Context Navigation

-              r5fd03d2
+              r5e18c49c
 <para>Heeding the warning, the rescue disk created here has no
 dependency on the host system's resources, other than basic boot-ability
+dependency on the host system's resources, other than basic bootability
 and hardware soundness.  At a minimum, the most common sorts of failures
 requiring a rescue boot disk should be addressed by the contents of the
 …
 compiled with same compiler used to make the kernel.</para>
 <para>The rescue-image must include support for the file system of your
+<para>The rescue image must include support for the file system of your
 choice (we presume ext2/3 here), ramdisk and initial ramdisk (initrd).
 Disable everything that you can in the kernel configuration. You should

postlfs/config/config.xml

r5fd03d2	r5e18c49c
13	13	these files can be found in the <filename>/etc</filename> hierarchy.
14	14	There are often graphical configuration programs available for different
15		subsystems but most are simply pretty frontends to the process
	15	subsystems but most are simply pretty front ends to the process
16	16	of editing the file. The advantage of text-only configuration is that
17	17	you can edit parameters using your favorite text editor, whether that

postlfs/editors/emacs/emacs-desc.xml

-              r5fd03d2
+              r5e18c49c
 <sect3><title>grep-changelog</title>
 <para><command>grep-changelog</command> prints entries in ChangeLogs matching various
 criteria.</para></sect3>
+<para><command>grep-changelog</command> prints entries in Change Logs matching
+various criteria.</para></sect3>
 <sect3><title>rcs-checkin</title>

postlfs/security/firewalling/busybox.xml

-              r5fd03d2
+              r5e18c49c
 Examples of this can be when you want to admin your box from another host
 on your intranet or use it as a proxy or a name server. Note: Outlining a true
 concept howto protect a server that offers services on the internet
+concept of how to protect a server that offers services on the Internet
 goes far beyond the scope of this document,
 see <xref linkend="postlfs-security-fw-disclaimer"/>.</para>
 …
 <xref linkend="postlfs-security-fw-masqRouter"/> for some more details.</para>
 <para>If the services you'd like to offer do not need to access the internet
+<para>If the services you'd like to offer do not need to access the Internet
 themselves, like internal-only samba- or name-servers, it's quite
 simple and should still be acceptable from a security standpoint.

postlfs/security/firewalling/intro.xml

-              r5fd03d2
+              r5e18c49c
 <sect2 id="postlfs-security-fw-intro" xreflabel="Firewalling Introduction">
 <title>Introduction to Firewalling</title>
+<title>Introduction to Firewall Creation</title>
 <para>The general purpose of a firewall is to protect a network
 …
 may wish to choose which services are accessible by certain machines,
 you may wish to limit which machines or applications are allowed
 to have internet access, or you may simply  not trust some of your
+to have Internet access, or you may simply  not trust some of your
 apps or users.
 In these situations you might  benefit by using a firewall.</para>
 …
 <para>This is a setup or program, for Windows commercially sold by
 companies such as Symantec, of which they claim or pretend that it
 secures a home or desktop-pc with internet access. This topic is
+secures a home or desktop-pc with Internet access. This topic is
 highly relevant for users who do not know the ways their computers
 might be accessed via the internet and how to disable these,
+might be accessed via the Internet and how to disable these,
 especially if they are always online and if they are connected via
 broadband links.</para></sect3>
 <sect3><title><xref linkend="postlfs-security-fw-masqRouter"/></title>
 <para>This is a box placed between the internet and an intranet.
+<para>This is a box placed between the Internet and an intranet.
 To minimize the risk of compromising the firewall itself it
 should generally have only one role, that of protecting the intranet.
 …
 and eventually IP masquerading (rewriting IP-headers
 of the packets it routes from clients with private IP-addresses onto
 the internet so that they seem to come from the firewall
+the Internet so that they seem to come from the firewall
 itself) are commonly considered harmless.</para></sect3>

postlfs/security/firewalling/masqrouter.xml

-              r5fd03d2
+              r5e18c49c
 <para>A true Firewall has two interfaces, one connected to an intranet,
 in this example, <emphasis role="strong">eth0</emphasis>, and one
 connected to the internet, here, <emphasis role="strong">ppp0</emphasis>.
+connected to the Internet, here, <emphasis role="strong">ppp0</emphasis>.
 To provide the maximum security against the box itself being broken into,
 make sure that there are no servers running on it, especially not
 …
 <replaceable>ppp+</replaceable> to the name of the interface which you are
 using.  If you are using the same interface type to connect to both your
 intranet and the internet, you need to use the actual name of the
+intranet and the Internet, you need to use the actual name of the
 interface such as <emphasis role="strong">eth0</emphasis>,
 on both interfaces.</para>

postlfs/security/firewalling/persfw.xml

-              r5fd03d2
+              r5e18c49c
 <para>A Personal Firewall is supposed to let you access the all services
 offered on the internet, but keep your box secure and your data private.</para>
+offered on the Internet, but keep your box secure and your data private.</para>
 <para>Below is a slightly modified version of Rusty Russell's
 …
 <para>His script is quite simple, it drops all traffic coming in into your
 computer that wasn't initiated from your box, but as long as you are simply
 surfing the internet you are unlikely to exceed its limits.</para>
+surfing the Internet you are unlikely to exceed its limits.</para>
 <para>If you frequently encounter certain delays at accessing ftp-servers,

postlfs/security/security.xml

-              r5fd03d2
+              r5e18c49c
 <para>Prevention of breaches, like a trojan, are assisted by applications like
 <application>GnuPG</application>, specifically the ability to confirm signed
 packages, which prevents modification of the tarball after the packager creates
 it.</para>
+packages, which prevents modification of the <acronym>TAR</acronym> ball after
+the packager creates it.</para>
 <para> Finally, we touch on detection with a package that stores "signatures"

Note: See TracChangeset for help on using the changeset viewer.

Context Navigation

Changeset 5e18c49c for postlfs

Legend:

Download in other formats: