diff options
| author | Tom Rhodes <trhodes@FreeBSD.org> | 2006-03-31 10:09:27 +0000 |
|---|---|---|
| committer | Tom Rhodes <trhodes@FreeBSD.org> | 2006-03-31 10:09:27 +0000 |
| commit | d3a4549785ce5d7dac169798775fdbb5cdb18a99 (patch) | |
| tree | 38687d1e75ee425451699fae37f5ccec3360cbd4 /en_US.ISO8859-1/books/handbook/mac | |
| parent | d889e662c0660bc3caac18d1cddab1201ab36b14 (diff) | |
| download | doc-d3a4549785ce5d7dac169798775fdbb5cdb18a99.tar.gz doc-d3a4549785ce5d7dac169798775fdbb5cdb18a99.zip | |
Very minor correctness cleanup.
Notes
Notes:
svn path=/head/; revision=27441
Diffstat (limited to 'en_US.ISO8859-1/books/handbook/mac')
| -rw-r--r-- | en_US.ISO8859-1/books/handbook/mac/chapter.sgml | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/en_US.ISO8859-1/books/handbook/mac/chapter.sgml b/en_US.ISO8859-1/books/handbook/mac/chapter.sgml index 9c89f24109..00c7c54f5f 100644 --- a/en_US.ISO8859-1/books/handbook/mac/chapter.sgml +++ b/en_US.ISO8859-1/books/handbook/mac/chapter.sgml @@ -1248,7 +1248,7 @@ test: biba/high</screen> :passwordtime=91d:\ :umask=022:\ :ignoretime@:\ - :label=partition/13,mls/5,biba/low:</programlisting> + :label=partition/13,mls/5,biba/10:</programlisting> <para>The &man.cap.mkdb.1; command needs to be ran on &man.login.conf.5; before any of the @@ -1634,7 +1634,9 @@ test: biba/low</screen> <para>Observations: a lower integrity subject is unable to write to a higher integrity subject; a higher integrity subject cannot - observe or read a lower integrity object.</para> + observe or read a lower integrity object. Setting a label at the + lowest possible grade could make it inaccessible to + subjects.</para> </sect1> <sect1 id="mac-lomac"> @@ -2050,7 +2052,7 @@ cat: test4: Permission denied</screen> <para>will accomplish this task in a few moments.</para> <para>Now create another class, web, a copy of default, - with the label setting of <literal>biba/low</literal>.</para> + with the label setting of <literal>biba/10</literal>.</para> <para>Create a user who will be used to work with the main web data stored in a <application>cvs</application> @@ -2099,9 +2101,9 @@ exit;</programlisting> <programlisting>command="setpmac biba/low /usr/local/sbin/httpd"</programlisting> <para>The <application>Apache</application> configuration must be - altered to work with the <literal>biba/low</literal> policy. In + altered to work with the <literal>biba/10</literal> policy. In this case the software must be configured to append to the - log files in a directory set at <literal>biba/low</literal> + log files in a directory set at <literal>biba/10</literal> or else <errorname>access denied</errorname> errors will be returned.</para> |