Index: postlfs/security/cacerts.xml
===================================================================
--- postlfs/security/cacerts.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/cacerts.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -28,8 +28,8 @@
 
   <para>Public Key Infrastructure (PKI) is a method to validate the
-  authenticity of an othewise unknown entity across untrusted networks. PKI
+  authenticity of an otherwise unknown entity across untrusted networks. PKI
   works by establishing a chain of trust, rather than trusting each individual
   host or entity explicitly. In order for a certificate presented by a remote
-  entity to be trusted, that certificate must pesent a complete chain of
+  entity to be trusted, that certificate must present a complete chain of
   certificates that can be validated using the root certificate of a
   Certificate Authority (CA) that is trusted by the local machine.</para>
@@ -117,5 +117,5 @@
     signing. For example, to allow a certificate to be trusted for both
     SSL/TLS and S/Mime, but explicitly rejected for code signing, you could use
-    the following commands to create a new trusted ceritificate that has those
+    the following commands to create a new trusted certificate that has those
     trust attributes:</para>
 
@@ -130,5 +130,5 @@
     without <application>p11-kit</application> support are not aware of trusted
     certificates. To include this CA into the ca-bundle.crt (used for
-    <application>GnuTLS</application>), it must have, at least serverAuth
+    <application>GnuTLS</application>), it must have <envar>serverAuth</envar>
     trust.</para> 
 
Index: postlfs/security/cracklib.xml
===================================================================
--- postlfs/security/cracklib.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/cracklib.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -204,5 +204,5 @@
     <filename>cracklib-extra-words</filename>. This extra file is intended to be
     a site specific list which includes easy to guess passwords such as company
-    or department names, user's names, product names, computer names, domain
+    or department names, user names, product names, computer names, domain
     names, etc.</para>
 
@@ -251,5 +251,5 @@
         <listitem>
           <para>is used to format text files (lowercases all words,
-          removes controle characters and sorts the lists).</para>
+          removes control characters and sorts the lists).</para>
           <indexterm zone="cracklib cracklib-format">
             <primary sortas="b-cracklib-format">cracklib-format</primary>
Index: postlfs/security/gpgme.xml
===================================================================
--- postlfs/security/gpgme.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/gpgme.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -10,5 +10,5 @@
   <!ENTITY gpgme-size          "1.2 MB">
   <!ENTITY gpgme-buildsize     "134 MB (with all bindings, add 1 MB for tests)">
-  <!ENTITY gpgme-time          "1.3 SBU (with all bindingsi, add 1.3 SBU for tests)">
+  <!ENTITY gpgme-time          "1.3 SBU (with all bindings, add 1.3 SBU for tests)">
 ]>
 
Index: postlfs/security/linux-pam.xml
===================================================================
--- postlfs/security/linux-pam.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/linux-pam.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -310,5 +310,5 @@
 EOF</userinput></screen>
 
-    <para>The remaining generic file depends on wheather <xref linkend="cracklib"/>
+    <para>The remaining generic file depends on whether <xref linkend="cracklib"/>
     is installed.  If it is installed, use:</para>
 
Index: postlfs/security/nettle.xml
===================================================================
--- postlfs/security/nettle.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/nettle.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -146,5 +146,5 @@
         <listitem>
           <para>
-            calulates a hash value using a specified algorithm.
+            calculates a hash value using a specified algorithm.
           </para>
           <indexterm zone="nettle nettle-hash">
Index: postlfs/security/nss.xml
===================================================================
--- postlfs/security/nss.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/nss.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -226,5 +226,5 @@
     database (<filename>/usr/lib/libnssckbi.so</filename>), the
     <filename>make-ca.sh</filename> script, incldued on the
-    <xref linkend="cacerts"/> page, will gernerate a system wide NSS DB.</para>
+    <xref linkend="cacerts"/> page, will generate a system wide NSS DB.</para>
 
   </sect2>
Index: postlfs/security/openssh.xml
===================================================================
--- postlfs/security/openssh.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/openssh.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -36,9 +36,9 @@
     <para>
       The <application>OpenSSH</application> package contains
-      <command>ssh</command> clients and the <command>sshd</command> daemon. This
-      is useful for encrypting authentication and subsequent traffic over a
-      network. The <command>ssh</command> and <command>scp</command> commands are
-      secure implementions of <command>telnet</command> and <command>rcp</command>
-      respectively.
+      <command>ssh</command> clients and the <command>sshd</command> daemon.
+      This is useful for encrypting authentication and subsequent traffic over
+      a network. The <command>ssh</command> and <command>scp</command> commands
+      are secure implementations of <command>telnet</command> and
+      <command>rcp</command> respectively.
     </para>
 
@@ -157,5 +157,5 @@
       <command>scp</command> program to
       <filename class="directory">/usr/bin</filename>, making sure that you
-      back up any existing copy first.
+      backup any existing copy first.
     </para>
 
Index: postlfs/security/openssl.xml
===================================================================
--- postlfs/security/openssl.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/openssl.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -35,5 +35,5 @@
       The <application>OpenSSL</application> package contains management tools
       and libraries relating to cryptography.  These are useful for providing
-      cryptography functions to other packages, such as
+      cryptographic functions to other packages, such as
       <application>OpenSSH</application>, email applications and web browsers
       (for accessing HTTPS sites).
Index: postlfs/security/stunnel.xml
===================================================================
--- postlfs/security/stunnel.xml	(revision f136bcecb285c5bba079f8f22158e5860141d2db)
+++ postlfs/security/stunnel.xml	(revision 45db70f251d8db2aac54cf63d60615f25882f2df)
@@ -271,5 +271,5 @@
 
       <para revision="systemd">To start the <command>stunnel</command>
-      daemon at boot, enalbe the previously installed
+      daemon at boot, enable the previously installed
       <application>systemd</application> unit by running the following command
      as the <systemitem class="username">root</systemitem> user:</para>
