From 0080fe2bd1c3e826c962f9db8ad6b361215cdb3b Mon Sep 17 00:00:00 2001 From: Eric Christensen Date: Jun 05 2009 01:40:28 +0000 Subject: Latest translations --- diff --git a/pot/Appendix.pot b/pot/Appendix.pot index aa6ce38..ae37b1a 100644 --- a/pot/Appendix.pot +++ b/pot/Appendix.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Article.pot b/pot/Article.pot index 22e6c8e..e60fa25 100644 --- a/pot/Article.pot +++ b/pot/Article.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Author_Group.pot b/pot/Author_Group.pot index 9624a2a..0d01943 100644 --- a/pot/Author_Group.pot +++ b/pot/Author_Group.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -18,7 +18,39 @@ msgstr "" #: Author_Group.xml:6 #, no-c-format msgid "" -"Dude McDude " -"My Org Best Div in the place dude.mcdude@myorg.org" +"Johnray Fuller " +"Red Hat jrfuller@redhat.com" +msgstr "" + +#. Tag: author +#: Author_Group.xml:14 +#, no-c-format +msgid "" +"John Ha Red " +"Hat jha@redhat.com" +msgstr "" + +#. Tag: author +#: Author_Group.xml:22 +#, no-c-format +msgid "" +"David O'Brien " +"Red Hat daobrien@redhat.com" +msgstr "" + +#. Tag: author +#: Author_Group.xml:30 +#, no-c-format +msgid "" +"Scott Radvan " +"Red Hat sradvan@redhat.com" +msgstr "" + +#. Tag: author +#: Author_Group.xml:38 +#, no-c-format +msgid "" +"Eric Christensen " +"Fedora Project Documentation Team sparks@fedoraproject.org" msgstr "" diff --git a/pot/Book_Info.pot b/pot/Book_Info.pot index 0cee7d3..803c769 100644 --- a/pot/Book_Info.pot +++ b/pot/Book_Info.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -17,13 +17,13 @@ msgstr "" #. Tag: title #: Book_Info.xml:6 #, no-c-format -msgid "Linux Security Guide" +msgid "security-guide" msgstr "" #. Tag: subtitle #: Book_Info.xml:7 #, no-c-format -msgid "A Guide to Securing Linux" +msgid "A Guide to Securing Fedora Linux" msgstr "" #. Tag: para diff --git a/pot/DiskEncryptionUserGuide.pot b/pot/DiskEncryptionUserGuide.pot index b10a055..d39aa20 100644 --- a/pot/DiskEncryptionUserGuide.pot +++ b/pot/DiskEncryptionUserGuide.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Encryption.pot b/pot/Encryption.pot index 64f7652..7e99116 100644 --- a/pot/Encryption.pot +++ b/pot/Encryption.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -71,11 +71,11 @@ msgstr "" #: Encryption.xml:21 #, no-c-format msgid "" -"Fedora 9 natively supports LUKS Encryption. LUKS will bulk encrypt your hard " -"drive partitions so that while your computer is off your data is protected. " -"This will also protect your computer from attackers attempting to use single-" -"user-mode to login to your computer or otherwise gain access. LUKS can be " -"manually setup on Fedora 8." +"Fedora 9, and later, natively supports LUKS Encryption. LUKS will bulk " +"encrypt your hard drive partitions so that while your computer is off your " +"data is protected. This will also protect your computer from attackers " +"attempting to use single-user-mode to login to your computer or otherwise " +"gain access." msgstr "" #. Tag: para @@ -181,10 +181,34 @@ msgstr "" #: Encryption.xml:54 #, no-c-format msgid "" +"Secure Shell (SSH) is a powerful network protocol used to communicate with " +"another system over a secure channel. The transmissions over SSH are " +"encrypted and protected from interception. Cryptographic log-on can also be " +"utilized to provide a better authentication method over traditional " +"usernames and passwords." +msgstr "" + +#. Tag: para +#: Encryption.xml:56 +#, no-c-format +msgid "" +"SSH is very easy to activate. By simply starting the sshd service, the " +"system will begin to accept connections and will allow access to the system " +"when a correct username and password is provided during the connection " +"process. The standard TCP port for the SSH service is 22, however this can " +"be changed by modifying the configuration file /etc/ssh/" +"sshd_config and restarting the service. This file also contains " +"other configuration options for SSH." +msgstr "" + +#. Tag: para +#: Encryption.xml:59 +#, no-c-format +msgid "" "Secure Shell (SSH) also provides encrypted tunnels between computers but " "only using a single port. Port forwarding can be done over an SSH tunnel and traffic will be encrypted as it passes over that tunnel but using " -"port forwarding isn't as fluid as a VPN." +"port forwarding is not as fluid as a VPN." msgstr "" diff --git a/pot/Exploits.pot b/pot/Exploits.pot index fc487f9..1870624 100644 --- a/pot/Exploits.pot +++ b/pot/Exploits.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,20 +20,8 @@ msgstr "" msgid "Common Exploits and Attacks" msgstr "" -#. Tag: primary -#: Exploits.xml:8 Exploits.xml:12 -#, no-c-format -msgid "common exploits and attacks" -msgstr "" - -#. Tag: secondary -#: Exploits.xml:9 -#, no-c-format -msgid "table" -msgstr "" - #. Tag: para -#: Exploits.xml:14 +#: Exploits.xml:7 #, no-c-format msgid "" "details some of the most common exploits and entry points used by intruders " @@ -43,47 +31,47 @@ msgid "" msgstr "" #. Tag: title -#: Exploits.xml:18 +#: Exploits.xml:11 #, no-c-format msgid "Common Exploits" msgstr "" #. Tag: entry -#: Exploits.xml:25 +#: Exploits.xml:18 #, no-c-format msgid "Exploit" msgstr "" #. Tag: entry -#: Exploits.xml:28 +#: Exploits.xml:21 #, no-c-format msgid "Description" msgstr "" #. Tag: entry -#: Exploits.xml:31 +#: Exploits.xml:24 #, no-c-format msgid "Notes" msgstr "" #. Tag: entry -#: Exploits.xml:38 +#: Exploits.xml:31 #, no-c-format msgid "Null or Default Passwords" msgstr "" #. Tag: entry -#: Exploits.xml:41 +#: Exploits.xml:34 #, no-c-format msgid "" "Leaving administrative passwords blank or using a default password set by " "the product vendor. This is most common in hardware such as routers and " "firewalls, though some services that run on Linux can contain default " -"administrator passwords (though Fedora 5 does not ship with them)." +"administrator passwords (though Fedora 11 does not ship with them)." msgstr "" #. Tag: member -#: Exploits.xml:46 +#: Exploits.xml:39 #, no-c-format msgid "" "Commonly associated with networking hardware such as routers, firewalls, " @@ -91,30 +79,30 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:47 +#: Exploits.xml:40 #, no-c-format msgid "" -"Common in many legacy operating systems, especially OSes that bundle " +"Common in many legacy operating systems, especially those that bundle " "services (such as UNIX and Windows.)" msgstr "" #. Tag: member -#: Exploits.xml:48 +#: Exploits.xml:41 #, no-c-format msgid "" "Administrators sometimes create privileged user accounts in a rush and leave " -"the password null, a perfect entry point for malicious users who discover " -"the account." +"the password null, creating a perfect entry point for malicious users who " +"discover the account." msgstr "" #. Tag: entry -#: Exploits.xml:53 +#: Exploits.xml:46 #, no-c-format msgid "Default Shared Keys" msgstr "" #. Tag: entry -#: Exploits.xml:56 +#: Exploits.xml:49 #, no-c-format msgid "" "Secure services sometimes package default security keys for development or " @@ -125,7 +113,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:61 +#: Exploits.xml:54 #, no-c-format msgid "" "Most common in wireless access points and preconfigured secure server " @@ -133,13 +121,13 @@ msgid "" msgstr "" #. Tag: entry -#: Exploits.xml:66 +#: Exploits.xml:59 #, no-c-format msgid "IP Spoofing" msgstr "" #. Tag: entry -#: Exploits.xml:69 +#: Exploits.xml:62 #, no-c-format msgid "" "A remote machine acts as a node on your local network, finds vulnerabilities " @@ -148,16 +136,16 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:74 +#: Exploits.xml:67 #, no-c-format msgid "" "Spoofing is quite difficult as it involves the attacker predicting TCP/IP " -"SYN-ACK numbers to coordinate a connection to target systems, but several " +"sequence numbers to coordinate a connection to target systems, but several " "tools are available to assist crackers in performing such a vulnerability." msgstr "" #. Tag: member -#: Exploits.xml:75 +#: Exploits.xml:68 #, no-c-format msgid "" "Depends on target system running services (such as rsh, " @@ -168,13 +156,13 @@ msgid "" msgstr "" #. Tag: entry -#: Exploits.xml:80 +#: Exploits.xml:73 #, no-c-format msgid "Eavesdropping" msgstr "" #. Tag: entry -#: Exploits.xml:83 +#: Exploits.xml:76 #, no-c-format msgid "" "Collecting data that passes between two active nodes on a network by " @@ -182,7 +170,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:88 +#: Exploits.xml:81 #, no-c-format msgid "" "This type of attack works mostly with plain text transmission protocols such " @@ -190,7 +178,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:89 +#: Exploits.xml:82 #, no-c-format msgid "" "Remote attacker must have access to a compromised system on a LAN in order " @@ -199,7 +187,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:90 +#: Exploits.xml:83 #, no-c-format msgid "" "Preventative measures include services with cryptographic key exchange, one-" @@ -208,13 +196,13 @@ msgid "" msgstr "" #. Tag: entry -#: Exploits.xml:95 +#: Exploits.xml:88 #, no-c-format msgid "Service Vulnerabilities" msgstr "" #. Tag: entry -#: Exploits.xml:98 +#: Exploits.xml:91 #, no-c-format msgid "" "An attacker finds a flaw or loophole in a service run over the Internet; " @@ -224,7 +212,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:103 +#: Exploits.xml:96 #, no-c-format msgid "" "HTTP-based services such as CGI are vulnerable to remote command execution " @@ -236,7 +224,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:104 +#: Exploits.xml:97 #, no-c-format msgid "" "Services sometimes can have vulnerabilities that go unnoticed during " @@ -248,7 +236,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:105 +#: Exploits.xml:98 #, no-c-format msgid "" "Administrators should make sure that services do not run as the root user, " @@ -257,13 +245,13 @@ msgid "" msgstr "" #. Tag: entry -#: Exploits.xml:110 +#: Exploits.xml:103 #, no-c-format msgid "Application Vulnerabilities" msgstr "" #. Tag: entry -#: Exploits.xml:113 +#: Exploits.xml:106 #, no-c-format msgid "" "Attackers find faults in desktop and workstation applications (such as e-" @@ -274,7 +262,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:118 +#: Exploits.xml:111 #, no-c-format msgid "" "Workstations and desktops are more prone to exploitation as workers do not " @@ -284,7 +272,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:119 +#: Exploits.xml:112 #, no-c-format msgid "" "Safeguards can be implemented such that email client software does not " @@ -294,13 +282,13 @@ msgid "" msgstr "" #. Tag: entry -#: Exploits.xml:124 +#: Exploits.xml:117 #, no-c-format msgid "Denial of Service (DoS) Attacks" msgstr "" #. Tag: entry -#: Exploits.xml:127 +#: Exploits.xml:120 #, no-c-format msgid "" "Attacker or group of attackers coordinate against an organization's " @@ -310,7 +298,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:132 +#: Exploits.xml:125 #, no-c-format msgid "" "The most reported DoS case in the US occurred in 2000. Several highly-" @@ -321,7 +309,7 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:133 +#: Exploits.xml:126 #, no-c-format msgid "" "Source packets are usually forged (as well as rebroadcasted), making " @@ -329,10 +317,11 @@ msgid "" msgstr "" #. Tag: member -#: Exploits.xml:134 +#: Exploits.xml:127 #, no-c-format msgid "" "Advances in ingress filtering (IETF rfc2267) using iptables and Network IDSes such as snort assist " -"administrators in tracking down and preventing distributed DoS attacks." +"command> and Network Intrusion Detection Systems such as snort assist administrators in tracking down and preventing distributed " +"DoS attacks." msgstr "" diff --git a/pot/Feedback.pot b/pot/Feedback.pot index 3049fe1..e284b89 100644 --- a/pot/Feedback.pot +++ b/pot/Feedback.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,20 +20,8 @@ msgstr "" msgid "We Need Feedback!" msgstr "" -#. Tag: primary -#: Feedback.xml:8 -#, no-c-format -msgid "feedback" -msgstr "" - -#. Tag: secondary -#: Feedback.xml:9 -#, no-c-format -msgid "contact information for this manual" -msgstr "" - #. Tag: para -#: Feedback.xml:11 +#: Feedback.xml:7 #, no-c-format msgid "" "More information about the Linux Security Guide project can be found at " @@ -42,21 +30,13 @@ msgid "" msgstr "" #. Tag: para -#: Feedback.xml:13 +#: Feedback.xml:9 #, no-c-format msgid "" "To provide feedback for the Security Guide, please file a bug in https://bugzilla.redhat.com/." -msgstr "" - -#. Tag: para -#: Feedback.xml:18 -#, no-c-format -msgid "Product = Fedora Hosted Projects" -msgstr "" - -#. Tag: para -#: Feedback.xml:21 -#, no-c-format -msgid "Component = Security_Guide" +"\"https://bugzilla.redhat.com/enter_bug.cgi?component=security-guide&" +"product=Fedora%20Documentation\">https://bugzilla.redhat.com/enter_bug.cgi?" +"component=security-guide&product=Fedora%20Documentation. Please " +"select the proper component in the dropdown menu which should be the page " +"name." msgstr "" diff --git a/pot/Firewall.pot b/pot/Firewall.pot index 35f51ba..bc1589d 100644 --- a/pot/Firewall.pot +++ b/pot/Firewall.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -17,18 +17,11 @@ msgstr "" #. Tag: title #: Firewall.xml:6 #, no-c-format -msgid "Firewalls" -msgstr "" - -#. Tag: primary -#: Firewall.xml:8 Firewall.xml:20 Firewall.xml:425 Firewall.xml:718 -#: Firewall.xml:765 Firewall.xml:769 Firewall.xml:847 -#, no-c-format -msgid "firewalls" +msgid "Firewalls" msgstr "" #. Tag: para -#: Firewall.xml:10 +#: Firewall.xml:7 #, no-c-format msgid "" "Information security is commonly thought of as a process and not a product. " @@ -40,7 +33,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:13 +#: Firewall.xml:10 #, no-c-format msgid "" "Firewalls are one of the core components of a network security " @@ -54,7 +47,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:16 +#: Firewall.xml:13 #, no-c-format msgid "" "Apart from the differences between hardware and software firewalls, there " @@ -64,74 +57,44 @@ msgid "" "function:" msgstr "" -#. Tag: secondary -#: Firewall.xml:21 -#, no-c-format -msgid "types" -msgstr "" - -#. Tag: primary -#: Firewall.xml:24 Firewall.xml:27 Firewall.xml:31 Firewall.xml:35 -#, no-c-format -msgid "firewall types" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:28 -#, no-c-format -msgid "network address translation (NAT)" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:32 -#, no-c-format -msgid "proxy" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:36 -#, no-c-format -msgid "packet filter" -msgstr "" - #. Tag: title -#: Firewall.xml:39 +#: Firewall.xml:17 #, no-c-format msgid "Firewall Types" msgstr "" #. Tag: entry -#: Firewall.xml:47 +#: Firewall.xml:25 #, no-c-format msgid "Method" msgstr "" #. Tag: entry -#: Firewall.xml:50 +#: Firewall.xml:28 #, no-c-format msgid "Description" msgstr "" #. Tag: entry -#: Firewall.xml:53 +#: Firewall.xml:31 #, no-c-format msgid "Advantages" msgstr "" #. Tag: entry -#: Firewall.xml:56 +#: Firewall.xml:34 #, no-c-format msgid "Disadvantages" msgstr "" #. Tag: entry -#: Firewall.xml:63 +#: Firewall.xml:41 #, no-c-format msgid "NAT" msgstr "" #. Tag: entry -#: Firewall.xml:66 +#: Firewall.xml:44 #, no-c-format msgid "" "Network Address Translation (NAT) places private IP " @@ -141,13 +104,13 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:71 +#: Firewall.xml:49 #, no-c-format msgid "· Can be configured transparently to machines on a LAN" msgstr "" #. Tag: member -#: Firewall.xml:72 +#: Firewall.xml:50 #, no-c-format msgid "" "· Protection of many machines and services behind one or more " @@ -155,7 +118,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:73 +#: Firewall.xml:51 #, no-c-format msgid "" "· Restriction of user access to and from the LAN can be configured by " @@ -163,7 +126,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:78 +#: Firewall.xml:56 #, no-c-format msgid "" "· Cannot prevent malicious activity once users connect to a service " @@ -171,13 +134,13 @@ msgid "" msgstr "" #. Tag: entry -#: Firewall.xml:83 +#: Firewall.xml:61 #, no-c-format msgid "Packet Filter" msgstr "" #. Tag: entry -#: Firewall.xml:86 +#: Firewall.xml:64 #, no-c-format msgid "" "A packet filtering firewall reads each data packet that passes through a " @@ -188,7 +151,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:91 +#: Firewall.xml:69 #, no-c-format msgid "" "· Customizable through the iptables front-end " @@ -196,7 +159,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:92 +#: Firewall.xml:70 #, no-c-format msgid "" "· Does not require any customization on the client side, as all " @@ -205,7 +168,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:93 +#: Firewall.xml:71 #, no-c-format msgid "" "· Since packets are not transmitted through a proxy, network " @@ -213,13 +176,13 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:98 +#: Firewall.xml:76 #, no-c-format msgid "· Cannot filter packets for content like proxy firewalls" msgstr "" #. Tag: member -#: Firewall.xml:99 +#: Firewall.xml:77 #, no-c-format msgid "" "· Processes packets at the protocol layer, but cannot filter packets " @@ -227,7 +190,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:100 +#: Firewall.xml:78 #, no-c-format msgid "" "· Complex network architectures can make establishing packet " @@ -236,13 +199,13 @@ msgid "" msgstr "" #. Tag: entry -#: Firewall.xml:105 +#: Firewall.xml:83 #, no-c-format msgid "Proxy" msgstr "" #. Tag: entry -#: Firewall.xml:108 +#: Firewall.xml:86 #, no-c-format msgid "" "Proxy firewalls filter all requests of a certain protocol or type from LAN " @@ -252,7 +215,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:113 +#: Firewall.xml:91 #, no-c-format msgid "" "· Gives administrators control over what applications and protocols " @@ -260,7 +223,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:114 +#: Firewall.xml:92 #, no-c-format msgid "" "· Some proxy servers can cache frequently-accessed data locally " @@ -269,7 +232,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:115 +#: Firewall.xml:93 #, no-c-format msgid "" "· Proxy services can be logged and monitored closely, allowing " @@ -277,7 +240,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:120 +#: Firewall.xml:98 #, no-c-format msgid "" "· Proxies are often application-specific (HTTP, Telnet, etc.), or " @@ -285,7 +248,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:121 +#: Firewall.xml:99 #, no-c-format msgid "" "· Application services cannot run behind a proxy, so your application " @@ -293,7 +256,7 @@ msgid "" msgstr "" #. Tag: member -#: Firewall.xml:122 +#: Firewall.xml:100 #, no-c-format msgid "" "· Proxies can become a network bottleneck, as all requests and " @@ -302,37 +265,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:130 +#: Firewall.xml:108 #, no-c-format msgid "Netfilter and IPTables" msgstr "" -#. Tag: command -#: Firewall.xml:132 Firewall.xml:139 Firewall.xml:357 Firewall.xml:378 -#: Firewall.xml:405 Firewall.xml:429 Firewall.xml:457 Firewall.xml:461 -#: Firewall.xml:466 Firewall.xml:484 Firewall.xml:489 Firewall.xml:494 -#: Firewall.xml:563 Firewall.xml:568 Firewall.xml:619 Firewall.xml:624 -#: Firewall.xml:649 Firewall.xml:678 Firewall.xml:689 Firewall.xml:694 -#: Firewall.xml:722 Firewall.xml:773 Firewall.xml:777 Firewall.xml:784 -#: Firewall.xml:789 Firewall.xml:855 -#, no-c-format -msgid "iptables" -msgstr "" - -#. Tag: primary -#: Firewall.xml:135 Firewall.xml:851 -#, no-c-format -msgid "Netfilter" -msgstr "" - -#. Tag: primary -#: Firewall.xml:138 -#, no-c-format -msgid "Firewalls" -msgstr "" - #. Tag: para -#: Firewall.xml:141 +#: Firewall.xml:109 #, no-c-format msgid "" "The Linux kernel features a powerful networking subsystem called " @@ -344,13 +283,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:145 +#: Firewall.xml:113 #, no-c-format msgid "IPTables Overview" msgstr "" #. Tag: para -#: Firewall.xml:146 +#: Firewall.xml:114 #, no-c-format msgid "" "The power and flexibility of Netfilter is implemented using the " @@ -359,7 +298,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:149 +#: Firewall.xml:117 #, no-c-format msgid "" "A similar syntax does not mean similar implementation, however. " @@ -369,7 +308,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:152 +#: Firewall.xml:120 #, no-c-format msgid "" "By contrast, iptables uses the Netfilter subsystem to " @@ -379,7 +318,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:155 +#: Firewall.xml:123 #, no-c-format msgid "" "This section provides an overview of iptables. For more " @@ -388,27 +327,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:163 +#: Firewall.xml:131 #, no-c-format msgid "Basic Firewall Configuration" msgstr "" -#. Tag: primary -#: Firewall.xml:165 -#, no-c-format -msgid "firewall configuration" -msgstr "" - -#. Tag: application -#: Firewall.xml:166 Firewall.xml:175 Firewall.xml:178 Firewall.xml:182 -#: Firewall.xml:195 Firewall.xml:218 Firewall.xml:250 Firewall.xml:322 -#: Firewall.xml:336 Firewall.xml:353 -#, no-c-format -msgid "&RHSECLEVELTOOL;" -msgstr "" - #. Tag: para -#: Firewall.xml:168 +#: Firewall.xml:132 #, no-c-format msgid "" "Just as a firewall in a building attempts to prevent a fire from spreading, " @@ -418,7 +343,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:171 +#: Firewall.xml:135 #, no-c-format msgid "" "In a default &PROD; installation, a firewall exists between your computer or " @@ -429,20 +354,14 @@ msgid "" "Internet connection." msgstr "" -#. Tag: primary -#: Firewall.xml:177 -#, no-c-format -msgid "security level" -msgstr "" - -#. Tag: command -#: Firewall.xml:181 +#. Tag: application +#: Firewall.xml:139 Firewall.xml:151 #, no-c-format -msgid "system-config-securitylevel" +msgid "&RHSECLEVELTOOL;" msgstr "" #. Tag: para -#: Firewall.xml:184 +#: Firewall.xml:140 #, no-c-format msgid "" "During the Firewall Configuration screen of the &PROD; " @@ -451,7 +370,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:187 +#: Firewall.xml:143 #, no-c-format msgid "" "After installation, you can change this preference by using the " @@ -459,32 +378,32 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:190 +#: Firewall.xml:146 #, no-c-format msgid "To start this application, use the following command:" msgstr "" #. Tag: screen -#: Firewall.xml:193 +#: Firewall.xml:149 #, no-c-format -msgid "[root@myServer ~] # system-config-securitylevel" +msgid "[root@myServer ~] # system-config-firewall" msgstr "" #. Tag: para -#: Firewall.xml:201 +#: Firewall.xml:157 #, no-c-format msgid "Security Level Configuration" msgstr "" #. Tag: title -#: Firewall.xml:208 Firewall.xml:386 Firewall.xml:595 Firewall.xml:664 -#: Firewall.xml:749 +#: Firewall.xml:164 Firewall.xml:315 Firewall.xml:462 Firewall.xml:516 +#: Firewall.xml:572 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Firewall.xml:209 +#: Firewall.xml:165 #, no-c-format msgid "" "The &RHSECLEVELTOOL; only configures a basic " @@ -494,25 +413,19 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:216 +#: Firewall.xml:172 #, no-c-format msgid "Enabling and Disabling the Firewall" msgstr "" -#. Tag: secondary -#: Firewall.xml:219 -#, no-c-format -msgid "enabling and disabling" -msgstr "" - #. Tag: para -#: Firewall.xml:221 +#: Firewall.xml:173 #, no-c-format msgid "Select one of the following options for the firewall:" msgstr "" #. Tag: para -#: Firewall.xml:226 +#: Firewall.xml:178 #, no-c-format msgid "" "Disabled — Disabling the firewall provides " @@ -522,13 +435,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:230 +#: Firewall.xml:182 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Firewall.xml:231 +#: Firewall.xml:183 #, no-c-format msgid "" "Firewall configurations and any customized firewall rules are stored in the " @@ -538,7 +451,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:237 +#: Firewall.xml:189 #, no-c-format msgid "" "Enabled — This option configures the system to " @@ -549,7 +462,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:240 +#: Firewall.xml:192 #, no-c-format msgid "" "If you are connecting your system to the Internet, but do not plan to run a " @@ -557,19 +470,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:248 +#: Firewall.xml:200 #, no-c-format msgid "Trusted Services" msgstr "" -#. Tag: secondary -#: Firewall.xml:251 -#, no-c-format -msgid "trusted services" -msgstr "" - #. Tag: para -#: Firewall.xml:253 +#: Firewall.xml:201 #, no-c-format msgid "" "Enabling options in the Trusted services list allows " @@ -577,13 +484,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:258 +#: Firewall.xml:206 #, no-c-format msgid "WWW (HTTP)" msgstr "" #. Tag: para -#: Firewall.xml:260 +#: Firewall.xml:208 #, no-c-format msgid "" "The HTTP protocol is used by Apache (and by other Web servers) to serve web " @@ -594,7 +501,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:263 +#: Firewall.xml:211 #, no-c-format msgid "" "Enabling WWW (HTTP) will not open a port for HTTPS, the " @@ -603,13 +510,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:269 +#: Firewall.xml:217 #, no-c-format msgid "FTP" msgstr "" #. Tag: para -#: Firewall.xml:271 +#: Firewall.xml:219 #, no-c-format msgid "" "The FTP protocol is used to transfer files between machines on a network. If " @@ -619,13 +526,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:277 +#: Firewall.xml:225 #, no-c-format msgid "SSH" msgstr "" #. Tag: para -#: Firewall.xml:279 +#: Firewall.xml:227 #, no-c-format msgid "" "Secure Shell (SSH) is a suite of tools for logging into and executing " @@ -635,13 +542,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:285 +#: Firewall.xml:233 #, no-c-format msgid "Telnet" msgstr "" #. Tag: para -#: Firewall.xml:287 +#: Firewall.xml:235 #, no-c-format msgid "" "Telnet is a protocol for logging into remote machines. Telnet communications " @@ -652,13 +559,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:293 +#: Firewall.xml:241 #, no-c-format msgid "Mail (SMTP)" msgstr "" #. Tag: para -#: Firewall.xml:295 +#: Firewall.xml:243 #, no-c-format msgid "" "SMTP is a protocol that allows remote hosts to connect directly to your " @@ -670,13 +577,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:301 +#: Firewall.xml:249 #, no-c-format msgid "NFS4" msgstr "" #. Tag: para -#: Firewall.xml:303 +#: Firewall.xml:251 #, no-c-format msgid "" "The Network File System (NFS) is a file sharing protocol commonly used on " @@ -686,13 +593,13 @@ msgid "" msgstr "" #. Tag: guilabel -#: Firewall.xml:309 +#: Firewall.xml:257 #, no-c-format msgid "Samba" msgstr "" #. Tag: para -#: Firewall.xml:311 +#: Firewall.xml:259 #, no-c-format msgid "" "Samba is an implementation of Microsoft's proprietary SMB networking " @@ -701,19 +608,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:320 +#: Firewall.xml:268 #, no-c-format msgid "Other Ports" msgstr "" -#. Tag: secondary -#: Firewall.xml:323 -#, no-c-format -msgid "setting custom ports" -msgstr "" - #. Tag: para -#: Firewall.xml:325 +#: Firewall.xml:269 #, no-c-format msgid "" "The &RHSECLEVELTOOL; includes an Other " @@ -724,25 +625,19 @@ msgid "" msgstr "" #. Tag: computeroutput -#: Firewall.xml:329 +#: Firewall.xml:273 #, no-c-format msgid "194:tcp,631:tcp" msgstr "" #. Tag: title -#: Firewall.xml:334 +#: Firewall.xml:278 #, no-c-format msgid "Saving the Settings" msgstr "" -#. Tag: secondary -#: Firewall.xml:337 -#, no-c-format -msgid "saving" -msgstr "" - #. Tag: para -#: Firewall.xml:339 +#: Firewall.xml:279 #, no-c-format msgid "" "Click OK to save the changes and enable or disable " @@ -757,7 +652,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:342 +#: Firewall.xml:282 #, no-c-format msgid "" "The selected options are also written to the /etc/sysconfig/system-" @@ -766,7 +661,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:345 +#: Firewall.xml:285 #, no-c-format msgid "" "Even though the firewall is activated immediately, the iptablesiptables service" -msgstr "" - #. Tag: para -#: Firewall.xml:359 +#: Firewall.xml:292 #, no-c-format msgid "" "The firewall rules are only active if the iptables " @@ -796,13 +685,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:362 +#: Firewall.xml:295 #, no-c-format msgid "[root@myServer ~] # service iptables restart" msgstr "" #. Tag: para -#: Firewall.xml:363 +#: Firewall.xml:296 #, no-c-format msgid "" "To ensure that iptables starts when the system is booted, " @@ -810,13 +699,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:366 Firewall.xml:394 +#: Firewall.xml:299 Firewall.xml:323 #, no-c-format msgid "[root@myServer ~] # chkconfig --level 345 iptables on" msgstr "" #. Tag: para -#: Firewall.xml:367 +#: Firewall.xml:300 #, no-c-format msgid "" "The ipchains service is not included in &PROD;. However, " @@ -829,7 +718,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:370 +#: Firewall.xml:303 #, no-c-format msgid "" "[root@myServer ~] # service ipchains stop\n" @@ -837,19 +726,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:376 +#: Firewall.xml:309 #, no-c-format msgid "Using IPTables" msgstr "" -#. Tag: secondary -#: Firewall.xml:379 -#, no-c-format -msgid "using" -msgstr "" - #. Tag: para -#: Firewall.xml:381 +#: Firewall.xml:310 #, no-c-format msgid "" "The first step in using iptables is to start the " @@ -858,13 +741,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:384 +#: Firewall.xml:313 #, no-c-format msgid "[root@myServer ~] # service iptables start" msgstr "" #. Tag: para -#: Firewall.xml:387 +#: Firewall.xml:316 #, no-c-format msgid "" "The ip6tables service can be turned off if you intend to " @@ -875,7 +758,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:391 +#: Firewall.xml:320 #, no-c-format msgid "" "To force iptables to start by default when the system is " @@ -883,7 +766,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:395 +#: Firewall.xml:324 #, no-c-format msgid "" "This forces iptables to start whenever the system is " @@ -891,13 +774,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:399 +#: Firewall.xml:328 #, no-c-format msgid "IPTables Command Syntax" msgstr "" #. Tag: para -#: Firewall.xml:400 +#: Firewall.xml:329 #, no-c-format msgid "" "The following sample iptables command illustrates the " @@ -905,22 +788,15 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:403 +#: Firewall.xml:332 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A <chain> -j " "<target>" msgstr "" -#. Tag: secondary -#: Firewall.xml:406 Firewall.xml:490 Firewall.xml:495 Firewall.xml:569 -#: Firewall.xml:625 Firewall.xml:650 Firewall.xml:695 -#, no-c-format -msgid "chains" -msgstr "" - #. Tag: para -#: Firewall.xml:408 +#: Firewall.xml:333 #, no-c-format msgid "" "The option specifies that the rule be appended to " @@ -930,7 +806,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:411 +#: Firewall.xml:336 #, no-c-format msgid "" "The three built-in chains are INPUT, OUTPUT, and FORWARD. These chains are " @@ -939,7 +815,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:414 +#: Firewall.xml:339 #, no-c-format msgid "" "The option " @@ -948,7 +824,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:417 +#: Firewall.xml:342 #, no-c-format msgid "" "Refer to the iptables man page for more information on " @@ -956,19 +832,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:423 +#: Firewall.xml:348 #, no-c-format msgid "Basic Firewall Policies" msgstr "" -#. Tag: secondary -#: Firewall.xml:426 Firewall.xml:430 -#, no-c-format -msgid "policies" -msgstr "" - #. Tag: para -#: Firewall.xml:432 +#: Firewall.xml:349 #, no-c-format msgid "" "Establishing basic firewall policies creates a foundation for building more " @@ -976,7 +846,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:435 +#: Firewall.xml:352 #, no-c-format msgid "" "Each iptables chain is comprised of a default policy, and " @@ -985,7 +855,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:438 +#: Firewall.xml:355 #, no-c-format msgid "" "The default policy for a chain can be either DROP or ACCEPT. Security-minded " @@ -995,7 +865,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:441 +#: Firewall.xml:358 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -P INPUT DROP\n" @@ -1003,7 +873,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:442 +#: Firewall.xml:359 #, no-c-format msgid "" "It is also recommended that any forwarded packets " @@ -1014,13 +884,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:445 +#: Firewall.xml:362 #, no-c-format msgid "[root@myServer ~ ] # iptables -P FORWARD DROP" msgstr "" #. Tag: para -#: Firewall.xml:446 +#: Firewall.xml:363 #, no-c-format msgid "" "When you have established the default policies for each chain, you can " @@ -1029,7 +899,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:449 +#: Firewall.xml:366 #, no-c-format msgid "" "The following sections describe how to save iptables rules and outline some " @@ -1038,32 +908,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:455 +#: Firewall.xml:372 #, no-c-format msgid "Saving and Restoring IPTables Rules" msgstr "" -#. Tag: secondary -#: Firewall.xml:458 Firewall.xml:462 Firewall.xml:467 Firewall.xml:485 -#: Firewall.xml:564 Firewall.xml:620 Firewall.xml:690 -#, no-c-format -msgid "rules" -msgstr "" - -#. Tag: tertiary -#: Firewall.xml:463 -#, no-c-format -msgid "saving" -msgstr "" - -#. Tag: tertiary -#: Firewall.xml:468 -#, no-c-format -msgid "restoring" -msgstr "" - #. Tag: para -#: Firewall.xml:470 +#: Firewall.xml:373 #, no-c-format msgid "" "Changes to iptables are transitory; if the system is " @@ -1074,13 +925,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:473 +#: Firewall.xml:376 #, no-c-format msgid "[root@myServer ~ ] # service iptables save" msgstr "" #. Tag: para -#: Firewall.xml:474 +#: Firewall.xml:377 #, no-c-format msgid "" "The rules are stored in the file /etc/sysconfig/iptableson the firewalliptables ruleset, order is important." msgstr "" #. Tag: para -#: Firewall.xml:520 +#: Firewall.xml:408 #, no-c-format msgid "" "If a rule specifies that any packets from the 192.168.100.0/24 subnet be " @@ -1194,7 +1027,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:523 +#: Firewall.xml:411 #, no-c-format msgid "" "The rule to allow packets from 192.168.100.13 must precede the rule that " @@ -1202,7 +1035,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:526 +#: Firewall.xml:414 #, no-c-format msgid "" "To insert a rule in a specific location in an existing chain, use the " @@ -1210,13 +1043,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:529 +#: Firewall.xml:417 #, no-c-format msgid "[root@myServer ~ ] # iptables -I INPUT 1 -i lo -p all -j ACCEPT" msgstr "" #. Tag: para -#: Firewall.xml:530 +#: Firewall.xml:418 #, no-c-format msgid "" "This rule is inserted as the first rule in the INPUT chain to allow local " @@ -1224,7 +1057,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:534 +#: Firewall.xml:422 #, no-c-format msgid "" "There may be times when you require remote access to the LAN. Secure " @@ -1233,7 +1066,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:537 +#: Firewall.xml:425 #, no-c-format msgid "" "Administrators with PPP-based resources (such as modem banks or bulk ISP " @@ -1243,7 +1076,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:540 +#: Firewall.xml:428 #, no-c-format msgid "" "For remote users with broadband connections, however, special cases can be " @@ -1253,7 +1086,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:543 +#: Firewall.xml:431 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A INPUT -p tcp --dport 22 -j ACCEPT\n" @@ -1261,7 +1094,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:544 +#: Firewall.xml:432 #, no-c-format msgid "" "These rules allow incoming and outbound access for an individual system, " @@ -1273,50 +1106,14 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:550 +#: Firewall.xml:438 #, no-c-format msgid "" "FORWARD and NAT Rules" msgstr "" -#. Tag: primary -#: Firewall.xml:552 -#, no-c-format -msgid "NAT" -msgstr "" - -#. Tag: see -#: Firewall.xml:553 -#, no-c-format -msgid "Network Address Translation" -msgstr "" - -#. Tag: primary -#: Firewall.xml:556 Firewall.xml:559 -#, no-c-format -msgid "Network Address Translation" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:560 -#, no-c-format -msgid "with iptables" -msgstr "" - -#. Tag: tertiary -#: Firewall.xml:565 -#, no-c-format -msgid "forwarding" -msgstr "" - -#. Tag: tertiary -#: Firewall.xml:570 -#, no-c-format -msgid "FORWARD" -msgstr "" - #. Tag: para -#: Firewall.xml:572 +#: Firewall.xml:439 #, no-c-format msgid "" "Most ISPs provide only a limited number of publicly routable IP addresses to " @@ -1324,7 +1121,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:575 +#: Firewall.xml:442 #, no-c-format msgid "" "Administrators must, therefore, find alternative ways to share access to " @@ -1334,7 +1131,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:578 +#: Firewall.xml:445 #, no-c-format msgid "" "Edge routers (such as firewalls) can receive incoming transmissions from the " @@ -1344,7 +1141,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:581 +#: Firewall.xml:448 #, no-c-format msgid "" "This forwarding of network traffic can become dangerous at times, especially " @@ -1354,7 +1151,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:584 +#: Firewall.xml:451 #, no-c-format msgid "" "To prevent this, iptables provides routing and forwarding " @@ -1363,7 +1160,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:587 +#: Firewall.xml:454 #, no-c-format msgid "" "The FORWARD chain allows an administrator " @@ -1373,7 +1170,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:590 +#: Firewall.xml:457 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A FORWARD -i eth1 -j ACCEPT\n" @@ -1381,7 +1178,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:591 +#: Firewall.xml:458 #, no-c-format msgid "" "This rule gives systems behind the firewall/gateway access to the internal " @@ -1391,7 +1188,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:596 +#: Firewall.xml:463 #, no-c-format msgid "" "By default, the IPv4 policy in &PROD; kernels disables support for IP " @@ -1400,13 +1197,13 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:599 +#: Firewall.xml:466 #, no-c-format msgid "[root@myServer ~ ] # sysctl -w net.ipv4.ip_forward=1" msgstr "" #. Tag: para -#: Firewall.xml:600 +#: Firewall.xml:467 #, no-c-format msgid "" "This configuration change is only valid for the current session; it does not " @@ -1415,31 +1212,31 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:603 +#: Firewall.xml:470 #, no-c-format msgid "Locate the following line:" msgstr "" #. Tag: screen -#: Firewall.xml:606 +#: Firewall.xml:473 #, no-c-format msgid "net.ipv4.ip_forward = 0" msgstr "" #. Tag: para -#: Firewall.xml:607 +#: Firewall.xml:474 #, no-c-format msgid "Edit it to read as follows:" msgstr "" #. Tag: screen -#: Firewall.xml:610 +#: Firewall.xml:477 #, no-c-format msgid "net.ipv4.ip_forward = 1" msgstr "" #. Tag: para -#: Firewall.xml:611 +#: Firewall.xml:478 #, no-c-format msgid "" "Use the following command to enable the change to the sysctl.confNAT" -msgstr "" - -#. Tag: tertiary -#: Firewall.xml:626 -#, no-c-format -msgid "POSTROUTING" -msgstr "" - #. Tag: para -#: Firewall.xml:628 +#: Firewall.xml:485 #, no-c-format msgid "" "Accepting forwarded packets via the firewall's internal IP device allows " @@ -1480,7 +1265,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:631 +#: Firewall.xml:488 #, no-c-format msgid "" "To allow LAN nodes with private IP addresses to communicate with external " @@ -1490,14 +1275,14 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:634 +#: Firewall.xml:491 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE" msgstr "" #. Tag: para -#: Firewall.xml:635 +#: Firewall.xml:492 #, no-c-format msgid "" "This rule uses the NAT packet matching table () and " @@ -1507,7 +1292,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:638 +#: Firewall.xml:495 #, no-c-format msgid "" "POSTROUTING allows packets to be altered as they are leaving the " @@ -1515,7 +1300,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:641 +#: Firewall.xml:498 #, no-c-format msgid "" "The target is specified to mask the private " @@ -1523,19 +1308,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:647 +#: Firewall.xml:504 #, no-c-format msgid "Prerouting" msgstr "" -#. Tag: tertiary -#: Firewall.xml:651 Firewall.xml:696 -#, no-c-format -msgid "PREROUTING" -msgstr "" - #. Tag: para -#: Firewall.xml:653 +#: Firewall.xml:505 #, no-c-format msgid "" "If you have a server on your internal network that you want make available " @@ -1546,7 +1325,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:656 +#: Firewall.xml:508 #, no-c-format msgid "" "For example, if you want to forward incoming HTTP requests to your dedicated " @@ -1554,7 +1333,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:659 +#: Firewall.xml:511 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 " @@ -1562,7 +1341,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:660 +#: Firewall.xml:512 #, no-c-format msgid "" "This rule specifies that the nat table use the built-in " @@ -1571,7 +1350,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:665 +#: Firewall.xml:517 #, no-c-format msgid "" "If you have a default policy of DROP in your FORWARD chain, you must append " @@ -1580,7 +1359,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:668 +#: Firewall.xml:520 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A FORWARD -i eth0 -p tcp --dport 80 -d " @@ -1588,7 +1367,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:669 +#: Firewall.xml:521 #, no-c-format msgid "" "This rule forwards all incoming HTTP requests from the firewall to the " @@ -1596,37 +1375,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:676 +#: Firewall.xml:528 #, no-c-format msgid "DMZs and IPTables" msgstr "" -#. Tag: secondary -#: Firewall.xml:679 -#, no-c-format -msgid "and DMZs" -msgstr "" - -#. Tag: primary -#: Firewall.xml:682 -#, no-c-format -msgid "DMZ" -msgstr "" - -#. Tag: see -#: Firewall.xml:683 -#, no-c-format -msgid "Demilitarized Zone" -msgstr "" - -#. Tag: primary -#: Firewall.xml:686 -#, no-c-format -msgid "Demilitarized Zone" -msgstr "" - #. Tag: para -#: Firewall.xml:698 +#: Firewall.xml:529 #, no-c-format msgid "" "You can create iptables rules to route traffic to certain " @@ -1637,7 +1392,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:701 +#: Firewall.xml:532 #, no-c-format msgid "" "For example, to set a rule for routing incoming HTTP requests to a dedicated " @@ -1647,7 +1402,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:704 +#: Firewall.xml:535 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 " @@ -1655,7 +1410,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:705 +#: Firewall.xml:536 #, no-c-format msgid "" "With this command, all HTTP connections to port 80 from outside of the LAN " @@ -1665,7 +1420,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:708 +#: Firewall.xml:539 #, no-c-format msgid "" "If the HTTP server is configured to accept secure connections, then port 443 " @@ -1673,19 +1428,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:716 +#: Firewall.xml:547 #, no-c-format msgid "Malicious Software and Spoofed IP Addresses" msgstr "" -#. Tag: secondary -#: Firewall.xml:719 Firewall.xml:723 -#, no-c-format -msgid "and malicious software" -msgstr "" - #. Tag: para -#: Firewall.xml:725 +#: Firewall.xml:548 #, no-c-format msgid "" "More elaborate rules can be created that control access to specific subnets, " @@ -1695,7 +1444,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:728 +#: Firewall.xml:551 #, no-c-format msgid "" "For example, some trojans scan networks for services on ports from 31337 to " @@ -1703,7 +1452,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:731 +#: Firewall.xml:554 #, no-c-format msgid "" "Since there are no legitimate services that communicate via these non-" @@ -1713,14 +1462,14 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:734 +#: Firewall.xml:557 #, no-c-format msgid "" "The following rules drop all TCP traffic that attempts to use port 31337:" msgstr "" #. Tag: screen -#: Firewall.xml:737 +#: Firewall.xml:560 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A OUTPUT -o eth0 -p tcp --dport 31337 --sport " @@ -1730,7 +1479,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:738 +#: Firewall.xml:561 #, no-c-format msgid "" "You can also block outside connections that attempt to spoof private IP " @@ -1738,7 +1487,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:741 +#: Firewall.xml:564 #, no-c-format msgid "" "For example, if your LAN uses the 192.168.1.0/24 range, you can design a " @@ -1747,7 +1496,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:744 +#: Firewall.xml:567 #, no-c-format msgid "" "Because it is recommended to reject forwarded packets as a default policy, " @@ -1756,14 +1505,14 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:747 +#: Firewall.xml:570 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A FORWARD -s 192.168.1.0/24 -i eth0 -j DROP" msgstr "" #. Tag: para -#: Firewall.xml:750 +#: Firewall.xml:573 #, no-c-format msgid "" "There is a distinction between the DROP and " @@ -1772,7 +1521,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:753 +#: Firewall.xml:576 #, no-c-format msgid "" "The REJECT target denies access and returns " @@ -1782,7 +1531,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:756 +#: Firewall.xml:579 #, no-c-format msgid "" "Administrators can use their own discretion when using these targets. " @@ -1791,37 +1540,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:763 +#: Firewall.xml:586 #, no-c-format msgid "IPTables and Connection Tracking" msgstr "" -#. Tag: secondary -#: Firewall.xml:766 -#, no-c-format -msgid "stateful" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:770 -#, no-c-format -msgid "and connection tracking" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:774 Firewall.xml:785 -#, no-c-format -msgid "stateful inspection" -msgstr "" - -#. Tag: secondary -#: Firewall.xml:778 Firewall.xml:790 -#, no-c-format -msgid "connection tracking" -msgstr "" - #. Tag: para -#: Firewall.xml:780 +#: Firewall.xml:587 #, no-c-format msgid "" "You can inspect and restrict connections to services based on their " @@ -1831,14 +1556,8 @@ msgid "" "based on the following connection states:" msgstr "" -#. Tag: tertiary -#: Firewall.xml:786 Firewall.xml:791 -#, no-c-format -msgid "states" -msgstr "" - #. Tag: para -#: Firewall.xml:795 +#: Firewall.xml:592 #, no-c-format msgid "" " — A packet requesting a new connection, such as " @@ -1846,7 +1565,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:800 +#: Firewall.xml:597 #, no-c-format msgid "" " — A packet that is part of an existing " @@ -1854,7 +1573,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:805 +#: Firewall.xml:602 #, no-c-format msgid "" " — A packet that is requesting a new " @@ -1864,7 +1583,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:810 +#: Firewall.xml:607 #, no-c-format msgid "" " — A packet that is not part of any " @@ -1872,7 +1591,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:815 +#: Firewall.xml:612 #, no-c-format msgid "" "You can use the stateful functionality of iptables " @@ -1883,7 +1602,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:818 +#: Firewall.xml:615 #, no-c-format msgid "" "[root@myServer ~ ] # iptables -A FORWARD -m state --state ESTABLISHED," @@ -1891,25 +1610,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:822 +#: Firewall.xml:619 #, no-c-format msgid "IPv6" msgstr "" -#. Tag: command -#: Firewall.xml:824 -#, no-c-format -msgid "ip6tables" -msgstr "" - -#. Tag: primary -#: Firewall.xml:827 -#, no-c-format -msgid "Netfilter 6" -msgstr "" - #. Tag: para -#: Firewall.xml:829 +#: Firewall.xml:620 #, no-c-format msgid "" "The introduction of the next-generation Internet Protocol, called IPv6, " @@ -1919,16 +1626,16 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:832 +#: Firewall.xml:623 #, no-c-format msgid "" "&PROD; supports IPv6 firewall rules using the Netfilter 6 subsystem and the " -"ip6tables command. In Fedora 5, both IPv4 and IPv6 " +"ip6tables command. In Fedora 11, both IPv4 and IPv6 " "services are enabled by default." msgstr "" #. Tag: para -#: Firewall.xml:835 +#: Firewall.xml:626 #, no-c-format msgid "" "The ip6tables command syntax is identical to " @@ -1938,7 +1645,7 @@ msgid "" msgstr "" #. Tag: screen -#: Firewall.xml:838 +#: Firewall.xml:629 #, no-c-format msgid "" "[root@myServer ~ ] # ip6tables -A INPUT -i eth0 -p tcp -s 3ffe:" @@ -1946,7 +1653,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:839 +#: Firewall.xml:630 #, no-c-format msgid "" "For more information about IPv6 networking, refer to the IPv6 Information " @@ -1954,19 +1661,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:845 +#: Firewall.xml:636 #, no-c-format msgid "Additional Resources" msgstr "" -#. Tag: secondary -#: Firewall.xml:848 Firewall.xml:852 Firewall.xml:856 -#, no-c-format -msgid "additional resources" -msgstr "" - #. Tag: para -#: Firewall.xml:858 +#: Firewall.xml:637 #, no-c-format msgid "" "There are several aspects to firewalls and the Linux Netfilter subsystem " @@ -1975,13 +1676,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:862 +#: Firewall.xml:641 #, no-c-format msgid "Installed Firewall Documentation" msgstr "" #. Tag: para -#: Firewall.xml:865 +#: Firewall.xml:644 #, no-c-format msgid "" "Refer to for more detailed " @@ -1990,7 +1691,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:870 +#: Firewall.xml:649 #, no-c-format msgid "" "The iptables man page contains a brief summary of the " @@ -1998,13 +1699,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:878 +#: Firewall.xml:657 #, no-c-format msgid "Useful Firewall Websites" msgstr "" #. Tag: para -#: Firewall.xml:881 +#: Firewall.xml:660 #, no-c-format msgid "" "http://www.netfilter.org/ " @@ -2013,7 +1714,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:886 +#: Firewall.xml:665 #, no-c-format msgid "" "http://www.tldp.org/ — The " @@ -2022,7 +1723,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:891 +#: Firewall.xml:670 #, no-c-format msgid "" "http://www.iana." @@ -2032,13 +1733,13 @@ msgid "" msgstr "" #. Tag: title -#: Firewall.xml:899 +#: Firewall.xml:678 #, no-c-format msgid "Related Documentation" msgstr "" #. Tag: para -#: Firewall.xml:902 +#: Firewall.xml:681 #, no-c-format msgid "" "Red Hat Linux Firewalls, by Bill McCarty; Red Hat " @@ -2050,7 +1751,7 @@ msgid "" msgstr "" #. Tag: para -#: Firewall.xml:907 +#: Firewall.xml:686 #, no-c-format msgid "" "Linux Firewalls, by Robert Ziegler; New Riders Press " diff --git a/pot/General_Principles.pot b/pot/General_Principles.pot index 5fbbf9a..06bf4df 100644 --- a/pot/General_Principles.pot +++ b/pot/General_Principles.