Package: debian-handbook Version: 6.0+20120509 Severity: minor Hi Raphaƫl, I've just finished reading chapter 14, here's my usual list of proposed changes.
Section 14.1. Defining a Security Policy ---------------------------------------- Typo? s/are we are willing/are we willing/ Section 14.2. Firewall or Packet Filtering ------------------------------------------ | when referred to by one of the standard chains. Maybe it's more accurate to say + when referred to by one of the other chains. since, after all, we can jump to a user-defined chain from any other chain (including another user-defined one), not only from a standard chain... Section 14.2.2.2. Rules ----------------------- Typo? s/-s adress/-s address/ s/-d adress/-d address/ Typo? s/to differenciate/to differentiate/ Section 14.2.3. Creating Rules ------------------------------ A very nice non-graphical iptables/ip6tables front-end is ferm. I think it should be at least mentioned as a valid alternative to fwbuilder... Section 14.3.2.1. In Real Time ------------------------------ Please note that lavaps and bubblemon have been removed from Debian: http://packages.qa.debian.org/l/lavaps/news/20110223T225158Z.html http://packages.qa.debian.org/b/bubblemon/news/20111028T092735Z.html On the other hand, bubblefishymon is still in Debian, but its homepage does not predict a bright future for it: "Since 2004-06-01 this package is totally unsupported, and very much dead, because it has been dropped in the only package environment I care about." http://www.jnrowe.ukfsn.org/projects/bfm.html Maybe other visual monitoring tools included in Debian (if any) should be mentioned instead. BTW, another nice graphical system monitor (even though this one does not necessarily show things in a funny way) is conky. Maybe, it could be worth mentioning it. Section 14.3.3.1. Auditing Packages: debsums and its Limits ----------------------------------------------------------- | Note that this example uses the grep-status command from the grep-dctrl | package, which is not installed by default. The grep-dctrl package was renamed to dctrl-tools in 2005: please update this sentence... Section 14.3.4. Detecting Intrusion (IDS/NIDS) ---------------------------------------------- The "Going Further" box title seems to have the wrong font or font size and it also seems to be in small caps, rather than all caps... This holds at least for the PDF version of the handbook. Please fix this typographical glitch. Section 14.4.1. Principles -------------------------- | (Linux Security Modules interface. A closing parenthesis seems to be missing here... | a program inherits its domain for the user who started it but the Typo? s/for the user/from the user/ Maybe a comma could also be added: s/it but/it, but/ Section 14.5.3. Choosing the Software Wisely -------------------------------------------- Typo? s/imply a increased/imply an increased/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org