Clarify experimental software warning -- it's not just considered

experimental, it is experimental.  Expand on what this means (not all
events that should be audited are).

Rename Key Terms section to match similar naming convention in MAC
chapter.

Obtained from:	TrustedBSD Project

1 files changed, 8 insertions, 4 deletions

diff --git a/en_US.ISO8859-1/books/handbook/audit/chapter.sgml b/en_US.ISO8859-1/books/handbook/audit/chapter.sgml
index 301643d9f2..1945dc0931 100644
--- a/en_US.ISO8859-1/books/handbook/audit/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/audit/chapter.sgml
@@ -88,9 +88,13 @@ requirements. -->
     </itemizedlist>
 
     <warning>
-      <para>The audit facility in &os; 6.2 is considered experimental, and
-	production deployment should occur only after careful consideration
-	of the risks of deploying experimental software.</para>
+      <para>The audit facility in &os; 6.2 is experimental, and production
+	deployment should occur only after careful consideration of the
+	risks of deploying experimental software.  Known limitations include
+	that not all security-relevant system events are currently auditable,
+	and that some login mechanisms, such as X11-based display managers
+	and third party daemons, do not properly configure auditing for user
+	login sessions.</para>
     </warning>
 
     <warning>
@@ -108,7 +112,7 @@ requirements. -->
   </sect1>
 
   <sect1 id="audit-inline-glossary">
-    <title>Key Terms - Words to Know</title>
+    <title>Key Terms in this Chapter</title>
 
     <para>Before reading this chapter, a few key audit-related terms must be
       explained:</para>