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -24,151 +24,132 @@ msgstr "" #: General_Principles.xml:7 #, no-c-format msgid "" -"The United States' National Security Agency (NSA) provides hardening guides and hardening tips for many different " -"operating systems to help government agencies, businesses, and individuals " -"help secure their system against attacks. In addition to specific settings " -"to change, a set of general principles have been developed to give you a " -"high level view of information security." -msgstr "" - -#. Tag: title -#: General_Principles.xml:11 -#, no-c-format -msgid "General Principles" +"The following general principals provide an overview of good security " +"practices:" msgstr "" #. Tag: para -#: General_Principles.xml:14 +#: General_Principles.xml:12 #, no-c-format msgid "" -"Encrypt all data transmitted over the network. Encrypting authentication " -"information (such as passwords) is particularly important." +"encrypt all data transmitted over networks to help prevent man-in-the-middle " +"attacks and eavesdropping. It is important to encrypt authentication " +"information, such as passwords." msgstr "" #. Tag: para -#: General_Principles.xml:19 +#: General_Principles.xml:17 #, no-c-format -msgid "" -"Minimize the amount of software installed and running in order to minimize " -"vulnerability." +msgid "minimize the amount of software installed and running services." msgstr "" #. Tag: para -#: General_Principles.xml:24 +#: General_Principles.xml:22 #, no-c-format msgid "" -"Use security-enhancing software and tools whenever available (e.g. SELinux " -"and IPTables)." +"use security-enhancing software and tools, for example, Security-Enhanced " +"Linux (SELinux) for Mandatory Access Control (MAC), Netfilter iptables for " +"packet filtering (firewall), and the GNU Privacy Guard (GnuPG) for " +"encrypting files." msgstr "" #. Tag: para -#: General_Principles.xml:29 +#: General_Principles.xml:27 #, no-c-format msgid "" -"Run each network service on a separate server whenever possible. This " -"minimizes the risk that a compromise of one service could lead to a " -"compromise of others." +"if possible, run each network service on a separate system to minimize the " +"risk of one compromised service being used to compromise other services." msgstr "" #. Tag: para -#: General_Principles.xml:34 +#: General_Principles.xml:32 #, no-c-format msgid "" -"Maintain user accounts. Create a good password policy and enforce its use. " -"Delete unused user accounts." +"maintain user accounts: create and enforce a strong password policy; delete " +"unused user accounts." msgstr "" #. Tag: para -#: General_Principles.xml:39 +#: General_Principles.xml:37 #, no-c-format msgid "" -"Review system and application logs on a routine basis. Send logs to a " -"dedicated log server. This prevents intruders from easily avoiding detection " -"by modifying the local logs." +"routinely review system and application logs. By default, security-relevant " +"system logs are written to /var/log/secure and " +"/var/log/audit/audit.log. Note: sending logs to a " +"dedicated log server helps prevent attackers from easily modifying local " +"logs to avoid detection." msgstr "" #. Tag: para -#: General_Principles.xml:44 +#: General_Principles.xml:42 #, no-c-format msgid "" -"Never login directly as root, unless absolutely necessary. Administrators " -"should use sudo to execute commands as root when required. The accounts " -"capable of using sudo are specified in /etc/sudoers, which is edited with " -"the visudo utility. By default, relavent logs are written to /var/log/secure." +"never log in as the root user unless absolutely necessary. It is recommended " +"that administrators use sudo to execute commands as root " +"when required. Users capable of running sudo are " +"specified in /etc/sudoers. Use the visudo utility to edit /etc/sudoers." msgstr "" #. Tag: title -#: General_Principles.xml:51 +#: General_Principles.xml:48 #, no-c-format msgid "Tips, Guides, and Tools" msgstr "" #. Tag: para -#: General_Principles.xml:52 +#: General_Principles.xml:49 #, no-c-format msgid "" -"Most of the above tips are very basic. Depending on your knowledge of Linux " -"and how comfortable you are with modifying your system, some changes could " -"be made to help make your installation more secure. As mentioned above, the " -"NSA has hardening guides and tips for securing Red Hat Enterprise Linux 5. " -"Likewise, the Defense Information " -"Systems Agency (DISA) has an Information Assurance Support Environment in which they publish " -"checklists and tests for verifying the security of your system. The " -"documents from the NSA are a good read for anyone familiar with Linux while " -"the information from DISA is extremely specific and advanced knowledge of " -"Unix/Linux would be a great benefit. Links to these documents are listed " -"below. We will try to pull some of the larger items out of these documents " -"and explain how to implement them in Fedora and why they are important. In " -"addition to documentation, DISA has made available SRR scripts that allow an " -"administrator to check specific settings on a system quickly. The SRR " -"scripts will provide an XML-formatted report listing any known vulnerable " -"settings that you have on your system." -msgstr "" - -#. Tag: title -#: General_Principles.xml:57 -#, no-c-format -msgid "NSA Documents" +"The United States' National Security " +"Agency (NSA) provides hardening guides and tips for many different " +"operating systems, to help government agencies, businesses, and individuals " +"secure their systems against attack. The following guides (in PDF format) " +"provide guidance for Red Hat Enterprise Linux 5:" msgstr "" #. Tag: ulink -#: General_Principles.xml:61 +#: General_Principles.xml:55 #, no-c-format -msgid "Hardening Tips for the Red Hat Enterprise Linux 5 (PDF)" +msgid "Hardening Tips for the Red Hat Enterprise Linux 5" msgstr "" #. Tag: ulink -#: General_Principles.xml:66 -#, no-c-format -msgid "Guide to the Secure Configuration of Red Hat Enterprise Linux 5 (PDF)" -msgstr "" - -#. Tag: title -#: General_Principles.xml:72 +#: General_Principles.xml:60 #, no-c-format -msgid "DISA IASE Documents" +msgid "Guide to the Secure Configuration of Red Hat Enterprise Linux 5" msgstr "" #. Tag: para -#: General_Principles.xml:75 +#: General_Principles.xml:64 #, no-c-format msgid "" -"Security Technical " -"Implementation Guides (STIG) Scroll down to the Unix STIG" +"The Defense Information Systems Agency " +"(DISA) provides documentation, checklists, and tests to help secure " +"your system (Information " +"Assurance Support Environment). The UNIX SECURITY TECHNICAL IMPLEMENTATION " +"GUIDE (PDF) is a very specific guide to UNIX security - an advanced " +"knowledge of UNIX and Linux is recommended before reading this guide." msgstr "" #. Tag: para -#: General_Principles.xml:80 +#: General_Principles.xml:67 #, no-c-format msgid "" -"Security Checklists Scroll down to the Unix Security Checklists" +"The DISA UNIX Security Checklist Version 5, " +"Release 1.16 provides a collection of documents and checklists, " +"ranging from the correct ownerships and modes for system files, to patch " +"control." msgstr "" -#. Tag: ulink -#: General_Principles.xml:86 +#. Tag: para +#: General_Principles.xml:70 #, no-c-format -msgid "Unix Security Readiness Review Evaluation Script" +msgid "" +"Also, DISA has made available UNIX SPR scripts that allow administrators to check " +"specific settings on systems. These scripts provide XML-formatted reports " +"listing any known vulnerable settings." msgstr "" diff --git a/pot/IP_Tables.pot b/pot/IP_Tables.pot index f19250a..df727a5 100644 --- a/pot/IP_Tables.pot +++ b/pot/IP_Tables.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,40 +20,8 @@ msgstr "" msgid "IPTables" msgstr "" -#. Tag: command -#: IP_Tables.xml:8 IP_Tables.xml:13 IP_Tables.xml:17 IP_Tables.xml:40 -#: IP_Tables.xml:45 IP_Tables.xml:48 IP_Tables.xml:52 IP_Tables.xml:56 -#: IP_Tables.xml:179 IP_Tables.xml:239 IP_Tables.xml:271 IP_Tables.xml:311 -#: IP_Tables.xml:412 IP_Tables.xml:523 IP_Tables.xml:546 IP_Tables.xml:660 -#: IP_Tables.xml:687 IP_Tables.xml:706 IP_Tables.xml:827 IP_Tables.xml:929 -#: IP_Tables.xml:974 IP_Tables.xml:978 IP_Tables.xml:983 IP_Tables.xml:987 -#: IP_Tables.xml:995 IP_Tables.xml:1000 IP_Tables.xml:1038 IP_Tables.xml:1043 -#: IP_Tables.xml:1048 IP_Tables.xml:1053 IP_Tables.xml:1058 IP_Tables.xml:1063 -#: IP_Tables.xml:1175 IP_Tables.xml:1304 IP_Tables.xml:1320 IP_Tables.xml:1336 -#, no-c-format -msgid "iptables" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:9 -#, no-c-format -msgid "overview of" -msgstr "" - -#. Tag: primary -#: IP_Tables.xml:12 -#, no-c-format -msgid "netfilter" -msgstr "" - -#. Tag: command -#: IP_Tables.xml:16 -#, no-c-format -msgid "ipchains" -msgstr "" - #. Tag: para -#: IP_Tables.xml:19 +#: IP_Tables.xml:7 #, no-c-format msgid "" "Included with Fedora are advanced tools for network packet " @@ -68,7 +36,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:22 +#: IP_Tables.xml:10 #, no-c-format msgid "" "This chapter focuses on packet filtering basics, defines the differences " @@ -79,7 +47,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:25 +#: IP_Tables.xml:13 #, no-c-format msgid "" "Refer to ipchains is not affected by these " @@ -113,49 +81,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:38 +#: IP_Tables.xml:26 #, no-c-format msgid "Packet Filtering" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:41 -#, no-c-format -msgid "packet filtering basics" -msgstr "" - -#. Tag: primary -#: IP_Tables.xml:44 -#, no-c-format -msgid "packet filtering" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:49 -#, no-c-format -msgid "tables" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:53 -#, no-c-format -msgid "rules list" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:57 -#, no-c-format -msgid "chains" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:58 IP_Tables.xml:829 -#, no-c-format -msgid "target" -msgstr "" - #. Tag: para -#: IP_Tables.xml:60 +#: IP_Tables.xml:27 #, no-c-format msgid "" "The Linux kernel uses the Netfilter facility to " @@ -166,7 +98,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:65 +#: IP_Tables.xml:32 #, no-c-format msgid "" " — The default table for handling network " @@ -174,7 +106,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:70 +#: IP_Tables.xml:37 #, no-c-format msgid "" " — Used to alter packets that create a new " @@ -183,14 +115,14 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:75 +#: IP_Tables.xml:42 #, no-c-format msgid "" " — Used for specific types of packet alteration." msgstr "" #. Tag: para -#: IP_Tables.xml:80 +#: IP_Tables.xml:47 #, no-c-format msgid "" "Each table has a group of built-in chains, which " @@ -199,14 +131,14 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:83 +#: IP_Tables.xml:50 #, no-c-format msgid "" "The built-in chains for the table are as follows:" msgstr "" #. Tag: para -#: IP_Tables.xml:88 +#: IP_Tables.xml:55 #, no-c-format msgid "" "INPUT — Applies to network packets that are " @@ -214,7 +146,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:93 +#: IP_Tables.xml:60 #, no-c-format msgid "" "OUTPUT — Applies to locally-generated network " @@ -222,7 +154,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:98 +#: IP_Tables.xml:65 #, no-c-format msgid "" "FORWARD — Applies to network packets routed " @@ -230,13 +162,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:103 +#: IP_Tables.xml:70 #, no-c-format msgid "The built-in chains for the table are as follows:" msgstr "" #. Tag: para -#: IP_Tables.xml:108 +#: IP_Tables.xml:75 #, no-c-format msgid "" "PREROUTING — Alters network packets when they " @@ -244,7 +176,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:113 IP_Tables.xml:133 +#: IP_Tables.xml:80 IP_Tables.xml:100 #, no-c-format msgid "" "OUTPUT — Alters locally-generated network " @@ -252,7 +184,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:118 IP_Tables.xml:148 +#: IP_Tables.xml:85 IP_Tables.xml:115 #, no-c-format msgid "" "POSTROUTING — Alters network packets before " @@ -260,14 +192,14 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:123 +#: IP_Tables.xml:90 #, no-c-format msgid "" "The built-in chains for the table are as follows:" msgstr "" #. Tag: para -#: IP_Tables.xml:128 +#: IP_Tables.xml:95 #, no-c-format msgid "" "INPUT — Alters network packets targeted for the " @@ -275,7 +207,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:138 +#: IP_Tables.xml:105 #, no-c-format msgid "" "FORWARD — Alters network packets routed through " @@ -283,7 +215,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:143 +#: IP_Tables.xml:110 #, no-c-format msgid "" "PREROUTING — Alters incoming network packets " @@ -291,7 +223,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:153 +#: IP_Tables.xml:120 #, no-c-format msgid "" "Every network packet received by or sent from a Linux system is subject to " @@ -303,14 +235,14 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:157 IP_Tables.xml:342 IP_Tables.xml:450 IP_Tables.xml:894 -#: IP_Tables.xml:1028 +#: IP_Tables.xml:124 IP_Tables.xml:291 IP_Tables.xml:394 IP_Tables.xml:810 +#: IP_Tables.xml:904 IP_Tables.xml:983 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: IP_Tables.xml:158 +#: IP_Tables.xml:125 #, no-c-format msgid "" "By default, firewall rules are saved in the /etc/sysconfig/" @@ -318,7 +250,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:161 +#: IP_Tables.xml:128 #, no-c-format msgid "" "The iptables service starts before any DNS-related " @@ -328,7 +260,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:165 +#: IP_Tables.xml:132 #, no-c-format msgid "" "Regardless of their destination, when packets match a particular rule in one " @@ -344,7 +276,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:168 +#: IP_Tables.xml:135 #, no-c-format msgid "" "Every chain has a default policy to ACCEPT, " @@ -354,7 +286,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:171 +#: IP_Tables.xml:138 #, no-c-format msgid "" "The iptables command configures these tables, as well as " @@ -362,19 +294,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:177 +#: IP_Tables.xml:144 #, no-c-format msgid "Differences Between IPTables and IPChains" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:180 -#, no-c-format -msgid "compared with ipchains" -msgstr "" - #. Tag: para -#: IP_Tables.xml:182 +#: IP_Tables.xml:145 #, no-c-format msgid "" "Both ipchains and iptables use chains " @@ -386,7 +312,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:185 +#: IP_Tables.xml:148 #, no-c-format msgid "" "You should be aware of the following significant differences between " @@ -394,7 +320,7 @@ msgid "" msgstr "" #. Tag: emphasis -#: IP_Tables.xml:190 +#: IP_Tables.xml:153 #, no-c-format msgid "" "Using iptables, each filtered packet is processed using " @@ -402,7 +328,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:192 +#: IP_Tables.xml:155 #, no-c-format msgid "" "For example, a FORWARD packet coming into a system using ipchainsipchains, packets that matched a rule in a chain could " @@ -430,13 +356,13 @@ msgid "" msgstr "" #. Tag: emphasis -#: IP_Tables.xml:206 +#: IP_Tables.xml:169 #, no-c-format msgid "Order matters when placing options in a rule." msgstr "" #. Tag: para -#: IP_Tables.xml:208 +#: IP_Tables.xml:171 #, no-c-format msgid "" "In ipchains, the order of the rule options does not " @@ -444,7 +370,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:211 +#: IP_Tables.xml:174 #, no-c-format msgid "" "The iptables command has a stricter syntax. The " @@ -453,7 +379,7 @@ msgid "" msgstr "" #. Tag: emphasis -#: IP_Tables.xml:217 +#: IP_Tables.xml:180 #, no-c-format msgid "" "Network interfaces must be associated with the correct chains in firewall " @@ -461,7 +387,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:219 +#: IP_Tables.xml:182 #, no-c-format msgid "" "For example, incoming interfaces ( option) can only be " @@ -470,7 +396,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:222 +#: IP_Tables.xml:185 #, no-c-format msgid "" "In other words, INPUT chains and incoming interfaces work together; OUTPUT " @@ -479,7 +405,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:225 +#: IP_Tables.xml:188 #, no-c-format msgid "" "OUTPUT chains are no longer used by incoming interfaces, and INPUT chains " @@ -487,7 +413,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:231 +#: IP_Tables.xml:194 #, no-c-format msgid "" "This is not a comprehensive list of the changes. Refer to iptablesPacket Type — Specifies the type of packets the " @@ -526,7 +445,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:252 +#: IP_Tables.xml:211 #, no-c-format msgid "" "Packet Source/Destination — Specifies which " @@ -534,7 +453,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:257 +#: IP_Tables.xml:216 #, no-c-format msgid "" "Target — Specifies what action is taken on " @@ -542,7 +461,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:262 +#: IP_Tables.xml:221 #, no-c-format msgid "" "Refer to iptables rules must be " @@ -562,25 +481,19 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:269 +#: IP_Tables.xml:228 #, no-c-format msgid "Structure of IPTables Command Options" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:273 -#, no-c-format -msgid "structure of" -msgstr "" - #. Tag: para -#: IP_Tables.xml:275 +#: IP_Tables.xml:229 #, no-c-format msgid "Many iptables commands have the following structure:" msgstr "" #. Tag: screen -#: IP_Tables.xml:278 +#: IP_Tables.xml:232 #, no-c-format msgid "" " iptables [-t <table-name>] " @@ -592,7 +505,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:279 +#: IP_Tables.xml:233 #, no-c-format msgid "" "<table-name> — Specifies which table " @@ -600,7 +513,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:282 +#: IP_Tables.xml:236 #, no-c-format msgid "" "<command> — Specifies the action to " @@ -608,7 +521,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:285 +#: IP_Tables.xml:239 #, no-c-format msgid "" "<chain-name> — Specifies the chain to " @@ -616,7 +529,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:288 +#: IP_Tables.xml:242 #, no-c-format msgid "" "<parameter>-<option> pairs — " @@ -625,7 +538,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:291 +#: IP_Tables.xml:245 #, no-c-format msgid "" "The length and complexity of an iptables command can " @@ -633,20 +546,20 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:294 +#: IP_Tables.xml:248 #, no-c-format msgid "For example, a command to remove a rule from a chain can be very short:" msgstr "" #. Tag: command -#: IP_Tables.xml:298 +#: IP_Tables.xml:252 #, no-c-format msgid "" "iptables -D <chain-name> <line-number>" msgstr "" #. Tag: para -#: IP_Tables.xml:300 +#: IP_Tables.xml:254 #, no-c-format msgid "" "In contrast, a command that adds a rule which filters packets from a " @@ -660,7 +573,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:303 +#: IP_Tables.xml:257 #, no-c-format msgid "" "Type iptables -h to view a comprehensive list of " @@ -668,19 +581,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:309 +#: IP_Tables.xml:263 #, no-c-format msgid "Command Options" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:313 -#, no-c-format -msgid "commands" -msgstr "" - #. Tag: para -#: IP_Tables.xml:315 +#: IP_Tables.xml:264 #, no-c-format msgid "" "Command options instruct iptables to perform a specific " @@ -690,13 +597,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:318 +#: IP_Tables.xml:267 #, no-c-format msgid "The iptables commands are as follows:" msgstr "" #. Tag: para -#: IP_Tables.xml:323 +#: IP_Tables.xml:272 #, no-c-format msgid "" " — Appends the rule to the end of the specified " @@ -706,7 +613,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:328 +#: IP_Tables.xml:277 #, no-c-format msgid "" " — Checks a particular rule before adding it to the " @@ -716,7 +623,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:333 +#: IP_Tables.xml:282 #, no-c-format msgid "" " — Deletes a rule in " @@ -726,7 +633,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:338 +#: IP_Tables.xml:287 #, no-c-format msgid "" " — Renames a user-defined chain. A user-defined " @@ -737,7 +644,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:343 +#: IP_Tables.xml:292 #, no-c-format msgid "" "If you attempt to rename one of the default chains, the system reports a " @@ -746,7 +653,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:349 +#: IP_Tables.xml:298 #, no-c-format msgid "" " — Flushes the selected chain, which effectively " @@ -755,7 +662,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:354 +#: IP_Tables.xml:303 #, no-c-format msgid "" " — Provides a list of command structures, as well " @@ -763,7 +670,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:359 +#: IP_Tables.xml:308 #, no-c-format msgid "" " — Inserts the rule in the " @@ -771,14 +678,8 @@ msgid "" "no argument is specified, the rule is inserted at the top of the chain." msgstr "" -#. Tag: title -#: IP_Tables.xml:363 -#, no-c-format -msgid "Caution" -msgstr "" - #. Tag: para -#: IP_Tables.xml:364 +#: IP_Tables.xml:313 #, no-c-format msgid "" "As noted above, the order of rules in a chain determines which rules apply " @@ -787,7 +688,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:367 +#: IP_Tables.xml:316 #, no-c-format msgid "" "This is especially important when adding rules using the " @@ -797,7 +698,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:373 +#: IP_Tables.xml:322 #, no-c-format msgid "" " — Lists all of the rules in the chain specified " @@ -808,7 +709,7 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:376 +#: IP_Tables.xml:325 #, no-c-format msgid "" " iptables -L <chain-name> -" @@ -816,7 +717,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:377 +#: IP_Tables.xml:326 #, no-c-format msgid "" "Additional options for the command option, which provide " @@ -826,7 +727,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:382 +#: IP_Tables.xml:331 #, no-c-format msgid "" " — Creates a new chain with a user-specified name. " @@ -834,7 +735,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:387 +#: IP_Tables.xml:336 #, no-c-format msgid "" " — Sets the default policy for the specified chain, " @@ -843,7 +744,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:392 +#: IP_Tables.xml:341 #, no-c-format msgid "" " — Replaces a rule in the specified chain. The " @@ -852,7 +753,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:397 +#: IP_Tables.xml:346 #, no-c-format msgid "" " — Deletes a user-specified chain. You cannot " @@ -860,7 +761,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:402 +#: IP_Tables.xml:351 #, no-c-format msgid "" " — Sets the byte and packet counters in all chains " @@ -868,19 +769,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:410 +#: IP_Tables.xml:359 #, no-c-format msgid "IPTables Parameter Options" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:414 -#, no-c-format -msgid "parameters" -msgstr "" - #. Tag: para -#: IP_Tables.xml:416 +#: IP_Tables.xml:360 #, no-c-format msgid "" "Certain iptables commands, including those used to add, " @@ -889,7 +784,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:421 +#: IP_Tables.xml:365 #, no-c-format msgid "" " — Resets the counters for a particular rule. This " @@ -898,7 +793,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:426 +#: IP_Tables.xml:370 #, no-c-format msgid "" " — Sets the destination hostname, IP address, or " @@ -907,7 +802,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:431 +#: IP_Tables.xml:375 #, no-c-format msgid "" " — Applies this rule only to fragmented packets." msgstr "" #. Tag: para -#: IP_Tables.xml:446 +#: IP_Tables.xml:390 #, no-c-format msgid "" "You can use the exclamation point character () option " @@ -940,7 +835,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:451 +#: IP_Tables.xml:395 #, no-c-format msgid "" "Distinguishing between fragmented and unfragmented packets is desirable, " @@ -948,7 +843,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:454 +#: IP_Tables.xml:398 #, no-c-format msgid "" "Originally designed to allow IP packets to travel over networks with " @@ -958,7 +853,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:460 +#: IP_Tables.xml:404 #, no-c-format msgid "" " — Sets the incoming network interface, such as " @@ -970,13 +865,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:463 +#: IP_Tables.xml:407 #, no-c-format msgid "This parameter also supports the following special options:" msgstr "" #. Tag: para -#: IP_Tables.xml:468 +#: IP_Tables.xml:412 #, no-c-format msgid "" "Exclamation point character () — Reverses the " @@ -984,7 +879,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:473 +#: IP_Tables.xml:417 #, no-c-format msgid "" "Plus character () — A wildcard character used to " @@ -994,7 +889,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:478 +#: IP_Tables.xml:422 #, no-c-format msgid "" "If the parameter is used but no interface is specified, " @@ -1002,7 +897,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:483 +#: IP_Tables.xml:427 #, no-c-format msgid "" " — Jumps to the specified target when a packet " @@ -1010,7 +905,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:486 +#: IP_Tables.xml:430 #, no-c-format msgid "" "The standard targets are , , " @@ -1018,7 +913,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:489 +#: IP_Tables.xml:433 #, no-c-format msgid "" "Extended options are also available through modules loaded by default with " @@ -1029,7 +924,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:492 +#: IP_Tables.xml:436 #, no-c-format msgid "" "This option can also be used to direct a packet matching a particular rule " @@ -1038,7 +933,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:495 +#: IP_Tables.xml:439 #, no-c-format msgid "" "If no target is specified, the packet moves past the rule with no action " @@ -1046,7 +941,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:500 +#: IP_Tables.xml:444 #, no-c-format msgid "" " — Sets the outgoing network interface for a rule. " @@ -1057,7 +952,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:505 +#: IP_Tables.xml:449 #, no-c-format msgid "" " — Sets the IP protocol affected " @@ -1068,7 +963,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:508 +#: IP_Tables.xml:452 #, no-c-format msgid "" "The \"\" protocol means the rule applies to every " @@ -1077,7 +972,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:513 +#: IP_Tables.xml:457 #, no-c-format msgid "" " — Sets the source for a particular packet using " @@ -1085,19 +980,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:521 +#: IP_Tables.xml:465 #, no-c-format msgid "IPTables Match Options" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:524 IP_Tables.xml:707 -#, no-c-format -msgid "match options" -msgstr "" - #. Tag: para -#: IP_Tables.xml:526 +#: IP_Tables.xml:466 #, no-c-format msgid "" "Different network protocols provide specialized matching options which can " @@ -1110,16 +999,21 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:529 +#: IP_Tables.xml:469 #, no-c-format msgid "" -" iptables -A INPUT -p icmp --icmp-type any -j ACCEPT iptables -A INPUT -p 5813 --icmp-type any -j ACCEPT " +" iptables -A INPUT -p icmp --icmp-type any -j ACCEPT " +msgstr "" + +#. Tag: screen +#: IP_Tables.xml:470 +#, no-c-format +msgid "" +" iptables -A INPUT -p 5813 --icmp-type any -j ACCEPT " msgstr "" #. Tag: para -#: IP_Tables.xml:530 +#: IP_Tables.xml:471 #, no-c-format msgid "" "Service definitions are provided in the /etc/services " @@ -1128,13 +1022,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:534 IP_Tables.xml:1022 +#: IP_Tables.xml:475 #, no-c-format -msgid "Important" +msgid "Warning" msgstr "" #. Tag: para -#: IP_Tables.xml:535 +#: IP_Tables.xml:476 #, no-c-format msgid "" "Secure the /etc/services file to prevent unauthorized " @@ -1144,16 +1038,16 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:538 +#: IP_Tables.xml:479 #, no-c-format msgid "" -" [root@myServer ~]# chown root.root /etc/services [root@myServer ~]" -"# chmod 0644 /etc/services [root@myServer ~]# chattr +i /etc/services " +"[root@myServer ~]# chown root.root /etc/services \n" +"[root@myServer ~]# chmod 0644 /etc/services\n" +"[root@myServer ~]# chattr +i /etc/services" msgstr "" #. Tag: para -#: IP_Tables.xml:539 +#: IP_Tables.xml:480 #, no-c-format msgid "" "This prevents the file from being renamed, deleted or having links made to " @@ -1161,25 +1055,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:544 +#: IP_Tables.xml:485 #, no-c-format msgid "TCP Protocol" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:547 IP_Tables.xml:661 IP_Tables.xml:688 -#, no-c-format -msgid "protocols" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:548 -#, no-c-format -msgid "TCP" -msgstr "" - #. Tag: para -#: IP_Tables.xml:550 +#: IP_Tables.xml:486 #, no-c-format msgid "" "These match options are available for the TCP protocol ( — Sets the destination port for the packet." msgstr "" #. Tag: para -#: IP_Tables.xml:558 +#: IP_Tables.xml:494 #, no-c-format msgid "" "To configure this option, use a network service name (such as www or smtp); " @@ -1202,7 +1084,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:561 +#: IP_Tables.xml:497 #, no-c-format msgid "" "To specify a range of port numbers, separate the two numbers with a colon " @@ -1211,7 +1093,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:564 +#: IP_Tables.xml:500 #, no-c-format msgid "" "Use an exclamation point character () after the match option is synonymous with " @@ -1236,7 +1118,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:575 +#: IP_Tables.xml:511 #, no-c-format msgid "" " — Sets the source port of the packet using " @@ -1245,7 +1127,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:580 +#: IP_Tables.xml:516 #, no-c-format msgid "" " — Applies to all TCP packets designed to " @@ -1254,7 +1136,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:583 +#: IP_Tables.xml:519 #, no-c-format msgid "" "Use an exclamation point character () after the " @@ -1271,7 +1153,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:591 +#: IP_Tables.xml:527 #, no-c-format msgid "" "The match option accepts two parameters. The " @@ -1281,61 +1163,61 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:594 +#: IP_Tables.xml:530 #, no-c-format msgid "The possible flags are:" msgstr "" #. Tag: option -#: IP_Tables.xml:600 +#: IP_Tables.xml:536 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:605 +#: IP_Tables.xml:541 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:610 +#: IP_Tables.xml:546 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:615 +#: IP_Tables.xml:551 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:620 +#: IP_Tables.xml:556 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:625 +#: IP_Tables.xml:561 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:630 +#: IP_Tables.xml:566 #, no-c-format msgid "" msgstr "" #. Tag: option -#: IP_Tables.xml:635 +#: IP_Tables.xml:571 #, no-c-format msgid "NONE" msgstr "" #. Tag: para -#: IP_Tables.xml:639 +#: IP_Tables.xml:575 #, no-c-format msgid "" "For example, an iptables rule that contains the following " @@ -1344,13 +1226,13 @@ msgid "" msgstr "" #. Tag: command -#: IP_Tables.xml:643 +#: IP_Tables.xml:579 #, no-c-format msgid "--tcp-flags ACK,FIN,SYN SYN" msgstr "" #. Tag: para -#: IP_Tables.xml:645 +#: IP_Tables.xml:581 #, no-c-format msgid "" "Use the exclamation point character () after the — Attempts to match with TCP-specific " @@ -1367,19 +1249,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:658 +#: IP_Tables.xml:594 #, no-c-format msgid "UDP Protocol" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:662 -#, no-c-format -msgid "UDP" -msgstr "" - #. Tag: para -#: IP_Tables.xml:664 +#: IP_Tables.xml:595 #, no-c-format msgid "" "These match options are available for the UDP protocol ( — Specifies the destination port of the UDP " @@ -1397,7 +1273,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:674 +#: IP_Tables.xml:605 #, no-c-format msgid "" " — Specifies the source port of the UDP " @@ -1407,7 +1283,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:679 +#: IP_Tables.xml:610 #, no-c-format msgid "" "For the and options, to " @@ -1417,19 +1293,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:685 +#: IP_Tables.xml:616 #, no-c-format msgid "ICMP Protocol" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:689 -#, no-c-format -msgid "ICMP" -msgstr "" - #. Tag: para -#: IP_Tables.xml:691 +#: IP_Tables.xml:617 #, no-c-format msgid "" "The following match options are available for the Internet Control Message " @@ -1437,7 +1307,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:696 +#: IP_Tables.xml:622 #, no-c-format msgid "" " — Sets the name or number of the ICMP " @@ -1446,19 +1316,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:704 +#: IP_Tables.xml:630 #, no-c-format msgid "Additional Match Option Modules" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:708 -#, no-c-format -msgid "modules" -msgstr "" - #. Tag: para -#: IP_Tables.xml:710 +#: IP_Tables.xml:631 #, no-c-format msgid "" "Additional match options are available through modules loaded by the " @@ -1466,7 +1330,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:713 +#: IP_Tables.xml:634 #, no-c-format msgid "" "To use a match option module, load the module by name using the module — Places limits on how many packets are " @@ -1497,7 +1361,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:727 +#: IP_Tables.xml:648 #, no-c-format msgid "" "When used in conjunction with the LOG target, the " @@ -1507,7 +1371,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:730 +#: IP_Tables.xml:651 #, no-c-format msgid "" "Refer to limit module enables the following options:" msgstr "" #. Tag: para -#: IP_Tables.xml:738 +#: IP_Tables.xml:659 #, no-c-format msgid "" " — Sets the maximum number of matches for a " @@ -1532,13 +1396,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:741 +#: IP_Tables.xml:662 #, no-c-format msgid "Periods can be specified in seconds, minutes, hours, or days." msgstr "" #. Tag: para -#: IP_Tables.xml:744 +#: IP_Tables.xml:665 #, no-c-format msgid "" "If a number and time modifier are not used, the default value of — Sets a limit on the number of packets " @@ -1554,7 +1418,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:752 +#: IP_Tables.xml:673 #, no-c-format msgid "" "This option is specified as an integer and should be used in conjunction " @@ -1562,25 +1426,25 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:755 +#: IP_Tables.xml:676 #, no-c-format msgid "If no value is specified, the default value of five (5) is assumed." msgstr "" #. Tag: para -#: IP_Tables.xml:762 +#: IP_Tables.xml:683 #, no-c-format msgid " module — Enables state matching." msgstr "" #. Tag: para -#: IP_Tables.xml:765 +#: IP_Tables.xml:686 #, no-c-format msgid "The module enables the following options:" msgstr "" #. Tag: para -#: IP_Tables.xml:770 +#: IP_Tables.xml:691 #, no-c-format msgid "" " — match a packet with the following " @@ -1588,7 +1452,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:775 +#: IP_Tables.xml:696 #, no-c-format msgid "" " — The matching packet is associated with " @@ -1597,7 +1461,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:780 +#: IP_Tables.xml:701 #, no-c-format msgid "" " — The matching packet cannot be tied to a " @@ -1605,7 +1469,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:785 +#: IP_Tables.xml:706 #, no-c-format msgid "" " — The matching packet is either creating a new " @@ -1614,7 +1478,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:790 +#: IP_Tables.xml:711 #, no-c-format msgid "" " — The matching packet is starting a new " @@ -1624,7 +1488,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:795 +#: IP_Tables.xml:716 #, no-c-format msgid "" "These connection states can be used in combination with one another by " @@ -1633,20 +1497,20 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:802 +#: IP_Tables.xml:723 #, no-c-format msgid "" " module — Enables hardware MAC address matching." msgstr "" #. Tag: para -#: IP_Tables.xml:805 +#: IP_Tables.xml:726 #, no-c-format msgid "The module enables the following option:" msgstr "" #. Tag: para -#: IP_Tables.xml:810 +#: IP_Tables.xml:731 #, no-c-format msgid "" " — Matches a MAC address of the network " @@ -1656,7 +1520,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:817 +#: IP_Tables.xml:738 #, no-c-format msgid "" "Refer to the iptables man page for more match options " @@ -1664,13 +1528,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:825 +#: IP_Tables.xml:746 #, no-c-format msgid "Target Options" msgstr "" #. Tag: para -#: IP_Tables.xml:831 +#: IP_Tables.xml:747 #, no-c-format msgid "" "When a packet has matched a particular rule, the rule can direct the packet " @@ -1681,13 +1545,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:834 +#: IP_Tables.xml:750 #, no-c-format msgid "The following are the standard targets:" msgstr "" #. Tag: para -#: IP_Tables.xml:839 +#: IP_Tables.xml:755 #, no-c-format msgid "" " " @@ -1696,7 +1560,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:844 +#: IP_Tables.xml:760 #, no-c-format msgid "" " — Allows the packet through to its destination " @@ -1704,7 +1568,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:849 +#: IP_Tables.xml:765 #, no-c-format msgid "" " — Drops the packet without responding to the " @@ -1712,7 +1576,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:854 +#: IP_Tables.xml:770 #, no-c-format msgid "" " — The packet is queued for handling by a user-" @@ -1720,7 +1584,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:859 +#: IP_Tables.xml:775 #, no-c-format msgid "" " — Stops checking the packet against rules in " @@ -1733,7 +1597,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:864 +#: IP_Tables.xml:780 #, no-c-format msgid "" "In addition, extensions are available which allow other targets to be " @@ -1745,7 +1609,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:867 +#: IP_Tables.xml:783 #, no-c-format msgid "" "Many extended target modules exist, most of which only apply to specific " @@ -1754,7 +1618,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:872 +#: IP_Tables.xml:788 #, no-c-format msgid "" " — Logs all packets that match this rule. Because " @@ -1764,7 +1628,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:875 +#: IP_Tables.xml:791 #, no-c-format msgid "" "Additional options can be used after the target to " @@ -1772,7 +1636,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:880 +#: IP_Tables.xml:796 #, no-c-format msgid "" " — Sets the priority level of a logging " @@ -1781,7 +1645,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:885 +#: IP_Tables.xml:801 #, no-c-format msgid "" " — Logs any options set in the header " @@ -1789,7 +1653,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:890 +#: IP_Tables.xml:806 #, no-c-format msgid "" " — Places a string of up to 29 characters " @@ -1798,7 +1662,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:895 +#: IP_Tables.xml:811 #, no-c-format msgid "" "Due to an issue with this option, you should add a trailing space to the " @@ -1806,7 +1670,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:901 +#: IP_Tables.xml:817 #, no-c-format msgid "" " — Logs any options set in the " @@ -1814,7 +1678,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:906 +#: IP_Tables.xml:822 #, no-c-format msgid "" " — Writes the TCP sequence number " @@ -1822,7 +1686,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:913 +#: IP_Tables.xml:829 #, no-c-format msgid "" " — Sends an error packet back to the remote " @@ -1830,7 +1694,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:916 +#: IP_Tables.xml:832 #, no-c-format msgid "" "The target accepts — Displays verbose output, such as the number of " @@ -1884,7 +1742,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:943 +#: IP_Tables.xml:854 #, no-c-format msgid "" " — Expands numbers into their exact values. On a " @@ -1896,7 +1754,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:948 +#: IP_Tables.xml:859 #, no-c-format msgid "" " — Displays IP addresses and port numbers in " @@ -1904,7 +1762,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:953 +#: IP_Tables.xml:864 #, no-c-format msgid "" " — Lists rules in each chain next to " @@ -1914,100 +1772,21 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:958 +#: IP_Tables.xml:869 #, no-c-format msgid "" " — Specifies a table name. If " "omitted, defaults to the filter table." msgstr "" -#. Tag: para -#: IP_Tables.xml:963 -#, no-c-format -msgid "" -"The following examples illustrate the use of several of these options. Note " -"the difference in the byte display by including the " -"option." -msgstr "" - -#. Tag: screen -#: IP_Tables.xml:966 -#, no-c-format -msgid "" -" [root@myserver ~]# iptables -L OUTPUT -v -n -x Chain OUTPUT " -"(policy ACCEPT 64005 packets, 6445791 bytes) pkts bytes target prot opt in " -"out source destination 1593 133812 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 " -"[root@myserver ~]#iptables -L OUTPUT -v -n Chain OUTPUT (policy ACCEPT 64783 " -"packets, 6492K bytes) pkts bytes target prot opt in out source destination " -"1819 153K ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 [root@myserver ~]# " -msgstr "" - #. Tag: title -#: IP_Tables.xml:972 +#: IP_Tables.xml:879 #, no-c-format msgid "Saving IPTables Rules" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:975 -#, no-c-format -msgid "saving rules" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:979 IP_Tables.xml:1039 IP_Tables.xml:1044 IP_Tables.xml:1049 -#: IP_Tables.xml:1054 IP_Tables.xml:1059 IP_Tables.xml:1064 IP_Tables.xml:1069 -#: IP_Tables.xml:1074 IP_Tables.xml:1079 IP_Tables.xml:1084 IP_Tables.xml:1089 -#: IP_Tables.xml:1094 -#, no-c-format -msgid "control scripts" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:980 IP_Tables.xml:1065 IP_Tables.xml:1095 -#, no-c-format -msgid "save" -msgstr "" - -#. Tag: command -#: IP_Tables.xml:984 -#, no-c-format -msgid "/sbin/iptables-save" -msgstr "" - -#. Tag: command -#: IP_Tables.xml:988 -#, no-c-format -msgid "/sbin/iptables-restore" -msgstr "" - -#. Tag: primary -#: IP_Tables.xml:991 -#, no-c-format -msgid "sysconfig directory" -msgstr "" - -#. Tag: filename -#: IP_Tables.xml:992 IP_Tables.xml:997 -#, no-c-format -msgid "/etc/sysconfig/iptables" -msgstr "" - -#. Tag: secondary -#: IP_Tables.xml:996 IP_Tables.xml:1001 IP_Tables.xml:1176 -#, no-c-format -msgid "configuration files" -msgstr "" - -#. Tag: filename -#: IP_Tables.xml:1002 -#, no-c-format -msgid "/etc/sysconfig/iptables.save" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1004 +#: IP_Tables.xml:880 #, no-c-format msgid "" "Rules created with the iptables command are stored in " @@ -2018,13 +1797,13 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:1007 +#: IP_Tables.xml:883 #, no-c-format msgid " /sbin/service iptables save " msgstr "" #. Tag: para -#: IP_Tables.xml:1008 +#: IP_Tables.xml:884 #, no-c-format msgid "" "This executes the iptables init script, which runs the " @@ -2035,7 +1814,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1011 +#: IP_Tables.xml:887 #, no-c-format msgid "" "The next time the system boots, the iptables init script " @@ -2044,7 +1823,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1014 +#: IP_Tables.xml:890 #, no-c-format msgid "" "While it is always a good idea to test a new iptables " @@ -2056,7 +1835,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1017 +#: IP_Tables.xml:893 #, no-c-format msgid "" "You can also save the iptables rules to a separate file for distribution, " @@ -2065,16 +1844,16 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:1020 +#: IP_Tables.xml:896 #, no-c-format msgid "" -" [root@myserver ~]# iptables-save > <filename>" +" [root@myServer ~]# iptables-save > <filename>" "where <filename> is " "a user-defined name for your ruleset." msgstr "" #. Tag: para -#: IP_Tables.xml:1023 +#: IP_Tables.xml:899 #, no-c-format msgid "" "If distributing the /etc/sysconfig/iptables file to " @@ -2083,7 +1862,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1029 +#: IP_Tables.xml:905 #, no-c-format msgid "" "Note the difference between the iptables " @@ -2096,50 +1875,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1036 +#: IP_Tables.xml:912 #, no-c-format msgid "IPTables Control Scripts" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:1040 IP_Tables.xml:1070 -#, no-c-format -msgid "start" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:1045 IP_Tables.xml:1075 -#, no-c-format -msgid "stop" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:1050 IP_Tables.xml:1080 -#, no-c-format -msgid "restart" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:1055 IP_Tables.xml:1085 -#, no-c-format -msgid "status" -msgstr "" - -#. Tag: tertiary -#: IP_Tables.xml:1060 IP_Tables.xml:1090 -#, no-c-format -msgid "panic" -msgstr "" - -#. Tag: command -#: IP_Tables.xml:1068 IP_Tables.xml:1073 IP_Tables.xml:1078 IP_Tables.xml:1083 -#: IP_Tables.xml:1088 IP_Tables.xml:1093 IP_Tables.xml:1281 -#, no-c-format -msgid "ip6tables" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1097 +#: IP_Tables.xml:913 #, no-c-format msgid "" "There are two basic methods for controlling iptables in " @@ -2147,7 +1889,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1102 +#: IP_Tables.xml:918 #, no-c-format msgid "" "&RHSECLEVELTOOL; (system-config-" @@ -2158,7 +1900,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1107 +#: IP_Tables.xml:923 #, no-c-format msgid "" "/sbin/service iptables <option>start — If a firewall is configured (that is, " @@ -2179,13 +1921,13 @@ msgid "" msgstr "" #. Tag: screen -#: IP_Tables.xml:1115 +#: IP_Tables.xml:931 #, no-c-format msgid " [root@MyServer ~]# lsmod | grep ipchains " msgstr "" #. Tag: para -#: IP_Tables.xml:1116 +#: IP_Tables.xml:932 #, no-c-format msgid "" "If this command returns no output, it means the module is not loaded. If " @@ -2194,7 +1936,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1121 +#: IP_Tables.xml:937 #, no-c-format msgid "" "stop — If a firewall is running, the firewall rules " @@ -2202,7 +1944,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1124 +#: IP_Tables.xml:940 #, no-c-format msgid "" "If the IPTABLES_SAVE_ON_STOP directive in the /" @@ -2213,7 +1955,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1127 IP_Tables.xml:1138 +#: IP_Tables.xml:943 IP_Tables.xml:954 #, no-c-format msgid "" "Refer to restart — If a firewall is running, the firewall " @@ -2232,7 +1974,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1135 +#: IP_Tables.xml:951 #, no-c-format msgid "" "If the IPTABLES_SAVE_ON_RESTART directive in the " @@ -2243,7 +1985,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1143 +#: IP_Tables.xml:959 #, no-c-format msgid "" "status — Displays the status of the firewall and " @@ -2251,7 +1993,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1146 +#: IP_Tables.xml:962 #, no-c-format msgid "" "The default configuration for this option displays IP addresses in each " @@ -2264,7 +2006,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1151 +#: IP_Tables.xml:967 #, no-c-format msgid "" "panic — Flushes all firewall rules. The policy of " @@ -2272,7 +2014,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1154 +#: IP_Tables.xml:970 #, no-c-format msgid "" "This option could be useful if a server is known to be compromised. Rather " @@ -2282,7 +2024,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1159 +#: IP_Tables.xml:975 #, no-c-format msgid "" "save — Saves firewall rules to /etc/" @@ -2291,14 +2033,8 @@ msgid "" "for more information." msgstr "" -#. Tag: title -#: IP_Tables.xml:1167 -#, no-c-format -msgid "Tip" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1168 +#: IP_Tables.xml:984 #, no-c-format msgid "" "To use the same initscript commands to control netfilter for IPv6, " @@ -2309,19 +2045,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1173 +#: IP_Tables.xml:989 #, no-c-format msgid "IPTables Control Scripts Configuration File" msgstr "" -#. Tag: filename -#: IP_Tables.xml:1177 -#, no-c-format -msgid "/etc/sysconfig/iptables-config" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1179 +#: IP_Tables.xml:990 #, no-c-format msgid "" "The behavior of the iptables initscripts is controlled by " @@ -2330,7 +2060,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1184 +#: IP_Tables.xml:995 #, no-c-format msgid "" "IPTABLES_MODULES — Specifies a space-separated list " @@ -2339,7 +2069,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1189 +#: IP_Tables.xml:1000 #, no-c-format msgid "" "IPTABLES_MODULES_UNLOAD — Unloads modules on " @@ -2347,7 +2077,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1194 +#: IP_Tables.xml:1005 #, no-c-format msgid "" "yes — The default value. This option must be set to " @@ -2355,7 +2085,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1199 +#: IP_Tables.xml:1010 #, no-c-format msgid "" "no — This option should only be set if there are " @@ -2363,7 +2093,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1206 +#: IP_Tables.xml:1017 #, no-c-format msgid "" "IPTABLES_SAVE_ON_STOP — Saves current firewall " @@ -2372,7 +2102,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1211 +#: IP_Tables.xml:1022 #, no-c-format msgid "" "yes — Saves existing rules to /etc/" @@ -2382,7 +2112,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1216 +#: IP_Tables.xml:1027 #, no-c-format msgid "" "no — The default value. Does not save existing " @@ -2390,7 +2120,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1223 +#: IP_Tables.xml:1034 #, no-c-format msgid "" "IPTABLES_SAVE_ON_RESTART — Saves current firewall " @@ -2399,7 +2129,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1228 +#: IP_Tables.xml:1039 #, no-c-format msgid "" "yes — Saves existing rules to /etc/" @@ -2409,7 +2139,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1233 +#: IP_Tables.xml:1044 #, no-c-format msgid "" "no — The default value. Does not save existing " @@ -2417,7 +2147,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1240 +#: IP_Tables.xml:1051 #, no-c-format msgid "" "IPTABLES_SAVE_COUNTER — Saves and restores all " @@ -2426,13 +2156,13 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1245 +#: IP_Tables.xml:1056 #, no-c-format msgid "yes — Saves the counter values." msgstr "" #. Tag: para -#: IP_Tables.xml:1250 +#: IP_Tables.xml:1061 #, no-c-format msgid "" "no — The default value. Does not save the counter " @@ -2440,7 +2170,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1257 +#: IP_Tables.xml:1068 #, no-c-format msgid "" "IPTABLES_STATUS_NUMERIC — Outputs IP addresses in " @@ -2449,7 +2179,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1262 +#: IP_Tables.xml:1073 #, no-c-format msgid "" "yes — The default value. Returns only IP addresses " @@ -2457,7 +2187,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1267 +#: IP_Tables.xml:1078 #, no-c-format msgid "" "no — Returns domain or hostnames within a status " @@ -2465,19 +2195,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1279 +#: IP_Tables.xml:1090 #, no-c-format msgid "IPTables and IPv6" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:1282 -#, no-c-format -msgid "introducing" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1284 +#: IP_Tables.xml:1091 #, no-c-format msgid "" "If the iptables-ipv6 package is installed, netfilter in " @@ -2486,7 +2210,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1287 +#: IP_Tables.xml:1094 #, no-c-format msgid "" "Most directives for this command are identical to those used for " @@ -2496,7 +2220,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1290 +#: IP_Tables.xml:1097 #, no-c-format msgid "" "Rules for ip6tables are saved in the /etc/" @@ -2506,7 +2230,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1293 +#: IP_Tables.xml:1100 #, no-c-format msgid "" "Configuration options for the ip6tables init script are " @@ -2516,7 +2240,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1296 +#: IP_Tables.xml:1103 #, no-c-format msgid "" "For example, the iptables-config directive " @@ -2526,19 +2250,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1302 +#: IP_Tables.xml:1109 #, no-c-format msgid "Additional Resources" msgstr "" -#. Tag: secondary -#: IP_Tables.xml:1305 IP_Tables.xml:1321 IP_Tables.xml:1337 -#, no-c-format -msgid "additional resources" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1307 +#: IP_Tables.xml:1110 #, no-c-format msgid "" "Refer to the following sources for additional information on packet " @@ -2546,7 +2264,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1312 +#: IP_Tables.xml:1115 #, no-c-format msgid "" "— Contains a chapter about the role of firewalls within an overall " @@ -2554,19 +2272,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1318 +#: IP_Tables.xml:1121 #, no-c-format msgid "Installed IP Tables Documentation" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:1322 -#, no-c-format -msgid "installed documentation" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1326 +#: IP_Tables.xml:1124 #, no-c-format msgid "" "man iptables — Contains a description of " @@ -2575,19 +2287,13 @@ msgid "" msgstr "" #. Tag: title -#: IP_Tables.xml:1334 +#: IP_Tables.xml:1132 #, no-c-format msgid "Useful IP Tables Websites" msgstr "" -#. Tag: tertiary -#: IP_Tables.xml:1338 -#, no-c-format -msgid "useful websites" -msgstr "" - #. Tag: para -#: IP_Tables.xml:1342 +#: IP_Tables.xml:1135 #, no-c-format msgid "" "http://www.netfilter.org/ " @@ -2599,7 +2305,7 @@ msgid "" msgstr "" #. Tag: para -#: IP_Tables.xml:1347 +#: IP_Tables.xml:1140 #, no-c-format msgid "" "\n" "Language-Team: LANGUAGE \n" @@ -17,26 +17,11 @@ msgstr "" #. Tag: title #: Kerberos.xml:6 #, no-c-format -msgid "Kerberos" -msgstr "" - -#. Tag: primary -#: Kerberos.xml:8 Kerberos.xml:35 Kerberos.xml:52 Kerberos.xml:95 -#: Kerberos.xml:268 Kerberos.xml:272 Kerberos.xml:276 Kerberos.xml:280 -#: Kerberos.xml:284 Kerberos.xml:343 Kerberos.xml:364 Kerberos.xml:455 -#: Kerberos.xml:748 Kerberos.xml:757 Kerberos.xml:863 -#, no-c-format -msgid "Kerberos" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:9 -#, no-c-format -msgid "definition of" +msgid "Kerberos" msgstr "" #. Tag: para -#: Kerberos.xml:11 +#: Kerberos.xml:7 #, no-c-format msgid "" "System security and integrity within a network can be unwieldy. It can " @@ -46,7 +31,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:14 +#: Kerberos.xml:10 #, no-c-format msgid "" "Further, authenticating users to network services can prove dangerous when " @@ -56,7 +41,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:17 +#: Kerberos.xml:13 #, no-c-format msgid "" "Kerberos is a way to eliminate the need for protocols that allow unsafe " @@ -64,13 +49,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:21 +#: Kerberos.xml:17 #, no-c-format msgid "What is Kerberos?" msgstr "" #. Tag: para -#: Kerberos.xml:22 +#: Kerberos.xml:18 #, no-c-format msgid "" "Kerberos is a network authentication protocol created by MIT, and uses " @@ -81,7 +66,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:29 +#: Kerberos.xml:25 #, no-c-format msgid "" "Consequently, when users authenticate to network services using Kerberos, " @@ -90,19 +75,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:33 +#: Kerberos.xml:29 #, no-c-format msgid "Advantages of Kerberos" msgstr "" -#. Tag: secondary -#: Kerberos.xml:36 -#, no-c-format -msgid "advantages of" -msgstr "" - #. Tag: para -#: Kerberos.xml:38 +#: Kerberos.xml:30 #, no-c-format msgid "" "Most conventional network services use password-based authentication " @@ -115,7 +94,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:41 +#: Kerberos.xml:33 #, no-c-format msgid "" "Even if this is the case, a network that is connected to the Internet can no " @@ -126,7 +105,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:44 +#: Kerberos.xml:36 #, no-c-format msgid "" "The primary design goal of Kerberos is to eliminate the transmission of " @@ -136,19 +115,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:50 +#: Kerberos.xml:42 #, no-c-format msgid "Disadvantages of Kerberos" msgstr "" -#. Tag: secondary -#: Kerberos.xml:53 -#, no-c-format -msgid "disadvantages of" -msgstr "" - #. Tag: para -#: Kerberos.xml:55 +#: Kerberos.xml:43 #, no-c-format msgid "" "Although Kerberos removes a common and severe security threat, it may be " @@ -156,7 +129,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:60 +#: Kerberos.xml:48 #, no-c-format msgid "" "Migrating user passwords from a standard UNIX password database, such as " @@ -167,13 +140,13 @@ msgid "" msgstr "" #. Tag: ulink -#: Kerberos.xml:64 +#: Kerberos.xml:52 #, no-c-format msgid "http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html" msgstr "" #. Tag: para -#: Kerberos.xml:68 +#: Kerberos.xml:56 #, no-c-format msgid "" "Kerberos has only partial compatibility with the Pluggable Authentication " @@ -183,7 +156,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:73 +#: Kerberos.xml:61 #, no-c-format msgid "" "Kerberos assumes that each user is trusted but is using an untrusted host on " @@ -196,7 +169,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:78 +#: Kerberos.xml:66 #, no-c-format msgid "" "For an application to use Kerberos, its source must be modified to make the " @@ -211,7 +184,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:83 +#: Kerberos.xml:71 #, no-c-format msgid "" "Kerberos is an all-or-nothing solution. If Kerberos is used on the network, " @@ -224,19 +197,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:93 +#: Kerberos.xml:81 #, no-c-format msgid "Kerberos Terminology" msgstr "" -#. Tag: secondary -#: Kerberos.xml:96 -#, no-c-format -msgid "terminology" -msgstr "" - #. Tag: para -#: Kerberos.xml:98 +#: Kerberos.xml:82 #, no-c-format msgid "" "Kerberos has its own terminology to define various aspects of the service. " @@ -245,13 +212,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:103 +#: Kerberos.xml:87 #, no-c-format msgid "authentication server (AS)" msgstr "" #. Tag: para -#: Kerberos.xml:105 +#: Kerberos.xml:89 #, no-c-format msgid "" "A server that issues tickets for a desired service which are in turn given " @@ -263,25 +230,25 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:111 +#: Kerberos.xml:95 #, no-c-format msgid "ciphertext" msgstr "" #. Tag: para -#: Kerberos.xml:113 +#: Kerberos.xml:97 #, no-c-format msgid "Encrypted data." msgstr "" #. Tag: term -#: Kerberos.xml:119 +#: Kerberos.xml:103 #, no-c-format msgid "client" msgstr "" #. Tag: para -#: Kerberos.xml:121 +#: Kerberos.xml:105 #, no-c-format msgid "" "An entity on the network (a user, a host, or an application) that can " @@ -289,13 +256,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:127 +#: Kerberos.xml:111 #, no-c-format msgid "credentials" msgstr "" #. Tag: para -#: Kerberos.xml:129 +#: Kerberos.xml:113 #, no-c-format msgid "" "A temporary set of electronic credentials that verify the identity of a " @@ -303,13 +270,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:135 +#: Kerberos.xml:119 #, no-c-format msgid "credential cache or ticket file" msgstr "" #. Tag: para -#: Kerberos.xml:137 +#: Kerberos.xml:121 #, no-c-format msgid "" "A file which contains the keys for encrypting communications between a user " @@ -319,13 +286,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:143 +#: Kerberos.xml:127 #, no-c-format msgid "crypt hash" msgstr "" #. Tag: para -#: Kerberos.xml:145 +#: Kerberos.xml:129 #, no-c-format msgid "" "A one-way hash used to authenticate users. These are more secure than using " @@ -334,13 +301,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:151 +#: Kerberos.xml:135 #, no-c-format msgid "GSS-API" msgstr "" #. Tag: para -#: Kerberos.xml:153 +#: Kerberos.xml:137 #, no-c-format msgid "" "The Generic Security Service Application Program Interface (defined in RFC-" @@ -352,13 +319,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:159 +#: Kerberos.xml:143 #, no-c-format msgid "hash" msgstr "" #. Tag: para -#: Kerberos.xml:161 +#: Kerberos.xml:145 #, no-c-format msgid "" "Also known as a hash value. A value generated by " @@ -368,13 +335,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:167 +#: Kerberos.xml:151 #, no-c-format msgid "hash function" msgstr "" #. Tag: para -#: Kerberos.xml:169 +#: Kerberos.xml:153 #, no-c-format msgid "" "A way of generating a digital \"fingerprint\" from input data. These " @@ -383,13 +350,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:175 +#: Kerberos.xml:159 #, no-c-format msgid "key" msgstr "" #. Tag: para -#: Kerberos.xml:177 +#: Kerberos.xml:161 #, no-c-format msgid "" "Data used when encrypting or decrypting other data. Encrypted data cannot be " @@ -398,13 +365,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:183 +#: Kerberos.xml:167 #, no-c-format msgid "key distribution center (KDC)" msgstr "" #. Tag: para -#: Kerberos.xml:185 +#: Kerberos.xml:169 #, no-c-format msgid "" "A service that issues Kerberos tickets, and which usually run on the same " @@ -412,13 +379,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:191 +#: Kerberos.xml:175 #, no-c-format msgid "keytab (or key table)" msgstr "" #. Tag: para -#: Kerberos.xml:193 +#: Kerberos.xml:177 #, no-c-format msgid "" "A file that includes an unencrypted list of principals and their keys. " @@ -430,13 +397,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:199 +#: Kerberos.xml:183 #, no-c-format msgid "kinit" msgstr "" #. Tag: para -#: Kerberos.xml:201 +#: Kerberos.xml:185 #, no-c-format msgid "" "The kinit command allows a principal who has already " @@ -445,13 +412,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:207 +#: Kerberos.xml:191 #, no-c-format msgid "principal (or principal name)" msgstr "" #. Tag: para -#: Kerberos.xml:209 +#: Kerberos.xml:193 #, no-c-format msgid "" "The principal is the unique name of a user or service allowed to " @@ -467,13 +434,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:215 +#: Kerberos.xml:199 #, no-c-format msgid "realm" msgstr "" #. Tag: para -#: Kerberos.xml:217 +#: Kerberos.xml:201 #, no-c-format msgid "" "A network that uses Kerberos, composed of one or more servers called KDCs " @@ -481,25 +448,25 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:223 +#: Kerberos.xml:207 #, no-c-format msgid "service" msgstr "" #. Tag: para -#: Kerberos.xml:225 +#: Kerberos.xml:209 #, no-c-format msgid "A program accessed over the network." msgstr "" #. Tag: term -#: Kerberos.xml:231 +#: Kerberos.xml:215 #, no-c-format msgid "ticket" msgstr "" #. Tag: para -#: Kerberos.xml:233 +#: Kerberos.xml:217 #, no-c-format msgid "" "A temporary set of electronic credentials that verify the identity of a " @@ -507,13 +474,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:239 +#: Kerberos.xml:223 #, no-c-format msgid "ticket-granting server (TGS)" msgstr "" #. Tag: para -#: Kerberos.xml:241 +#: Kerberos.xml:225 #, no-c-format msgid "" "A server that issues tickets for a desired service which are in turn given " @@ -522,13 +489,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:247 +#: Kerberos.xml:231 #, no-c-format msgid "ticket-granting ticket (TGT)" msgstr "" #. Tag: para -#: Kerberos.xml:249 +#: Kerberos.xml:233 #, no-c-format msgid "" "A special ticket that allows the client to obtain additional tickets without " @@ -536,55 +503,25 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:255 +#: Kerberos.xml:239 #, no-c-format msgid "unencrypted password" msgstr "" #. Tag: para -#: Kerberos.xml:257 +#: Kerberos.xml:241 #, no-c-format msgid "A plain text, human-readable password." msgstr "" #. Tag: title -#: Kerberos.xml:266 +#: Kerberos.xml:250 #, no-c-format msgid "How Kerberos Works" msgstr "" -#. Tag: secondary -#: Kerberos.xml:269 -#, no-c-format -msgid "how it works" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:273 -#, no-c-format -msgid "Authentication Server (AS)" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:277 -#, no-c-format -msgid "Key Distribution Center (KDC)" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:281 -#, no-c-format -msgid "Ticket-granting Ticket (TGT)" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:285 -#, no-c-format -msgid "Ticket-granting Server (TGS)" -msgstr "" - #. Tag: para -#: Kerberos.xml:287 +#: Kerberos.xml:251 #, no-c-format msgid "" "Kerberos differs from username/password authentication methods. Instead of " @@ -597,7 +534,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:290 +#: Kerberos.xml:254 #, no-c-format msgid "" "When a user on a Kerberos-aware network logs in to their workstation, their " @@ -608,7 +545,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:293 +#: Kerberos.xml:257 #, no-c-format msgid "" "The KDC then checks for the principal in its database. If the principal is " @@ -617,7 +554,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:296 +#: Kerberos.xml:260 #, no-c-format msgid "" "The login or kinit program on the client then decrypts " @@ -627,7 +564,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:299 +#: Kerberos.xml:263 #, no-c-format msgid "" "The TGT is set to expire after a certain period of time (usually ten to " @@ -639,7 +576,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:302 +#: Kerberos.xml:266 #, no-c-format msgid "" "Whenever the user needs access to a network service, the client software " @@ -649,13 +586,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:306 +#: Kerberos.xml:270 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Kerberos.xml:307 +#: Kerberos.xml:271 #, no-c-format msgid "" "The Kerberos system can be compromised if a user on the network " @@ -667,7 +604,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:311 +#: Kerberos.xml:275 #, no-c-format msgid "" "This is only a broad overview of how Kerberos authentication works. Refer to " @@ -676,26 +613,26 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:315 Kerberos.xml:413 Kerberos.xml:439 Kerberos.xml:734 +#: Kerberos.xml:279 Kerberos.xml:365 Kerberos.xml:391 Kerberos.xml:683 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Kerberos.xml:316 +#: Kerberos.xml:280 #, no-c-format msgid "" "Kerberos depends on the following network services to function correctly." msgstr "" #. Tag: para -#: Kerberos.xml:320 +#: Kerberos.xml:284 #, no-c-format msgid "Approximate clock synchronization between the machines on the network." msgstr "" #. Tag: para -#: Kerberos.xml:323 +#: Kerberos.xml:287 #, no-c-format msgid "" "A clock synchronization program should be set up for the network, such as " @@ -707,13 +644,13 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:328 +#: Kerberos.xml:292 #, no-c-format msgid "Domain Name Service (DNS)." msgstr "" #. Tag: para -#: Kerberos.xml:331 +#: Kerberos.xml:295 #, no-c-format msgid "" "You should ensure that the DNS entries and hosts on the network are all " @@ -726,31 +663,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:341 +#: Kerberos.xml:305 #, no-c-format msgid "Kerberos and PAM" msgstr "" -#. Tag: secondary -#: Kerberos.xml:344 -#, no-c-format -msgid "and PAM" -msgstr "" - -#. Tag: primary -#: Kerberos.xml:347 -#, no-c-format -msgid "PAM" -msgstr "" - -#. Tag: secondary -#: Kerberos.xml:348 -#, no-c-format -msgid "Kerberos and" -msgstr "" - #. Tag: para -#: Kerberos.xml:350 +#: Kerberos.xml:306 #, no-c-format msgid "" "Kerberos-aware services do not currently make use of Pluggable " @@ -767,13 +686,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:354 +#: Kerberos.xml:310 #, no-c-format -msgid "Tip" +msgid "Important" msgstr "" #. Tag: para -#: Kerberos.xml:355 +#: Kerberos.xml:311 #, no-c-format msgid "" "Administrators should be careful not to allow users to authenticate to most " @@ -785,19 +704,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:362 +#: Kerberos.xml:318 #, no-c-format msgid "Configuring a Kerberos 5 Server" msgstr "" -#. Tag: secondary -#: Kerberos.xml:365 -#, no-c-format -msgid "server set up" -msgstr "" - #. Tag: para -#: Kerberos.xml:367 +#: Kerberos.xml:319 #, no-c-format msgid "" "When setting up Kerberos, install the KDC first. If it is necessary to set " @@ -805,13 +718,13 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:370 +#: Kerberos.xml:322 #, no-c-format msgid "To configure the first Kerberos KDC, follow these steps:" msgstr "" #. Tag: para -#: Kerberos.xml:375 +#: Kerberos.xml:327 #, no-c-format msgid "" "Ensure that time synchronization and DNS are functioning correctly on all " @@ -825,7 +738,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:378 +#: Kerberos.xml:330 #, no-c-format msgid "" "It is advisable to set up a Network Time Protocol (NTP) compatible client/" @@ -840,7 +753,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:383 +#: Kerberos.xml:335 #, no-c-format msgid "" "Install the krb5-libs, krb5-server/etc/krb5.conf and /var/kerberos/" @@ -866,7 +779,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:393 +#: Kerberos.xml:345 #, no-c-format msgid "" "Create the database using the kdb5_util utility from a " @@ -874,13 +787,13 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:396 +#: Kerberos.xml:348 #, no-c-format msgid "/usr/kerberos/sbin/kdb5_util create -s" msgstr "" #. Tag: para -#: Kerberos.xml:397 +#: Kerberos.xml:349 #, no-c-format msgid "" "The create command creates the database that stores keys " @@ -892,7 +805,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:402 +#: Kerberos.xml:354 #, no-c-format msgid "" "Edit the /var/kerberos/krb5kdc/kadm5.acl file. This " @@ -902,13 +815,13 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:405 +#: Kerberos.xml:357 #, no-c-format msgid "*/admin@EXAMPLE.COM  *" msgstr "" #. Tag: para -#: Kerberos.xml:406 +#: Kerberos.xml:358 #, no-c-format msgid "" "Most users are represented in the database by a single principal (with a " @@ -920,7 +833,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:409 +#: Kerberos.xml:361 #, no-c-format msgid "" "After kadmind has been started on the server, any user " @@ -931,7 +844,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:414 +#: Kerberos.xml:366 #, no-c-format msgid "" "The kadmin utility communicates with the " @@ -944,7 +857,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:418 +#: Kerberos.xml:370 #, no-c-format msgid "" "Type the following kadmin.local command at the KDC " @@ -952,7 +865,7 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:421 +#: Kerberos.xml:373 #, no-c-format msgid "" "/usr/kerberos/sbin/kadmin.local -q \"addprinc usernameaddprinc command " @@ -987,7 +900,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:435 +#: Kerberos.xml:387 #, no-c-format msgid "" "Verify that the KDC is issuing tickets. First, run kinit " @@ -998,7 +911,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:440 +#: Kerberos.xml:392 #, no-c-format msgid "" "By default, kinit attempts to authenticate using the same " @@ -1010,26 +923,20 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:447 +#: Kerberos.xml:399 #, no-c-format msgid "" "Once these steps are completed, the Kerberos server should be up and running." msgstr "" #. Tag: title -#: Kerberos.xml:453 +#: Kerberos.xml:405 #, no-c-format msgid "Configuring a Kerberos 5 Client" msgstr "" -#. Tag: secondary -#: Kerberos.xml:456 -#, no-c-format -msgid "clients set up" -msgstr "" - #. Tag: para -#: Kerberos.xml:458 +#: Kerberos.xml:406 #, no-c-format msgid "" "Setting up a Kerberos 5 client is less involved than setting up a server. At " @@ -1042,7 +949,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:463 +#: Kerberos.xml:411 #, no-c-format msgid "" "Be sure that time synchronization is in place between the Kerberos client " @@ -1053,7 +960,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:468 +#: Kerberos.xml:416 #, no-c-format msgid "" "Install the krb5-libs and krb5-workstationkadmin, add a host principal for the workstation on " @@ -1089,13 +996,13 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:479 +#: Kerberos.xml:427 #, no-c-format msgid "addprinc -randkey host/blah.example.com" msgstr "" #. Tag: para -#: Kerberos.xml:480 +#: Kerberos.xml:428 #, no-c-format msgid "" "Now that the principal has been created, keys can be extracted for the " @@ -1105,14 +1012,14 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:483 +#: Kerberos.xml:431 #, no-c-format msgid "" "ktadd -k /etc/krb5.keytab host/blah.example.com" msgstr "" #. Tag: para -#: Kerberos.xml:486 +#: Kerberos.xml:434 #, no-c-format msgid "" "To use other kerberized network services, they must first be started. Below " @@ -1121,7 +1028,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:491 +#: Kerberos.xml:439 #, no-c-format msgid "" "ssh — OpenSSH uses GSS-API to authenticate users to " @@ -1132,7 +1039,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:496 +#: Kerberos.xml:444 #, no-c-format msgid "" "rsh and rlogin — To use the " @@ -1142,7 +1049,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:501 +#: Kerberos.xml:449 #, no-c-format msgid "" "Telnet — To use kerberized Telnet, krb5-telnet must " @@ -1150,7 +1057,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:506 +#: Kerberos.xml:454 #, no-c-format msgid "" "FTP — To provide FTP access, create and extract a key for the " @@ -1160,7 +1067,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:511 +#: Kerberos.xml:459 #, no-c-format msgid "" "IMAP — To use a kerberized IMAP server, the cyrus-imapcyrus-imap can be found in the " @@ -1184,7 +1091,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:519 +#: Kerberos.xml:467 #, no-c-format msgid "" "CVS — To use a kerberized CVS server, gserver uses " @@ -1193,13 +1100,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:530 +#: Kerberos.xml:478 #, no-c-format msgid "Domain-to-Realm Mapping" msgstr "" #. Tag: para -#: Kerberos.xml:531 +#: Kerberos.xml:479 #, no-c-format msgid "" "When a client attempts to access a service running on a particular server, " @@ -1210,7 +1117,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:534 +#: Kerberos.xml:482 #, no-c-format msgid "" "By default, the name of the realm is taken to be the DNS domain name of the " @@ -1218,7 +1125,7 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:537 +#: Kerberos.xml:485 #, no-c-format msgid "" "foo.example.org → EXAMPLE.ORG\n" @@ -1227,7 +1134,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:538 +#: Kerberos.xml:486 #, no-c-format msgid "" "In some configurations, this will be sufficient, but in others, the realm " @@ -1238,7 +1145,7 @@ msgid "" msgstr "" #. Tag: screen -#: Kerberos.xml:541 +#: Kerberos.xml:489 #, no-c-format msgid "" "[domain_realm]\n" @@ -1247,7 +1154,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:542 +#: Kerberos.xml:490 #, no-c-format msgid "" "The above configuration specifies two mappings. The first mapping specifies " @@ -1259,13 +1166,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:548 +#: Kerberos.xml:496 #, no-c-format msgid "Setting Up Secondary KDCs" msgstr "" #. Tag: para -#: Kerberos.xml:549 +#: Kerberos.xml:497 #, no-c-format msgid "" "For a number of reasons, you may choose to run multiple KDCs for a given " @@ -1277,7 +1184,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:552 +#: Kerberos.xml:500 #, no-c-format msgid "" "The master-slave propagation procedure entails the master KDC dumping its " @@ -1287,7 +1194,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:555 +#: Kerberos.xml:503 #, no-c-format msgid "" "To set up a slave KDC, first ensure that the master KDC's krb5." @@ -1296,7 +1203,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:558 +#: Kerberos.xml:506 #, no-c-format msgid "" "Start kadmin.local from a root shell on the master KDC " @@ -1309,29 +1216,40 @@ msgid "" "regardless of how many slave servers you install." msgstr "" -#. Tag: literallayout -#: Kerberos.xml:561 +#. Tag: screen +#: Kerberos.xml:509 #, no-c-format msgid "" -"# kadmin.local -r EXAMPLE.COM Authenticating as principal root/admin@EXAMPLE.COM with password. " +"# kadmin.local -r EXAMPLE.COM\n" +" \n" +"Authenticating as principal root/admin@EXAMPLE.COM with password. \n" +"\n" "kadmin: add_principal -randkey host/masterkdc." -"example.com Principal \"host/host/masterkdc.example.com@EXAMPLE." -"COM\" created. kadmin: ktadd host/masterkdc." -"example.com Entry for principal host/masterkdc.example.com with " -"kvno 3, encryption type Triple DES cbc mode with \\ HMAC/sha1 added to " -"keytab WRFILE:/etc/krb5.keytab. Entry for principal host/masterkdc.example." -"com with kvno 3, encryption type ArcFour with HMAC/md5 \\ added to keytab " -"WRFILE:/etc/krb5.keytab. Entry for principal host/masterkdc.example.com with " -"kvno 3, encryption type DES with HMAC/sha1 added \\ to keytab WRFILE:/etc/" -"krb5.keytab. Entry for principal host/masterkdc.example.com with kvno 3, " -"encryption type DES cbc mode with RSA-MD5 \\ added to keytab WRFILE:/etc/" -"krb5.keytab. kadmin: quit" +"example.com \n" +"\n" +"Principal \"host/host/masterkdc.example.com@EXAMPLE.COM\" created. \n" +"\n" +"kadmin: ktadd host/masterkdc.example.com \n" +"\n" +"Entry for principal host/masterkdc.example.com with kvno 3, encryption type " +"Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5." +"keytab. \n" +"\n" +"Entry for principal host/masterkdc.example.com with kvno 3, encryption type " +"ArcFour with HMAC/md5 added to keytab WRFILE:/etc/krb5.keytab. \n" +"\n" +"Entry for principal host/masterkdc.example.com with kvno 3, encryption type " +"DES with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab. \n" +"\n" +"Entry for principal host/masterkdc.example.com with kvno 3, encryption type " +"DES cbc mode with RSA-MD5 added to keytab WRFILE:/etc/krb5.keytab.