doc/tripwire</command>: This command
    1717installs the documentation.</para>
    1818
Note: See TracChangeset for help on using the changeset viewer.