Package: debian-handbook
Version: 6.0+20120509
Severity: minor

Hi Raphaƫl,
I've just finished reading chapter 14, here's my usual list of
proposed changes.



Section 14.1. Defining a Security Policy
----------------------------------------

Typo?   s/are we are willing/are we willing/


Section 14.2. Firewall or Packet Filtering
------------------------------------------

| when referred to by one of the standard chains.

Maybe it's more accurate to say

+ when referred to by one of the other chains.

since, after all, we can jump to a user-defined chain from
any other chain (including another user-defined one), not
only from a standard chain...


Section 14.2.2.2. Rules
-----------------------

Typo?   s/-s adress/-s address/
        s/-d adress/-d address/


Typo?   s/to differenciate/to differentiate/


Section 14.2.3. Creating Rules
------------------------------

A very nice non-graphical iptables/ip6tables front-end is ferm.
I think it should be at least mentioned as a valid alternative
to fwbuilder...


Section 14.3.2.1. In Real Time
------------------------------

Please note that lavaps and bubblemon have been removed from Debian:
http://packages.qa.debian.org/l/lavaps/news/20110223T225158Z.html
http://packages.qa.debian.org/b/bubblemon/news/20111028T092735Z.html

On the other hand, bubblefishymon is still in Debian, but its homepage
does not predict a bright future for it:
"Since 2004-06-01 this package is totally unsupported, and very much
dead, because it has been dropped in the only package environment I
care about."
http://www.jnrowe.ukfsn.org/projects/bfm.html

Maybe other visual monitoring tools included in Debian (if any) should
be mentioned instead.


BTW, another nice graphical system monitor (even though this one
does not necessarily show things in a funny way) is conky.
Maybe, it could be worth mentioning it.


Section 14.3.3.1. Auditing Packages: debsums and its Limits
-----------------------------------------------------------

| Note that this example uses the grep-status command from the grep-dctrl
| package, which is not installed by default.

The grep-dctrl package was renamed to dctrl-tools in 2005: please
update this sentence...


Section 14.3.4. Detecting Intrusion (IDS/NIDS)
----------------------------------------------

The "Going Further" box title seems to have the wrong font or font size
and it also seems to be in small caps, rather than all caps...
This holds at least for the PDF version of the handbook.
Please fix this typographical glitch.


Section 14.4.1. Principles
--------------------------

| (Linux Security Modules interface.

A closing parenthesis seems to be missing here...


| a program inherits its domain for the user who started it but the

Typo?   s/for the user/from the user/
Maybe a comma could also be added:   s/it but/it, but/


Section 14.5.3. Choosing the Software Wisely
--------------------------------------------

Typo?   s/imply a increased/imply an increased/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to