\n" +" \n" +"kadmin: quit" msgstr "" #. Tag: para -#: Kerberos.xml:562 +#: Kerberos.xml:511 #, no-c-format msgid "" "Start kadmin from a root shell on the slave KDC and use " @@ -1343,30 +1261,43 @@ msgid "" "kpropd service when authenticating clients." msgstr "" -#. Tag: literallayout -#: Kerberos.xml:565 +#. Tag: screen +#: Kerberos.xml:514 #, no-c-format msgid "" -"# kadmin -p jimbo/admin@EXAMPLE." -"COM -r EXAMPLE.COM Authenticating as principal jimbo/" -"admin@EXAMPLE.COM with password. Password for jimbo/admin@EXAMPLE." -"COM: kadmin: add_principal -randkey " -"host/slavekdc.example.com Principal \"host/slavekdc.example." -"com@EXAMPLE.COM\" created. kadmin: ktadd host/" -"slavekdc.example.com@EXAMPLE.COM Entry for principal host/" -"slavekdc.example.com with kvno 3, encryption type Triple DES cbc mode with " -"\\ HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab. Entry for principal " -"host/slavekdc.example.com with kvno 3, encryption type ArcFour with HMAC/md5 " -"added \\ to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/" -"slavekdc.example.com with kvno 3, encryption type DES with HMAC/sha1 added " -"\\ to keytab WRFILE:/etc/krb5.keytab. Entry for principal host/slavekdc." -"example.com with kvno 3, encryption type DES cbc mode with RSA-MD5 added \\ " -"to keytab WRFILE:/etc/krb5.keytab. kadmin: quit" -msgstr "" - -#. Tag: para -#: Kerberos.xml:566 +"# kadmin -p jimbo/admin@EXAMPLE.COM -r EXAMPLE." +"COM\n" +"\n" +"Authenticating as principal jimbo/admin@EXAMPLE.COM with password. \n" +"\n" +"Password for jimbo/admin@EXAMPLE.COM: \n" +"\n" +"kadmin: add_principal -randkey host/slavekdc." +"example.com \n" +"\n" +"Principal \"host/slavekdc.example.com@EXAMPLE.COM\" created. \n" +"\n" +"kadmin: ktadd host/slavekdc.example.com@EXAMPLE." +"COM \n" +"\n" +"Entry for principal host/slavekdc.example.com with kvno 3, encryption type " +"Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/etc/krb5." +"keytab. \n" +"\n" +"Entry for principal host/slavekdc.example.com with kvno 3, encryption type " +"ArcFour with HMAC/md5 added to keytab WRFILE:/etc/krb5.keytab. \n" +"\n" +"Entry for principal host/slavekdc.example.com with kvno 3, encryption type " +"DES with HMAC/sha1 added to keytab WRFILE:/etc/krb5.keytab. \n" +"\n" +"Entry for principal host/slavekdc.example.com with kvno 3, encryption type " +"DES cbc mode with RSA-MD5 added to keytab WRFILE:/etc/krb5.keytab. \n" +"\n" +"kadmin: quit" +msgstr "" + +#. Tag: para +#: Kerberos.xml:515 #, no-c-format msgid "" "With its service key, the slave KDC could authenticate any client which " @@ -1379,7 +1310,7 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:569 +#: Kerberos.xml:518 #, no-c-format msgid "" "# echo host/masterkdc.example." @@ -1388,7 +1319,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:570 +#: Kerberos.xml:519 #, no-c-format msgid "" "Once the slave KDC has obtained a copy of the database, it will also need " @@ -1403,7 +1334,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:573 +#: Kerberos.xml:522 #, no-c-format msgid "" "Ensure that the slave KDC's firewall allows the master KDC to contact it " @@ -1413,7 +1344,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:576 +#: Kerberos.xml:525 #, no-c-format msgid "" "Now perform a manual database propagation test by dumping the realm " @@ -1424,7 +1355,7 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:579 +#: Kerberos.xml:528 #, no-c-format msgid "" "# /usr/kerberos/sbin/kdb5_util " @@ -1433,7 +1364,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:580 +#: Kerberos.xml:529 #, no-c-format msgid "" "Using kinit, verify that a client system whose " @@ -1443,7 +1374,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:583 +#: Kerberos.xml:532 #, no-c-format msgid "" "That done, simply create a script which dumps the realm database and runs " @@ -1453,13 +1384,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:589 +#: Kerberos.xml:538 #, no-c-format msgid "Setting Up Cross Realm Authentication" msgstr "" #. Tag: para -#: Kerberos.xml:590 +#: Kerberos.xml:539 #, no-c-format msgid "" "Cross-realm authentication is the term which is used to " @@ -1469,7 +1400,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:593 +#: Kerberos.xml:542 #, no-c-format msgid "" "For the simplest case, in order for a client of a realm named A." @@ -1480,7 +1411,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:596 +#: Kerberos.xml:545 #, no-c-format msgid "" "To accomplish this, select a very strong password or passphrase, and create " @@ -1488,7 +1419,7 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:599 +#: Kerberos.xml:548 #, no-c-format msgid "" "# kadmin -r A.EXAMPLE.COMget_principal command to verify that both entries " @@ -1522,13 +1453,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:604 +#: Kerberos.xml:553 #, no-c-format msgid "Dumping the Database Doesn't Do It" msgstr "" #. Tag: para -#: Kerberos.xml:605 +#: Kerberos.xml:554 #, no-c-format msgid "" "Security-conscious administrators may attempt to use the " @@ -1541,7 +1472,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:609 +#: Kerberos.xml:558 #, no-c-format msgid "" "Clients in the A.EXAMPLE.COM realm are now able to " @@ -1553,7 +1484,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:612 +#: Kerberos.xml:561 #, no-c-format msgid "" "This brings us to an important point: cross-realm trust is unidirectional by " @@ -1569,7 +1500,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:615 +#: Kerberos.xml:564 #, no-c-format msgid "" "If direct trust relationships were the only method for providing trust " @@ -1587,7 +1518,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:618 +#: Kerberos.xml:567 #, no-c-format msgid "" "Now you face the more conventional problems: the client's system must be " @@ -1597,7 +1528,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:621 +#: Kerberos.xml:570 #, no-c-format msgid "" "First things first: the principal name for a service provided from a " @@ -1605,13 +1536,13 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:624 +#: Kerberos.xml:573 #, no-c-format msgid "service/server.example.com@EXAMPLE.COM" msgstr "" #. Tag: para -#: Kerberos.xml:625 +#: Kerberos.xml:574 #, no-c-format msgid "" "In this example, service is typically either the name " @@ -1624,7 +1555,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:628 +#: Kerberos.xml:577 #, no-c-format msgid "" "To deduce the realm to which the service belongs, clients will most often " @@ -1635,7 +1566,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:631 +#: Kerberos.xml:580 #, no-c-format msgid "" "Having determined which to which realm a service belongs, a client then has " @@ -1645,13 +1576,13 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:634 +#: Kerberos.xml:583 #, no-c-format msgid "This can be done in one of two ways." msgstr "" #. Tag: para -#: Kerberos.xml:637 +#: Kerberos.xml:586 #, no-c-format msgid "" "The default method, which requires no explicit configuration, is to give the " @@ -1665,7 +1596,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:640 +#: Kerberos.xml:589 #, no-c-format msgid "" "The client in this scenario treats the realm name as one might treat a DNS " @@ -1678,7 +1609,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:643 +#: Kerberos.xml:592 #, no-c-format msgid "" "For example, using credentials in A.EXAMPLE.COM, " @@ -1687,7 +1618,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:649 +#: Kerberos.xml:598 #, no-c-format msgid "" "A.EXAMPLE.COM and EXAMPLE.COM share a " @@ -1695,7 +1626,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:654 +#: Kerberos.xml:603 #, no-c-format msgid "" "EXAMPLE.COM and B.EXAMPLE.COM share a " @@ -1703,7 +1634,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:660 +#: Kerberos.xml:609 #, no-c-format msgid "" "Another example, using credentials in SITE1.SALES.EXAMPLE.COMSITE1.SALES.EXAMPLE.COM and SALES.EXAMPLE.COMSALES.EXAMPLE.COM and EXAMPLE.COM " @@ -1730,7 +1661,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:676 +#: Kerberos.xml:625 #, no-c-format msgid "" "EXAMPLE.COM and EVERYWHERE.EXAMPLE.COM " @@ -1738,7 +1669,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:682 +#: Kerberos.xml:631 #, no-c-format msgid "" "Another example, this time using realm names whose names share no common " @@ -1748,7 +1679,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:688 +#: Kerberos.xml:637 #, no-c-format msgid "" "DEVEL.EXAMPLE.COM and EXAMPLE.COM " @@ -1756,7 +1687,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:693 +#: Kerberos.xml:642 #, no-c-format msgid "" "EXAMPLE.COM and COM share a key for " @@ -1764,7 +1695,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:698 +#: Kerberos.xml:647 #, no-c-format msgid "" "COM and ORG share a key for " @@ -1772,7 +1703,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:703 +#: Kerberos.xml:652 #, no-c-format msgid "" "ORG and EXAMPLE.ORG share a key for " @@ -1780,7 +1711,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:708 +#: Kerberos.xml:657 #, no-c-format msgid "" "EXAMPLE.ORG and PROD.EXAMPLE.ORG share " @@ -1788,7 +1719,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:714 +#: Kerberos.xml:663 #, no-c-format msgid "" "The more complicated, but also more flexible, method involves configuring " @@ -1799,7 +1730,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:717 +#: Kerberos.xml:666 #, no-c-format msgid "" "The format of the capaths section is relatively " @@ -1811,13 +1742,13 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:720 +#: Kerberos.xml:669 #, no-c-format msgid "Here's an example:" msgstr "" #. Tag: literallayout -#: Kerberos.xml:723 +#: Kerberos.xml:672 #, no-c-format msgid "" "[capaths]\n" @@ -1830,7 +1761,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:724 +#: Kerberos.xml:673 #, no-c-format msgid "" "In this example, clients in the A.EXAMPLE.COM realm can " @@ -1839,7 +1770,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:727 +#: Kerberos.xml:676 #, no-c-format msgid "" "If those clients wish to contact a service in theC.EXAMPLE.COMD.EXAMPLE.COMA.EXAMPLE.COM realm can obtain cross-realm " @@ -1881,43 +1812,31 @@ msgid "" msgstr "" #. Tag: literallayout -#: Kerberos.xml:741 +#: Kerberos.xml:690 #, no-c-format msgid "A.EXAMPLE.COM → EXAMPLE.COM → B.EXAMPLE.COM" msgstr "" #. Tag: title -#: Kerberos.xml:746 +#: Kerberos.xml:695 #, no-c-format msgid "Additional Resources" msgstr "" -#. Tag: secondary -#: Kerberos.xml:749 Kerberos.xml:758 Kerberos.xml:864 -#, no-c-format -msgid "additional resources" -msgstr "" - #. Tag: para -#: Kerberos.xml:751 +#: Kerberos.xml:696 #, no-c-format msgid "For more information about Kerberos, refer to the following resources." msgstr "" #. Tag: title -#: Kerberos.xml:755 +#: Kerberos.xml:700 #, no-c-format msgid "Installed Kerberos Documentation" msgstr "" -#. Tag: tertiary -#: Kerberos.xml:759 -#, no-c-format -msgid "installed documentation" -msgstr "" - #. Tag: para -#: Kerberos.xml:763 +#: Kerberos.xml:703 #, no-c-format msgid "" "The Kerberos V5 Installation Guide and the " @@ -1930,7 +1849,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:768 +#: Kerberos.xml:708 #, no-c-format msgid "" "The Kerberos V5 UNIX User's Guide in PostScript " @@ -1942,7 +1861,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:773 +#: Kerberos.xml:713 #, no-c-format msgid "" "Kerberos man pages — There are a number of man pages for the various " @@ -1952,13 +1871,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:778 +#: Kerberos.xml:718 #, no-c-format msgid "Client Applications" msgstr "" #. Tag: para -#: Kerberos.xml:782 +#: Kerberos.xml:722 #, no-c-format msgid "" "man kerberos — An introduction to the Kerberos " @@ -1968,7 +1887,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:787 +#: Kerberos.xml:727 #, no-c-format msgid "" "man kinit — Describes how to use this command to " @@ -1976,7 +1895,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:792 +#: Kerberos.xml:732 #, no-c-format msgid "" "man kdestroy — Describes how to use this command to " @@ -1984,7 +1903,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:797 +#: Kerberos.xml:737 #, no-c-format msgid "" "man klist — Describes how to use this command to " @@ -1992,13 +1911,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:805 +#: Kerberos.xml:745 #, no-c-format msgid "Administrative Applications" msgstr "" #. Tag: para -#: Kerberos.xml:809 +#: Kerberos.xml:749 #, no-c-format msgid "" "man kadmin — Describes how to use this command to " @@ -2006,7 +1925,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:814 +#: Kerberos.xml:754 #, no-c-format msgid "" "man kdb5_util — Describes how to use this command " @@ -2015,13 +1934,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:822 +#: Kerberos.xml:762 #, no-c-format msgid "Server Applications" msgstr "" #. Tag: para -#: Kerberos.xml:826 +#: Kerberos.xml:766 #, no-c-format msgid "" "man krb5kdc — Describes available command line " @@ -2029,7 +1948,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:831 +#: Kerberos.xml:771 #, no-c-format msgid "" "man kadmind — Describes available command line " @@ -2037,13 +1956,13 @@ msgid "" msgstr "" #. Tag: term -#: Kerberos.xml:839 +#: Kerberos.xml:779 #, no-c-format msgid "Configuration Files" msgstr "" #. Tag: para -#: Kerberos.xml:843 +#: Kerberos.xml:783 #, no-c-format msgid "" "man krb5.conf — Describes the format and options " @@ -2051,7 +1970,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:848 +#: Kerberos.xml:788 #, no-c-format msgid "" "man kdc.conf — Describes the format and options " @@ -2059,19 +1978,13 @@ msgid "" msgstr "" #. Tag: title -#: Kerberos.xml:861 +#: Kerberos.xml:801 #, no-c-format msgid "Useful Kerberos Websites" msgstr "" -#. Tag: tertiary -#: Kerberos.xml:865 -#, no-c-format -msgid "useful websites" -msgstr "" - #. Tag: para -#: Kerberos.xml:869 +#: Kerberos.xml:804 #, no-c-format msgid "" "http://web.mit.edu/kerberos/" @@ -2080,7 +1993,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:874 +#: Kerberos.xml:809 #, no-c-format msgid "" "ftp://" @@ -2101,7 +2014,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:884 +#: Kerberos.xml:819 #, no-c-format msgid "" "http://web.mit." @@ -2115,7 +2028,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:889 +#: Kerberos.xml:824 #, no-c-format msgid "" "http://www.ornl.gov/" @@ -2124,7 +2037,7 @@ msgid "" msgstr "" #. Tag: para -#: Kerberos.xml:894 +#: Kerberos.xml:829 #, no-c-format msgid "" "http://" diff --git a/pot/LUKSDiskEncryption.pot b/pot/LUKSDiskEncryption.pot index 981023e..7a4b794 100644 --- a/pot/LUKSDiskEncryption.pot +++ b/pot/LUKSDiskEncryption.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -55,7 +55,7 @@ msgstr "" #: LUKSDiskEncryption.xml:15 #, no-c-format msgid "" -"Fedora 9's default implementation of LUKS is AES 128 with a SHA256 hashing. " +"Fedora's default implementation of LUKS is AES 128 with a SHA256 hashing. " "Ciphers that are available are:" msgstr "" @@ -82,13 +82,15 @@ msgstr "" #. Tag: para #: LUKSDiskEncryption.xml:35 #, no-c-format -msgid "cast5 - RFC 2144" +msgid "" +"cast5 - RFC 2144" msgstr "" #. Tag: para #: LUKSDiskEncryption.xml:40 #, no-c-format -msgid "cast6 - RFC 2612" +msgid "" +"cast6 - RFC 2612" msgstr "" #. Tag: title @@ -97,17 +99,23 @@ msgstr "" msgid "Manually Encrypting Directories" msgstr "" +#. Tag: title +#: LUKSDiskEncryption.xml:49 +#, no-c-format +msgid "Warning" +msgstr "" + #. Tag: para -#: LUKSDiskEncryption.xml:48 +#: LUKSDiskEncryption.xml:50 #, no-c-format msgid "" -"WARNING! Following this procedure will remove all data on the partition that " -"you are encrypting. You WILL lose all your information! Make sure you backup " -"your data to an external source before beginning this procedure!" +"Following this procedure will remove all data on the partition that you are " +"encrypting. You WILL lose all your information! Make sure you backup your " +"data to an external source before beginning this procedure!" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:51 +#: LUKSDiskEncryption.xml:54 #, no-c-format msgid "" "If you are running a version of Fedora prior to Fedora 9 and want to encrypt " @@ -118,7 +126,7 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:54 +#: LUKSDiskEncryption.xml:57 #, no-c-format msgid "" "The following procedure will wipe all your existing data, so be sure to have " @@ -129,25 +137,25 @@ msgid "" msgstr "" #. Tag: title -#: LUKSDiskEncryption.xml:59 +#: LUKSDiskEncryption.xml:62 #, no-c-format msgid "Step-by-Step Instructions" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:62 +#: LUKSDiskEncryption.xml:65 #, no-c-format msgid "enter runlevel 1: telinit 1" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:67 +#: LUKSDiskEncryption.xml:70 #, no-c-format msgid "unmount your existing /home: umount /home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:72 +#: LUKSDiskEncryption.xml:75 #, no-c-format msgid "" "if it fails use fuser to find and kill processes hogging /home: " @@ -155,7 +163,7 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:77 +#: LUKSDiskEncryption.xml:80 #, no-c-format msgid "" "verify /home is not mounted any longer: cat /proc/mounts | grep homedd if=/dev/urandom of=/dev/VG00/" +"LV_home This process takes many hours to complete." +msgstr "" + +#. Tag: title +#: LUKSDiskEncryption.xml:89 +#, no-c-format +msgid "Important" +msgstr "" + +#. Tag: para +#: LUKSDiskEncryption.xml:90 #, no-c-format msgid "" -"fill you partition with random data: dd if=/dev/urandom of=/dev/VG00/" -"LV_home This process takes many hours to complete. The process, " -"however, is imperative in order to have good protection against break-in " -"attempts. Just let it run overnight." +"The process, however, is imperative in order to have good protection against " +"break-in attempts. Just let it run overnight." msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:87 +#: LUKSDiskEncryption.xml:96 #, no-c-format msgid "" "initialize your partition: cryptsetup --verbose --verify-passphrase " @@ -181,7 +201,7 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:92 +#: LUKSDiskEncryption.xml:101 #, no-c-format msgid "" "open the newly encrypted device: cryptsetup luksOpen /dev/VG00/LV_home " @@ -189,38 +209,38 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:97 +#: LUKSDiskEncryption.xml:106 #, no-c-format msgid "check it's there: ls -l /dev/mapper | grep home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:102 +#: LUKSDiskEncryption.xml:111 #, no-c-format msgid "create a filesystem: mkfs.ext3 /dev/mapper/home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:107 +#: LUKSDiskEncryption.xml:116 #, no-c-format msgid "mount it: mount /dev/mapper/home /home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:112 +#: LUKSDiskEncryption.xml:121 #, no-c-format msgid "check it's visible: df -h | grep home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:117 +#: LUKSDiskEncryption.xml:126 #, no-c-format msgid "" "add the following to /etc/crypttab: home /dev/VG00/LV_home none" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:122 +#: LUKSDiskEncryption.xml:131 #, no-c-format msgid "" "edit your /etc/fstab, removing the old entry for /home and adding /dev/" @@ -228,13 +248,13 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:127 +#: LUKSDiskEncryption.xml:136 #, no-c-format msgid "verify your fstab entry: mount /home" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:132 +#: LUKSDiskEncryption.xml:141 #, no-c-format msgid "" "restore default SELinux security contexts: /sbin/restorecon -v -R /" @@ -242,13 +262,13 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:137 +#: LUKSDiskEncryption.xml:146 #, no-c-format msgid "reboot: shutdown -r now" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:142 +#: LUKSDiskEncryption.xml:151 #, no-c-format msgid "" "The entry in /etc/crypttab makes your computer ask your luks " @@ -256,19 +276,19 @@ msgid "" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:147 +#: LUKSDiskEncryption.xml:156 #, no-c-format msgid "Login as root and restore your backup" msgstr "" #. Tag: title -#: LUKSDiskEncryption.xml:154 +#: LUKSDiskEncryption.xml:163 #, no-c-format msgid "What you have just accomplished." msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:155 +#: LUKSDiskEncryption.xml:164 #, no-c-format msgid "" "Congratulations, you now have an encrypted partition for all of your data to " @@ -276,13 +296,13 @@ msgid "" msgstr "" #. Tag: title -#: LUKSDiskEncryption.xml:160 +#: LUKSDiskEncryption.xml:169 #, no-c-format msgid "Links of Interest" msgstr "" #. Tag: para -#: LUKSDiskEncryption.xml:161 +#: LUKSDiskEncryption.xml:170 #, no-c-format msgid "" "For additional information on LUKS or encrypting hard drives under Fedora " @@ -290,13 +310,13 @@ msgid "" msgstr "" #. Tag: ulink -#: LUKSDiskEncryption.xml:167 +#: LUKSDiskEncryption.xml:176 #, no-c-format msgid "LUKS - Linux Unified Key Setup" msgstr "" #. Tag: ulink -#: LUKSDiskEncryption.xml:172 +#: LUKSDiskEncryption.xml:181 #, no-c-format msgid "" "HOWTO: Creating an encrypted Physical Volume (PV) using a second hard drive, " diff --git a/pot/Pam.pot b/pot/Pam.pot index e1c5b13..6393616 100644 --- a/pot/Pam.pot +++ b/pot/Pam.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,35 +20,8 @@ msgstr "" msgid "Pluggable Authentication Modules (PAM)" msgstr "" -#. Tag: primary -#: Pam.xml:8 Pam.xml:30 Pam.xml:74 Pam.xml:83 Pam.xml:108 Pam.xml:112 -#: Pam.xml:117 Pam.xml:162 Pam.xml:207 Pam.xml:255 Pam.xml:267 Pam.xml:291 -#: Pam.xml:295 Pam.xml:340 Pam.xml:407 Pam.xml:428 Pam.xml:437 Pam.xml:468 -#: Pam.xml:473 Pam.xml:534 Pam.xml:563 Pam.xml:668 Pam.xml:677 Pam.xml:740 -#, no-c-format -msgid "PAM" -msgstr "" - -#. Tag: secondary -#: Pam.xml:9 -#, no-c-format -msgid "definition of" -msgstr "" - -#. Tag: primary -#: Pam.xml:12 -#, no-c-format -msgid "Pluggable Authentication Modules" -msgstr "" - -#. Tag: see -#: Pam.xml:13 Pam.xml:434 Pam.xml:479 Pam.xml:569 -#, no-c-format -msgid "PAM" -msgstr "" - #. Tag: para -#: Pam.xml:15 +#: Pam.xml:7 #, no-c-format msgid "" "Programs that grant users access to a system use authenticationPAM" -msgstr "" - -#. Tag: filename -#: Pam.xml:62 -#, no-c-format -msgid "/etc/pam.d" -msgstr "" - -#. Tag: filename -#: Pam.xml:66 -#, no-c-format -msgid "/lib/security/" -msgstr "" - -#. Tag: filename -#: Pam.xml:70 -#, no-c-format -msgid "/lib64/security/" -msgstr "" - -#. Tag: secondary -#: Pam.xml:75 -#, no-c-format -msgid "configuration files" -msgstr "" - #. Tag: para -#: Pam.xml:77 +#: Pam.xml:45 #, no-c-format msgid "" "The /etc/pam.d/ directory contains the PAM " @@ -184,19 +115,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:81 +#: Pam.xml:49 #, no-c-format msgid "PAM Service Files" msgstr "" -#. Tag: secondary -#: Pam.xml:84 -#, no-c-format -msgid "service files" -msgstr "" - #. Tag: para -#: Pam.xml:86 +#: Pam.xml:50 #, no-c-format msgid "" "Each PAM-aware application or service has a file in " @@ -205,7 +130,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:89 +#: Pam.xml:53 #, no-c-format msgid "" "The PAM-aware program is responsible for defining its service name and " @@ -216,13 +141,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:97 +#: Pam.xml:61 #, no-c-format msgid "PAM Configuration File Format" msgstr "" #. Tag: para -#: Pam.xml:98 +#: Pam.xml:62 #, no-c-format msgid "" "Each PAM configuration file contains a group of directives formatted as " @@ -230,7 +155,7 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:101 +#: Pam.xml:65 #, no-c-format msgid "" "<module interface> <" @@ -239,38 +164,19 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:102 +#: Pam.xml:66 #, no-c-format msgid "Each of these elements is explained in the following sections." msgstr "" #. Tag: title -#: Pam.xml:106 +#: Pam.xml:70 #, no-c-format msgid "Module Interface" msgstr "" -#. Tag: secondary -#: Pam.xml:109 Pam.xml:113 Pam.xml:118 Pam.xml:163 Pam.xml:256 Pam.xml:268 -#: Pam.xml:296 Pam.xml:408 -#, no-c-format -msgid "modules" -msgstr "" - -#. Tag: tertiary -#: Pam.xml:114 -#, no-c-format -msgid "components" -msgstr "" - -#. Tag: tertiary -#: Pam.xml:119 -#, no-c-format -msgid "interfaces" -msgstr "" - #. Tag: para -#: Pam.xml:121 +#: Pam.xml:71 #, no-c-format msgid "" "Four types of PAM module interface are currently available. Each of these " @@ -278,7 +184,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:126 +#: Pam.xml:76 #, no-c-format msgid "" "auth — This module interface authenticates use. For " @@ -288,7 +194,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:131 +#: Pam.xml:81 #, no-c-format msgid "" "account — This module interface verifies that " @@ -297,7 +203,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:136 +#: Pam.xml:86 #, no-c-format msgid "" "password — This module interface is used for " @@ -305,7 +211,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:141 +#: Pam.xml:91 #, no-c-format msgid "" "session — This module interface configures and " @@ -315,13 +221,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:147 Pam.xml:351 Pam.xml:750 +#: Pam.xml:97 Pam.xml:257 Pam.xml:591 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Pam.xml:148 +#: Pam.xml:98 #, no-c-format msgid "" "An individual module can provide any or all module interfaces. For instance, " @@ -329,7 +235,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:152 +#: Pam.xml:102 #, no-c-format msgid "" "In a PAM configuration file, the module interface is the first field " @@ -337,13 +243,13 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:155 +#: Pam.xml:105 #, no-c-format msgid "auth required pam_unix.so" msgstr "" #. Tag: para -#: Pam.xml:156 +#: Pam.xml:106 #, no-c-format msgid "" "This instructs PAM to use the pam_unix.so module's " @@ -351,19 +257,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:160 +#: Pam.xml:110 #, no-c-format msgid "Stacking Module Interfaces" msgstr "" -#. Tag: tertiary -#: Pam.xml:164 Pam.xml:297 -#, no-c-format -msgid "stacking" -msgstr "" - #. Tag: para -#: Pam.xml:166 +#: Pam.xml:111 #, no-c-format msgid "" "Module interface directives can be stacked, or placed " @@ -376,7 +276,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:169 +#: Pam.xml:114 #, no-c-format msgid "" "Stacking makes it easy for an administrator to require specific conditions " @@ -386,25 +286,25 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:172 +#: Pam.xml:117 #, no-c-format msgid "" "[root@MyServer ~]# cat /etc/pam.d/reboot\n" "#%PAM-1.0\n" "auth sufficient pam_rootok.so\n" "auth required pam_console.so\n" -"#auth include system-auth\n" +"#auth include system-auth\n" "account required pam_permit.so" msgstr "" #. Tag: para -#: Pam.xml:175 +#: Pam.xml:120 #, no-c-format msgid "The first line is a comment and is not processed." msgstr "" #. Tag: para -#: Pam.xml:180 +#: Pam.xml:125 #, no-c-format msgid "" "auth sufficient pam_rootok.so — This line uses the " @@ -415,7 +315,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:185 +#: Pam.xml:130 #, no-c-format msgid "" "auth required pam_console.so — This line uses the " @@ -428,7 +328,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:190 +#: Pam.xml:135 #, no-c-format msgid "" "#auth include system-auth — This line is commented " @@ -436,7 +336,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:195 +#: Pam.xml:140 #, no-c-format msgid "" "account required pam_permit.so — This line uses the " @@ -445,19 +345,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:205 +#: Pam.xml:150 #, no-c-format msgid "Control Flag" msgstr "" -#. Tag: secondary -#: Pam.xml:208 -#, no-c-format -msgid "control flags" -msgstr "" - #. Tag: para -#: Pam.xml:210 +#: Pam.xml:151 #, no-c-format msgid "" "All PAM modules generate a success or failure result when called. Control " @@ -468,13 +362,13 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:213 +#: Pam.xml:154 #, no-c-format msgid "There are four predefined control flags:" msgstr "" #. Tag: para -#: Pam.xml:218 +#: Pam.xml:159 #, no-c-format msgid "" "required — The module result must be successful for " @@ -484,7 +378,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:223 +#: Pam.xml:164 #, no-c-format msgid "" "requisite — The module result must be successful " @@ -495,7 +389,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:228 +#: Pam.xml:169 #, no-c-format msgid "" "sufficient — The module result is ignored if it " @@ -506,7 +400,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:233 +#: Pam.xml:174 #, no-c-format msgid "" "optional — The module result is ignored. A module " @@ -515,13 +409,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:239 +#: Pam.xml:180 #, no-c-format msgid "Important" msgstr "" #. Tag: para -#: Pam.xml:240 +#: Pam.xml:181 #, no-c-format msgid "" "The order in which required modules are called is not " @@ -530,7 +424,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:244 +#: Pam.xml:185 #, no-c-format msgid "" "A newer control flag syntax that allows for more precise control is now " @@ -538,7 +432,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:247 +#: Pam.xml:188 #, no-c-format msgid "" "The pam.d man page, and the PAM documentation, located in " @@ -549,19 +443,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:253 +#: Pam.xml:194 #, no-c-format msgid "Module Name" msgstr "" -#. Tag: tertiary -#: Pam.xml:257 -#, no-c-format -msgid "location of" -msgstr "" - #. Tag: para -#: Pam.xml:259 +#: Pam.xml:195 #, no-c-format msgid "" "The module name provides PAM with the name of the pluggable module " @@ -575,19 +463,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:265 +#: Pam.xml:201 #, no-c-format msgid "Module Arguments" msgstr "" -#. Tag: tertiary -#: Pam.xml:269 -#, no-c-format -msgid "arguments" -msgstr "" - #. Tag: para -#: Pam.xml:271 +#: Pam.xml:202 #, no-c-format msgid "" "PAM uses arguments to pass information to a pluggable " @@ -595,7 +477,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:274 +#: Pam.xml:205 #, no-c-format msgid "" "For example, the pam_userdb.so module uses information " @@ -606,7 +488,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:277 +#: Pam.xml:208 #, no-c-format msgid "" "The following is a typical pam_userdb.so line in a PAM " @@ -615,7 +497,7 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:280 +#: Pam.xml:211 #, no-c-format msgid "" "auth required pam_userdb.so db=<path-to-" @@ -623,7 +505,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:281 +#: Pam.xml:212 #, no-c-format msgid "" "Invalid arguments are generally ignored and do not " @@ -633,39 +515,33 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:289 +#: Pam.xml:220 #, no-c-format msgid "Sample PAM Configuration Files" msgstr "" -#. Tag: secondary -#: Pam.xml:292 -#, no-c-format -msgid "sample configuration files" -msgstr "" - #. Tag: para -#: Pam.xml:299 +#: Pam.xml:221 #, no-c-format msgid "The following is a sample PAM application configuration file:" msgstr "" #. Tag: screen -#: Pam.xml:302 +#: Pam.xml:224 #, no-c-format msgid "" "#%PAM-1.0\n" -"auth required pam_securetty.so\n" -"auth required pam_unix.so nullok\n" -"auth required pam_nologin.so\n" -"account required pam_unix.so\n" +"auth required pam_securetty.so\n" +"auth required pam_unix.so nullok\n" +"auth required pam_nologin.so\n" +"account required pam_unix.so\n" "password required pam_cracklib.so retry=3\n" "password required pam_unix.so shadow nullok use_authtok\n" "session required pam_unix.so" msgstr "" #. Tag: para -#: Pam.xml:305 +#: Pam.xml:227 #, no-c-format msgid "" "The first line is a comment, indicated by the hash mark (#auth required pam_securetty.so — This module " @@ -689,7 +565,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:316 +#: Pam.xml:238 #, no-c-format msgid "" "If the tty is not listed in the file, any attempt to log in as root fails " @@ -697,7 +573,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:319 +#: Pam.xml:241 #, no-c-format msgid "" "auth required pam_unix.so nullok — This module " @@ -707,39 +583,15 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:324 +#: Pam.xml:246 #, no-c-format msgid "" "The argument nullok instructs the pam_unix.so module to allow a blank password." msgstr "" -#. Tag: primary -#: Pam.xml:328 Pam.xml:332 -#, no-c-format -msgid "password" -msgstr "" - -#. Tag: secondary -#: Pam.xml:329 Pam.xml:341 -#, no-c-format -msgid "shadow passwords" -msgstr "" - -#. Tag: primary -#: Pam.xml:336 -#, no-c-format -msgid "shadow" -msgstr "" - -#. Tag: see -#: Pam.xml:337 -#, no-c-format -msgid "password" -msgstr "" - #. Tag: para -#: Pam.xml:347 +#: Pam.xml:253 #, no-c-format msgid "" "auth required pam_nologin.so — This is the final " @@ -748,7 +600,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:352 +#: Pam.xml:258 #, no-c-format msgid "" "In this example, all three auth modules are checked, even " @@ -759,7 +611,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:358 +#: Pam.xml:264 #, no-c-format msgid "" "account required pam_unix.so — This module performs " @@ -770,7 +622,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:363 +#: Pam.xml:269 #, no-c-format msgid "" "password required pam_cracklib.so retry=3 — If a " @@ -781,7 +633,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:368 +#: Pam.xml:274 #, no-c-format msgid "" "The argument retry=3 specifies that if the test fails the " @@ -789,7 +641,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:375 +#: Pam.xml:281 #, no-c-format msgid "" "password required pam_unix.so shadow nullok use_authtok " @@ -799,7 +651,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:380 +#: Pam.xml:286 #, no-c-format msgid "" "The argument shadow instructs the module to create shadow " @@ -807,7 +659,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:385 +#: Pam.xml:291 #, no-c-format msgid "" "The argument nullok instructs the module to allow the " @@ -816,7 +668,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:390 +#: Pam.xml:296 #, no-c-format msgid "" "The final argument on this line, use_authtok, provides a " @@ -828,7 +680,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:397 +#: Pam.xml:303 #, no-c-format msgid "" "session required pam_unix.so — The final line " @@ -840,19 +692,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:405 +#: Pam.xml:311 #, no-c-format msgid "Creating PAM Modules" msgstr "" -#. Tag: tertiary -#: Pam.xml:409 -#, no-c-format -msgid "creating" -msgstr "" - #. Tag: para -#: Pam.xml:411 +#: Pam.xml:312 #, no-c-format msgid "" "You can create or add new PAM modules at any time for use by PAM-aware " @@ -860,7 +706,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:414 +#: Pam.xml:315 #, no-c-format msgid "" "For example, a developer might create a one-time-password creation method " @@ -870,7 +716,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:417 +#: Pam.xml:318 #, no-c-format msgid "" "This allows developers and system administrators to mix-and-match, as well " @@ -879,7 +725,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:420 +#: Pam.xml:321 #, no-c-format msgid "" "Documentation on writing modules is included in the /usr/share/doc/" @@ -889,25 +735,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:426 +#: Pam.xml:327 #, no-c-format msgid "PAM and Administrative Credential Caching" msgstr "" -#. Tag: command -#: Pam.xml:429 Pam.xml:433 Pam.xml:438 Pam.xml:469 Pam.xml:535 -#, no-c-format -msgid "pam_timestamp" -msgstr "" - -#. Tag: tertiary -#: Pam.xml:430 Pam.xml:565 -#, no-c-format -msgid "definition of" -msgstr "" - #. Tag: para -#: Pam.xml:440 +#: Pam.xml:328 #, no-c-format msgid "" "A number of graphical administrative tools in &PROD; provide users with " @@ -919,7 +753,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:443 +#: Pam.xml:331 #, no-c-format msgid "" "In the PAM timestamp scheme, the graphical administrative application " @@ -934,7 +768,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:446 +#: Pam.xml:334 #, no-c-format msgid "" "You can verify the actual state of the timestamp file by inspecting the " @@ -944,7 +778,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:449 +#: Pam.xml:337 #, no-c-format msgid "" "The existence of the timestamp file is indicated by an authentication icon, " @@ -952,43 +786,25 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:453 +#: Pam.xml:341 #, no-c-format msgid "The Authentication Icon" msgstr "" #. Tag: para -#: Pam.xml:459 +#: Pam.xml:347 #, no-c-format msgid "Illustration of the authentication icon." msgstr "" #. Tag: title -#: Pam.xml:466 +#: Pam.xml:354 #, no-c-format msgid "Removing the Timestamp File" msgstr "" -#. Tag: tertiary -#: Pam.xml:470 -#, no-c-format -msgid "destroying timestamps" -msgstr "" - -#. Tag: command -#: Pam.xml:474 Pam.xml:478 -#, no-c-format -msgid "pam_timestamp_check" -msgstr "" - -#. Tag: tertiary -#: Pam.xml:475 -#, no-c-format -msgid "destroying timestamp using" -msgstr "" - #. Tag: para -#: Pam.xml:481 +#: Pam.xml:355 #, no-c-format msgid "" "Before abandoning a console where a PAM timestamp is active, it is " @@ -999,26 +815,26 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:485 +#: Pam.xml:359 #, no-c-format msgid "Dismiss Authentication Dialog" msgstr "" #. Tag: para -#: Pam.xml:491 +#: Pam.xml:365 #, no-c-format msgid "Illustration of the authentication dismissal dialog box." msgstr "" #. Tag: para -#: Pam.xml:497 +#: Pam.xml:371 #, no-c-format msgid "" "You should be aware of the following with respect to the PAM timestamp file:" msgstr "" #. Tag: para -#: Pam.xml:502 +#: Pam.xml:376 #, no-c-format msgid "" "If logged in to the system remotely using ssh, use the " @@ -1027,7 +843,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:507 +#: Pam.xml:381 #, no-c-format msgid "" "You need to run the /sbin/pam_timestamp_check -k root " @@ -1036,7 +852,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:512 +#: Pam.xml:386 #, no-c-format msgid "" "You must be logged in as the user who originally invoked the " @@ -1046,7 +862,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:517 +#: Pam.xml:391 #, no-c-format msgid "" "If you want to kill the credentials on the desktop (without using the " @@ -1055,14 +871,14 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:520 +#: Pam.xml:394 #, no-c-format msgid "" "/sbin/pam_timestamp_check -k root </dev/null >/dev/null 2>/dev/null" msgstr "" #. Tag: para -#: Pam.xml:521 +#: Pam.xml:395 #, no-c-format msgid "" "Failure to use this command will only remove the credentials (if any) from " @@ -1070,7 +886,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:526 +#: Pam.xml:400 #, no-c-format msgid "" "Refer to the pam_timestamp_check man page for more " @@ -1079,19 +895,13 @@ msgid "" msgstr "" #. Tag: title -#: Pam.xml:532 +#: Pam.xml:406 #, no-c-format msgid "Common pam_timestamp Directives" msgstr "" -#. Tag: tertiary -#: Pam.xml:536 -#, no-c-format -msgid "directives" -msgstr "" - #. Tag: para -#: Pam.xml:538 +#: Pam.xml:407 #, no-c-format msgid "" "The pam_timestamp.so module accepts several directives. " @@ -1099,7 +909,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:543 +#: Pam.xml:412 #, no-c-format msgid "" "timestamp_timeout — Specifies the period (in " @@ -1108,7 +918,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:548 +#: Pam.xml:417 #, no-c-format msgid "" "timestampdir — Specifies the directory in which the " @@ -1117,7 +927,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:553 +#: Pam.xml:422 #, no-c-format msgid "" "Refer to pam_console.sopam_console.sogdm, kdm, or " @@ -1250,7 +1042,7 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:613 +#: Pam.xml:468 #, no-c-format msgid "" "<console>=tty[0-9][0-9]* vc/[0-9][0-9]* :0\\.[0-9] :0 \n" @@ -1258,7 +1050,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:614 +#: Pam.xml:469 #, no-c-format msgid "" "This prevents remote users from gaining access to devices and restricted " @@ -1266,7 +1058,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:617 +#: Pam.xml:472 #, no-c-format msgid "" "If the gdm, kdm, or " @@ -1279,19 +1071,19 @@ msgid "" msgstr "" #. Tag: screen -#: Pam.xml:620 +#: Pam.xml:475 #, no-c-format msgid "<console>=tty[0-9][0-9]* vc/[0-9][0-9]*" msgstr "" #. Tag: title -#: Pam.xml:625 +#: Pam.xml:480 #, no-c-format msgid "Application Access" msgstr "" #. Tag: para -#: Pam.xml:626 +#: Pam.xml:481 #, no-c-format msgid "" "The console user also has access to certain programs configured for use in " @@ -1299,7 +1091,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:629 +#: Pam.xml:484 #, no-c-format msgid "" "This directory contains configuration files which enable the console user to " @@ -1308,7 +1100,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:632 +#: Pam.xml:487 #, no-c-format msgid "" "These configuration files have the same name as the applications that they " @@ -1316,7 +1108,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:635 +#: Pam.xml:490 #, no-c-format msgid "" "One notable group of applications that the console user has access to are " @@ -1324,25 +1116,25 @@ msgid "" msgstr "" #. Tag: command -#: Pam.xml:641 +#: Pam.xml:496 #, no-c-format msgid "/sbin/halt" msgstr "" #. Tag: command -#: Pam.xml:646 +#: Pam.xml:501 #, no-c-format msgid "/sbin/reboot" msgstr "" #. Tag: command -#: Pam.xml:651 +#: Pam.xml:506 #, no-c-format msgid "/sbin/poweroff" msgstr "" #. Tag: para -#: Pam.xml:655 +#: Pam.xml:510 #, no-c-format msgid "" "Because these are PAM-aware applications, they call the " @@ -1350,7 +1142,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:658 +#: Pam.xml:513 #, no-c-format msgid "" "Refer to pam — Good introductory information on PAM, " @@ -1414,7 +1194,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:695 +#: Pam.xml:541 #, no-c-format msgid "" "Note that this man page discusses both /etc/pam.conf " @@ -1425,7 +1205,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:700 +#: Pam.xml:546 #, no-c-format msgid "" "pam_console — Describes the purpose of the " @@ -1434,7 +1214,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:705 +#: Pam.xml:551 #, no-c-format msgid "" "console.apps — Describes the format and options " @@ -1444,7 +1224,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:710 +#: Pam.xml:556 #, no-c-format msgid "" "console.perms — Describes the format and options " @@ -1454,7 +1234,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:715 +#: Pam.xml:561 #, no-c-format msgid "" "pam_timestamp — Describes the " @@ -1462,7 +1242,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:725 +#: Pam.xml:571 #, no-c-format msgid "" "/usr/share/doc/pam-<version-number>/usr/share/doc/pam-<version-number>http://www.kernel." @@ -1508,7 +1282,7 @@ msgid "" msgstr "" #. Tag: para -#: Pam.xml:751 +#: Pam.xml:592 #, no-c-format msgid "" "The documentation in the above website is for the last released upstream " diff --git a/pot/Preface.pot b/pot/Preface.pot index e4d05b8..3dafe2c 100644 --- a/pot/Preface.pot +++ b/pot/Preface.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/References.pot b/pot/References.pot index 92f8626..c812264 100644 --- a/pot/References.pot +++ b/pot/References.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,87 +20,8 @@ msgstr "" msgid "References" msgstr "" -#. Tag: primary -#: References.xml:8 References.xml:11 References.xml:15 References.xml:19 -#, no-c-format -msgid "references" -msgstr "" - -#. Tag: secondary -#: References.xml:12 -#, no-c-format -msgid "SELinux" -msgstr "" - -#. Tag: secondary -#: References.xml:16 -#, no-c-format -msgid "NSA" -msgstr "" - -#. Tag: secondary -#: References.xml:20 -#, no-c-format -msgid "Flask" -msgstr "" - -#. Tag: primary -#: References.xml:23 -#, no-c-format -msgid "further reading" -msgstr "" - -#. Tag: see -#: References.xml:24 References.xml:28 References.xml:32 References.xml:37 -#: References.xml:42 References.xml:47 References.xml:51 -#, no-c-format -msgid "references" -msgstr "" - -#. Tag: primary -#: References.xml:27 -#, no-c-format -msgid "links" -msgstr "" - -#. Tag: primary -#: References.xml:31 -#, no-c-format -msgid "URLs" -msgstr "" - -#. Tag: primary -#: References.xml:35 -#, no-c-format -msgid "SELinux" -msgstr "" - -#. Tag: secondary -#: References.xml:36 References.xml:41 References.xml:46 -#, no-c-format -msgid "documentation references" -msgstr "" - -#. Tag: primary -#: References.xml:40 -#, no-c-format -msgid "NSA" -msgstr "" - -#. Tag: primary -#: References.xml:45 -#, no-c-format -msgid "Flask" -msgstr "" - -#. Tag: primary -#: References.xml:50 -#, no-c-format -msgid "documentation references" -msgstr "" - #. Tag: para -#: References.xml:53 +#: References.xml:7 #, no-c-format msgid "" "The following references are pointers to additional information that is " @@ -110,159 +31,157 @@ msgid "" msgstr "" #. Tag: title -#: References.xml:57 +#: References.xml:11 #, no-c-format msgid "Books" msgstr "" #. Tag: term -#: References.xml:59 +#: References.xml:13 #, no-c-format msgid "SELinux by Example" msgstr "" #. Tag: para -#: References.xml:61 +#: References.xml:15 #, no-c-format msgid "Mayer, MacMillan, and Caplan" msgstr "" #. Tag: para -#: References.xml:64 +#: References.xml:18 #, no-c-format msgid "Prentice Hall, 2007" msgstr "" #. Tag: title -#: References.xml:71 +#: References.xml:25 #, no-c-format msgid "Tutorials and Help" msgstr "" #. Tag: term -#: References.xml:73 +#: References.xml:27 #, no-c-format msgid "Understanding and Customizing the Apache HTTP SELinux Policy" msgstr "" #. Tag: ulink -#: References.xml:76 +#: References.xml:30 #, no-c-format msgid "http://fedora.redhat.com/docs/selinux-apache-fc3/" msgstr "" #. Tag: term -#: References.xml:81 +#: References.xml:35 #, no-c-format msgid "Tutorials and talks from Russell Coker" msgstr "" #. Tag: ulink -#: References.xml:84 +#: References.xml:38 #, no-c-format msgid "http://www.coker.com.au/selinux/talks/ibmtu-2004/" msgstr "" #. Tag: term -#: References.xml:89 +#: References.xml:43 #, no-c-format msgid "Generic Writing SELinux policy HOWTO" msgstr "" #. Tag: ulink -#: References.xml:92 +#: References.xml:46 #, no-c-format -msgid "" -"https://sourceforge.net/docman/display_doc.php?docid=21959[amp ]" -"group_id=21266" +msgid "http://www.lurking-grue.org/writingselinuxpolicyHOWTO.html" msgstr "" #. Tag: term -#: References.xml:97 +#: References.xml:51 #, no-c-format msgid "Red Hat Knowledgebase" msgstr "" #. Tag: ulink -#: References.xml:100 +#: References.xml:54 #, no-c-format msgid "http://kbase.redhat.com/" msgstr "" #. Tag: title -#: References.xml:106 +#: References.xml:60 #, no-c-format msgid "General Information" msgstr "" #. Tag: term -#: References.xml:108 +#: References.xml:62 #, no-c-format msgid "NSA SELinux main website" msgstr "" #. Tag: ulink -#: References.xml:111 +#: References.xml:65 #, no-c-format msgid "http://www.nsa.gov/selinux/" msgstr "" #. Tag: term -#: References.xml:116 +#: References.xml:70 #, no-c-format msgid "NSA SELinux FAQ" msgstr "" #. Tag: ulink -#: References.xml:119 +#: References.xml:73 #, no-c-format msgid "http://www.nsa.gov/selinux/info/faq.cfm" msgstr "" #. Tag: term -#: References.xml:124 +#: References.xml:78 #, no-c-format msgid "Fedora SELinux FAQ" msgstr "" #. Tag: ulink -#: References.xml:127 +#: References.xml:81 #, no-c-format msgid "http://fedora.redhat.com/docs/selinux-faq-fc3/" msgstr "" #. Tag: term -#: References.xml:132 +#: References.xml:86 #, no-c-format msgid "SELinux NSA's Open Source Security Enhanced Linux" msgstr "" #. Tag: ulink -#: References.xml:135 +#: References.xml:89 #, no-c-format msgid "http://www.oreilly.com/catalog/selinux/" msgstr "" #. Tag: title -#: References.xml:141 +#: References.xml:95 #, no-c-format msgid "Technology" msgstr "" #. Tag: term -#: References.xml:143 +#: References.xml:97 #, no-c-format msgid "An Overview of Object Classes and Permissions" msgstr "" #. Tag: ulink -#: References.xml:146 +#: References.xml:100 #, no-c-format msgid "http://www.tresys.com/selinux/obj_perms_help.html" msgstr "" #. Tag: term -#: References.xml:151 +#: References.xml:105 #, no-c-format msgid "" "Integrating Flexible Support for Security Policies into the Linux Operating " @@ -270,91 +189,104 @@ msgid "" msgstr "" #. Tag: ulink -#: References.xml:154 +#: References.xml:108 #, no-c-format -msgid "http://www.nsa.gov/selinux/papers/slinux-abs.cfm" +msgid "http://www.nsa.gov/research/_files/selinux/papers/selsymp2005.pdf" msgstr "" #. Tag: term -#: References.xml:159 +#: References.xml:113 #, no-c-format msgid "Implementing SELinux as a Linux Security Module" msgstr "" #. Tag: ulink -#: References.xml:162 +#: References.xml:116 #, no-c-format -msgid "http://www.nsa.gov/selinux/papers/module-abs.cfm" +msgid "" +"http://www.nsa.gov/research/_files/publications/implementing_selinux.pdf" msgstr "" #. Tag: term -#: References.xml:167 +#: References.xml:121 #, no-c-format msgid "A Security Policy Configuration for the Security-Enhanced Linux" msgstr "" #. Tag: ulink -#: References.xml:170 +#: References.xml:124 #, no-c-format -msgid "http://www.nsa.gov/selinux/papers/policy-abs.cfm" +msgid "http://www.nsa.gov/research/_files/selinux/papers/policy/policy.shtml" msgstr "" #. Tag: title -#: References.xml:176 +#: References.xml:130 #, no-c-format msgid "Community" msgstr "" #. Tag: term -#: References.xml:178 +#: References.xml:132 +#, no-c-format +msgid "Fedora SELinux User Guide" +msgstr "" + +#. Tag: ulink +#: References.xml:135 +#, no-c-format +msgid "http://docs.fedoraproject.org/selinux-user-guide/" +msgstr "" + +#. Tag: term +#: References.xml:140 #, no-c-format msgid "SELinux community page" msgstr "" #. Tag: ulink -#: References.xml:181 +#: References.xml:143 #, no-c-format msgid "http://selinux.sourceforge.net" msgstr "" #. Tag: term -#: References.xml:186 +#: References.xml:148 #, no-c-format msgid "IRC" msgstr "" #. Tag: para -#: References.xml:188 +#: References.xml:150 #, no-c-format -msgid "irc.freenode.net, #rhel-selinux" +msgid "irc.freenode.net, #selinux" msgstr "" #. Tag: title -#: References.xml:195 +#: References.xml:157 #, no-c-format msgid "History" msgstr "" #. Tag: term -#: References.xml:197 +#: References.xml:159 #, no-c-format msgid "Quick history of Flask" msgstr "" #. Tag: ulink -#: References.xml:200 +#: References.xml:162 #, no-c-format msgid "http://www.cs.utah.edu/flux/fluke/html/flask.html" msgstr "" #. Tag: term -#: References.xml:205 +#: References.xml:167 #, no-c-format msgid "Full background on Fluke" msgstr "" #. Tag: ulink -#: References.xml:208 +#: References.xml:170 #, no-c-format msgid "http://www.cs.utah.edu/flux/fluke/html/index.html" msgstr "" diff --git a/pot/Revision_History.pot b/pot/Revision_History.pot index 09064dc..c62e507 100644 --- a/pot/Revision_History.pot +++ b/pot/Revision_History.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -15,7 +15,69 @@ msgstr "" "Content-Transfer-Encoding: 8bit\n" #. Tag: author -#: Revision_History.xml:9 +#: Revision_History.xml:9 Revision_History.xml:23 Revision_History.xml:37 +#: Revision_History.xml:51 #, no-c-format -msgid " " +msgid "" +"Scott Radvan sradvan@redhat." +"com" +msgstr "" + +#. Tag: member +#: Revision_History.xml:16 +#, no-c-format +msgid "" +"Remove more rhel specifics, major review and remove draft, ready for push" +msgstr "" + +#. Tag: member +#: Revision_History.xml:30 +#, no-c-format +msgid "Lots of minor fixes" +msgstr "" + +#. Tag: member +#: Revision_History.xml:44 +#, no-c-format +msgid "new screenshots from F11 replacing existing/older ones" +msgstr "" + +#. Tag: member +#: Revision_History.xml:58 +#, no-c-format +msgid "LUKS specifics to Fedora 9 modified to include later releases as well." +msgstr "" + +#. Tag: member +#: Revision_History.xml:59 +#, no-c-format +msgid "Fix 404s in reference section, mainly bad NSA links." +msgstr "" + +#. Tag: member +#: Revision_History.xml:60 +#, no-c-format +msgid "minor formatting changes." +msgstr "" + +#. Tag: author +#: Revision_History.xml:67 Revision_History.xml:81 +#, no-c-format +msgid "" +"Eric Christensen " +"sparks@fedoraproject.org" +msgstr "" + +#. Tag: member +#: Revision_History.xml:74 +#, no-c-format +msgid "Fixed missing firewall setup screenshot." +msgstr "" + +#. Tag: member +#: Revision_History.xml:88 +#, no-c-format +msgid "" +"Repaired items found to be incorrect during validation. Many Red Hat " +"references have been changed to Fedora references." msgstr "" diff --git a/pot/Risks.pot b/pot/Risks.pot index 7f765f2..a20344d 100644 --- a/pot/Risks.pot +++ b/pot/Risks.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,48 +20,24 @@ msgstr "" msgid "Attackers and Vulnerabilities" msgstr "" -#. Tag: primary -#: Risks.xml:8 -#, no-c-format -msgid "attackers and risks" -msgstr "" - #. Tag: para -#: Risks.xml:10 +#: Risks.xml:7 #, no-c-format msgid "" "To plan and implement a good security strategy, first be aware of some of " "the issues which determined, motivated attackers exploit to compromise " -"systems. But before detailing these issues, the terminology used when " +"systems. However, before detailing these issues, the terminology used when " "identifying an attacker must be defined." msgstr "" #. Tag: title -#: Risks.xml:14 +#: Risks.xml:11 #, no-c-format msgid "A Quick History of Hackers" msgstr "" -#. Tag: primary -#: Risks.xml:16 Risks.xml:38 Risks.xml:42 Risks.xml:46 -#, no-c-format -msgid "hackers" -msgstr "" - -#. Tag: secondary -#: Risks.xml:17 Risks.xml:21 -#, no-c-format -msgid "definition" -msgstr "" - -#. Tag: primary -#: Risks.xml:20 -#, no-c-format -msgid "crackers" -msgstr "" - #. Tag: para -#: Risks.xml:23 +#: Risks.xml:12 #, no-c-format msgid "" "The modern meaning of the term hacker has origins " @@ -72,7 +48,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:26 +#: Risks.xml:15 #, no-c-format msgid "" "The term hacker has since come to describe everything from computer buffs to " @@ -83,14 +59,8 @@ msgid "" "respect." msgstr "" -#. Tag: primary -#: Risks.xml:30 -#, no-c-format -msgid "hacker ethic" -msgstr "" - #. Tag: para -#: Risks.xml:32 +#: Risks.xml:18 #, no-c-format msgid "" "Typically, hackers follow a form of the hacker ethic " @@ -106,79 +76,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:36 +#: Risks.xml:22 #, no-c-format msgid "Shades of Gray" msgstr "" -#. Tag: secondary -#: Risks.xml:39 -#, no-c-format -msgid "white hat" -msgstr "" - -#. Tag: secondary -#: Risks.xml:43 -#, no-c-format -msgid "gray hat" -msgstr "" - -#. Tag: secondary -#: Risks.xml:47 -#, no-c-format -msgid "black hat" -msgstr "" - -#. Tag: see -#: Risks.xml:48 -#, no-c-format -msgid "cracker" -msgstr "" - -#. Tag: primary -#: Risks.xml:51 -#, no-c-format -msgid "cracker" -msgstr "" - -#. Tag: secondary -#: Risks.xml:52 -#, no-c-format -msgid "black hat hacker" -msgstr "" - -#. Tag: primary -#: Risks.xml:55 -#, no-c-format -msgid "white hat hacker" -msgstr "" - -#. Tag: see -#: Risks.xml:56 Risks.xml:60 -#, no-c-format -msgid "hackers" -msgstr "" - -#. Tag: primary -#: Risks.xml:59 -#, no-c-format -msgid "gray hat hacker" -msgstr "" - -#. Tag: primary -#: Risks.xml:63 -#, no-c-format -msgid "black hat hacker" -msgstr "" - -#. Tag: see -#: Risks.xml:64 -#, no-c-format -msgid "crackers" -msgstr "" - #. Tag: para -#: Risks.xml:66 +#: Risks.xml:23 #, no-c-format msgid "" "Within the community of individuals who find and exploit vulnerabilities in " @@ -188,7 +92,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:69 +#: Risks.xml:26 #, no-c-format msgid "" "The white hat hacker is one who tests networks and " @@ -200,7 +104,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:72 +#: Risks.xml:29 #, no-c-format msgid "" "A black hat hacker is synonymous with a cracker. In " @@ -212,7 +116,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:75 +#: Risks.xml:32 #, no-c-format msgid "" "The gray hat hacker, on the other hand, has the " @@ -223,7 +127,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:78 +#: Risks.xml:35 #, no-c-format msgid "" "Gray hat hackers typically subscribe to another form of the hacker ethic, " @@ -233,7 +137,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:81 +#: Risks.xml:38 #, no-c-format msgid "" "Regardless of the intent of the intruder, it is important to know the " @@ -242,26 +146,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:89 +#: Risks.xml:46 #, no-c-format msgid "Threats to Network Security" msgstr "" -#. Tag: primary -#: Risks.xml:91 Risks.xml:100 Risks.xml:128 Risks.xml:137 Risks.xml:151 -#: Risks.xml:171 Risks.xml:190 Risks.xml:215 Risks.xml:224 Risks.xml:235 -#, no-c-format -msgid "risks" -msgstr "" - -#. Tag: secondary -#: Risks.xml:92 Risks.xml:101 -#, no-c-format -msgid "networks" -msgstr "" - #. Tag: para -#: Risks.xml:94 +#: Risks.xml:47 #, no-c-format msgid "" "Bad practices when configuring the following aspects of a network can " @@ -269,19 +160,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:98 +#: Risks.xml:51 #, no-c-format msgid "Insecure Architectures" msgstr "" -#. Tag: tertiary -#: Risks.xml:102 -#, no-c-format -msgid "architectures" -msgstr "" - #. Tag: para -#: Risks.xml:104 +#: Risks.xml:52 #, no-c-format msgid "" "A misconfigured network is a primary entry point for unauthorized users. " @@ -292,13 +177,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:108 +#: Risks.xml:56 #, no-c-format msgid "Broadcast Networks" msgstr "" #. Tag: para -#: Risks.xml:109 +#: Risks.xml:57 #, no-c-format msgid "" "System administrators often fail to realize the importance of networking " @@ -313,13 +198,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:115 +#: Risks.xml:63 #, no-c-format msgid "Centralized Servers" msgstr "" #. Tag: para -#: Risks.xml:116 +#: Risks.xml:64 #, no-c-format msgid "" "Another potential networking pitfall is the use of centralized computing. A " @@ -334,19 +219,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:126 +#: Risks.xml:74 #, no-c-format msgid "Threats to Server Security" msgstr "" -#. Tag: secondary -#: Risks.xml:129 Risks.xml:172 -#, no-c-format -msgid "servers" -msgstr "" - #. Tag: para -#: Risks.xml:131 +#: Risks.xml:75 #, no-c-format msgid "" "Server security is as important as network security because servers often " @@ -357,19 +236,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:135 +#: Risks.xml:79 #, no-c-format msgid "Unused Services and Open Ports" msgstr "" -#. Tag: secondary -#: Risks.xml:138 -#, no-c-format -msgid "open ports" -msgstr "" - #. Tag: para -#: Risks.xml:140 +#: Risks.xml:80 #, no-c-format msgid "" "A full installation of Fedora contains 1000+ application and library " @@ -379,7 +252,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:143 +#: Risks.xml:83 #, no-c-format msgid "" "A common occurrence among system administrators is to install the operating " @@ -395,19 +268,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:149 +#: Risks.xml:89 #, no-c-format msgid "Unpatched Services" msgstr "" -#. Tag: secondary -#: Risks.xml:152 -#, no-c-format -msgid "patches and errata" -msgstr "" - #. Tag: para -#: Risks.xml:154 +#: Risks.xml:90 #, no-c-format msgid "" "Most server applications that are included in a default installation are " @@ -417,7 +284,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:157 +#: Risks.xml:93 #, no-c-format msgid "" "However, there is no such thing as perfect software and there is always room " @@ -427,7 +294,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:160 +#: Risks.xml:96 #, no-c-format msgid "" "Developers and system administrators often find exploitable bugs in server " @@ -446,7 +313,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:163 +#: Risks.xml:99 #, no-c-format msgid "" "Refer to for more " @@ -454,35 +321,28 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:169 +#: Risks.xml:105 #, no-c-format msgid "Inattentive Administration" msgstr "" -#. Tag: tertiary -#: Risks.xml:173 -#, no-c-format -msgid "inattentive administration" -msgstr "" - #. Tag: para -#: Risks.xml:175 +#: Risks.xml:106 #, no-c-format msgid "" "Administrators who fail to patch their systems are one of the greatest " -"threats to server security. According to the System " -"Administration Network and Security Institute (SANS), the primary cause of computer security vulnerability is to " -"\"assign untrained people to maintain security and provide neither the " -"training nor the time to make it possible to do the job.\" " -"Source: http://www.sans.org/newlook/resources/errors.html This applies as much to inexperienced administrators as it does to " -"overconfident or amotivated administrators." +"threats to server security. According to the SysAdmin, Audit, " +"Network, Security Institute (SANS), the " +"primary cause of computer security vulnerability is to \"assign untrained " +"people to maintain security and provide neither the training nor the time to " +"make it possible to do the job.\" http://www.sans.org/" +"resources/errors.php This applies as much to " +"inexperienced administrators as it does to overconfident or amotivated " +"administrators." msgstr "" #. Tag: para -#: Risks.xml:182 +#: Risks.xml:113 #, no-c-format msgid "" "Some administrators fail to patch their servers and workstations, while " @@ -498,19 +358,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:188 +#: Risks.xml:119 #, no-c-format msgid "Inherently Insecure Services" msgstr "" -#. Tag: secondary -#: Risks.xml:191 -#, no-c-format -msgid "insecure services" -msgstr "" - #. Tag: para -#: Risks.xml:193 +#: Risks.xml:120 #, no-c-format msgid "" "Even the most vigilant organization can fall victim to vulnerabilities if " @@ -522,7 +376,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:196 +#: Risks.xml:123 #, no-c-format msgid "" "One category of insecure network services are those that require unencrypted " @@ -533,7 +387,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:199 +#: Risks.xml:126 #, no-c-format msgid "" "Inherently, such services can also more easily fall prey to what the " @@ -548,7 +402,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:202 +#: Risks.xml:129 #, no-c-format msgid "" "Another category of insecure services include network file systems and " @@ -564,7 +418,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:205 +#: Risks.xml:132 #, no-c-format msgid "" "By default, Fedora is released with all such services turned off. However, " @@ -575,19 +429,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:213 +#: Risks.xml:140 #, no-c-format msgid "Threats to Workstation and Home PC Security" msgstr "" -#. Tag: secondary -#: Risks.xml:216 Risks.xml:225 Risks.xml:236 -#, no-c-format -msgid "workstations and PCs" -msgstr "" - #. Tag: para -#: Risks.xml:218 +#: Risks.xml:141 #, no-c-format msgid "" "Workstations and home PCs may not be as prone to attack as networks or " @@ -600,13 +448,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:222 +#: Risks.xml:145 #, no-c-format msgid "Bad Passwords" msgstr "" #. Tag: para -#: Risks.xml:227 +#: Risks.xml:146 #, no-c-format msgid "" "Bad passwords are one of the easiest ways for an attacker to gain access to " @@ -616,19 +464,13 @@ msgid "" msgstr "" #. Tag: title -#: Risks.xml:233 +#: Risks.xml:152 #, no-c-format msgid "Vulnerable Client Applications" msgstr "" -#. Tag: tertiary -#: Risks.xml:237 -#, no-c-format -msgid "applications" -msgstr "" - #. Tag: para -#: Risks.xml:239 +#: Risks.xml:153 #, no-c-format msgid "" "Although an administrator may have a fully secure and patched server, that " @@ -640,7 +482,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:242 +#: Risks.xml:156 #, no-c-format msgid "" "Even when using secure protocols, such as SSH, a remote user may be " @@ -654,7 +496,7 @@ msgid "" msgstr "" #. Tag: para -#: Risks.xml:245 +#: Risks.xml:159 #, no-c-format msgid "" "discusses in more detail what steps administrators and home users should " diff --git a/pot/SSO_Overview.pot b/pot/SSO_Overview.pot index 4daa50d..5afeea0 100644 --- a/pot/SSO_Overview.pot +++ b/pot/SSO_Overview.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Secure_Installation.pot b/pot/Secure_Installation.pot index dfcb949..db923da 100644 --- a/pot/Secure_Installation.pot +++ b/pot/Secure_Installation.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Secure_Network.pot b/pot/Secure_Network.pot index 6920cef..9604b71 100644 --- a/pot/Secure_Network.pot +++ b/pot/Secure_Network.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Security_Appendix.pot b/pot/Security_Appendix.pot index 4a9295b..ea557bf 100644 --- a/pot/Security_Appendix.pot +++ b/pot/Security_Appendix.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" diff --git a/pot/Security_Introduction.pot b/pot/Security_Introduction.pot index d10e56a..1cf45ac 100644 --- a/pot/Security_Introduction.pot +++ b/pot/Security_Introduction.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,35 +20,14 @@ msgstr "" msgid "Introduction to Security" msgstr "" -#. Tag: primary -#: Security_Introduction.xml:8 Security_Introduction.xml:16 -#: Security_Introduction.xml:25 Security_Introduction.xml:42 -#: Security_Introduction.xml:46 Security_Introduction.xml:129 -#: Security_Introduction.xml:278 -#, no-c-format -msgid "security overview" -msgstr "" - -#. Tag: primary -#: Security_Introduction.xml:11 -#, no-c-format -msgid "overview" -msgstr "" - #. Tag: title -#: Security_Introduction.xml:14 +#: Security_Introduction.xml:8 #, no-c-format msgid "What is Computer Security?" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:17 -#, no-c-format -msgid "defining computer security" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:19 +#: Security_Introduction.xml:9 #, no-c-format msgid "" "Computer security is a general term that covers a wide area of computing and " @@ -56,40 +35,37 @@ msgid "" "networks to conduct daily business transactions and access crucial " "information regard their data as an important part of their overall assets. " "Several terms and metrics have entered our daily business vocabulary, such " -"as total cost of ownership (TCO) and quality of service (QoS). In these " -"metrics, industries calculate aspects such as data integrity and high-" +"as total cost of ownership (TCO) and quality of service (QoS). Using these " +"metrics, industries can calculate aspects such as data integrity and high-" "availability as part of their planning and process management costs. In some " "industries, such as electronic commerce, the availability and " "trustworthiness of data can be the difference between success and failure." msgstr "" #. Tag: title -#: Security_Introduction.xml:23 +#: Security_Introduction.xml:13 #, no-c-format msgid "How did Computer Security Come about?" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:26 -#, no-c-format -msgid "evolution of computer security" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:28 +#: Security_Introduction.xml:14 #, no-c-format msgid "" "Information security has evolved over the years due to the increasing " "reliance on public networks not to disclose personal, financial, and other " -"restricted information. There are numerous instances such as the Mitnick and " -"the Vladimir Levin cases that prompted organizations across all industries " -"to rethink the way they handle information transmission and disclosure. The " -"popularity of the Internet was one of the most important developments that " -"prompted an intensified effort in data security." +"restricted information. There are numerous instances such as the Mitnick " +"http://law.jrank.org/pages/3791/Kevin-Mitnick-Case-1999." +"htmland the Vladimir Levin http://www." +"livinginternet.com/i/ia_hackers_levin.htmcases that " +"prompted organizations across all industries to re-think the way they handle " +"information, as well as its transmission and disclosure. The popularity of " +"the Internet was one of the most important developments that prompted an " +"intensified effort in data security." msgstr "" #. Tag: para -#: Security_Introduction.xml:31 +#: Security_Introduction.xml:17 #, no-c-format msgid "" "An ever-growing number of people are using their personal computers to gain " @@ -100,7 +76,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:34 +#: Security_Introduction.xml:20 #, no-c-format msgid "" "The Internet and its earlier protocols, however, were developed as a " @@ -114,49 +90,13 @@ msgid "" msgstr "" #. Tag: title -#: Security_Introduction.xml:40 +#: Security_Introduction.xml:25 #, no-c-format msgid "Security Today" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:43 -#, no-c-format -msgid "viruses" -msgstr "" - -#. Tag: secondary -#: Security_Introduction.xml:47 -#, no-c-format -msgid "Denial of Service (DoS)" -msgstr "" - -#. Tag: primary -#: Security_Introduction.xml:50 -#, no-c-format -msgid "viruses" -msgstr "" - -#. Tag: secondary -#: Security_Introduction.xml:51 -#, no-c-format -msgid "trojans" -msgstr "" - -#. Tag: primary -#: Security_Introduction.xml:54 -#, no-c-format -msgid "Denial of Service (DoS)" -msgstr "" - -#. Tag: secondary -#: Security_Introduction.xml:55 -#, no-c-format -msgid "distributed" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:57 +#: Security_Introduction.xml:26 #, no-c-format msgid "" "In February of 2000, a Distributed Denial of Service (DDoS) attack was " @@ -175,15 +115,45 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:60 +#: Security_Introduction.xml:29 #, no-c-format msgid "" -"Currently, an estimated 945 million people use or have used the Internet " -"worldwide (Computer Industry Almanac, 2004). At the same time:" +"In 2007, a data breach exploiting the widely-known weaknesses of the Wired " +"Equivalent Privacy (WEP) wireless encryption protocol resulted in the theft " +"from a global financial institution of over 45 million credit card numbers." msgstr "" #. Tag: para -#: Security_Introduction.xml:65 +#: Security_Introduction.xml:31 +#, no-c-format +msgid "http://www.theregister.co.uk/2007/05/04/txj_nonfeasance/" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:34 +#, no-c-format +msgid "" +"In a separate incident, the billing records of over 2.2 million patients " +"stored on a backup tape were stolen from the front seat of a courier's car." +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:36 +#, no-c-format +msgid "http://www.healthcareitnews.com/story.cms?id=9408" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:39 +#, no-c-format +msgid "" +"Currently, an estimated 1.4 billion people use or have used the Internet " +"worldwide.http://www.internetworldstats.com/stats.htm At the same time:" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:44 #, no-c-format msgid "" "On any given day, there are approximately 225 major incidences of security " @@ -192,13 +162,13 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:67 +#: Security_Introduction.xml:45 #, no-c-format -msgid "Source: http://www.cert.org" +msgid "http://www.cert.org" msgstr "" #. Tag: para -#: Security_Introduction.xml:74 +#: Security_Introduction.xml:49 #, no-c-format msgid "" "In 2003, the number of CERT reported incidences jumped to 137,529 from " @@ -206,15 +176,13 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:76 +#: Security_Introduction.xml:51 #, no-c-format -msgid "" -"Source: http://www.cert.org/stats/" -"" +msgid "http://www.cert.org/stats/fullstats.html" msgstr "" #. Tag: para -#: Security_Introduction.xml:83 +#: Security_Introduction.xml:58 #, no-c-format msgid "" "The worldwide economic impact of the three most dangerous Internet Viruses " @@ -222,27 +190,69 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:85 +#: Security_Introduction.xml:60 +#, no-c-format +msgid "http://www.newsfactor.com/perl/story/16407.html" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:67 +#, no-c-format +msgid "" +"From a 2008 global survey of business and technology executives \"The Global " +"State of Information Security\"http://www.csoonline.com/" +"article/454939/The_Global_State_of_Information_Security_, " +"undertaken by CIO Magazine, some points are:" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:72 +#, no-c-format +msgid "" +"Just 43% of respondents audit or monitor user compliance with security " +"policies" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:77 +#, no-c-format +msgid "Only 22% keep an inventory of the outside companies that use their data" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:82 #, no-c-format msgid "" -"Source: http://www.newsfactor.com/perl/story/16407.html" +"The source of nearly half of security incidents was marked as \"Unknown\"" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:87 +#, no-c-format +msgid "44% of respondents plan to increase security spending in the next year" msgstr "" #. Tag: para #: Security_Introduction.xml:92 #, no-c-format +msgid "59% have an information security strategy" +msgstr "" + +#. Tag: para +#: Security_Introduction.xml:97 +#, no-c-format msgid "" -"Computer security has become a quantifiable and justifiable expense for all " -"IT budgets. Organizations that require data integrity and high availability " -"elicit the skills of system administrators, developers, and engineers to " -"ensure 24x7 reliability of their systems, services, and information. Falling " -"victim to malicious users, processes, or coordinated attacks is a direct " -"threat to the success of the organization." +"These results enforce the reality that computer security has become a " +"quantifiable and justifiable expense for IT budgets. Organizations that " +"require data integrity and high availability elicit the skills of system " +"administrators, developers, and engineers to ensure 24x7 reliability of " +"their systems, services, and information. Falling victim to malicious users, " +"processes, or coordinated attacks is a direct threat to the success of the " +"organization." msgstr "" #. Tag: para -#: Security_Introduction.xml:95 +#: Security_Introduction.xml:100 #, no-c-format msgid "" "Unfortunately, system and network security can be a difficult proposition, " @@ -253,17 +263,17 @@ msgid "" msgstr "" #. Tag: title -#: Security_Introduction.xml:101 +#: Security_Introduction.xml:106 #, no-c-format msgid "Standardizing Security" msgstr "" #. Tag: para -#: Security_Introduction.xml:102 +#: Security_Introduction.xml:107 #, no-c-format msgid "" "Enterprises in every industry rely on regulations and rules that are set by " -"standards making bodies such as the American Medical Association (AMA) or " +"standards-making bodies such as the American Medical Association (AMA) or " "the Institute of Electrical and Electronics Engineers (IEEE). The same " "ideals hold true for information security. Many security consultants and " "vendors agree upon the standard security model known as CIA, or " @@ -274,7 +284,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:107 +#: Security_Introduction.xml:112 #, no-c-format msgid "" "Confidentiality — Sensitive information must be available only to a " @@ -286,7 +296,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:112 +#: Security_Introduction.xml:117 #, no-c-format msgid "" "Integrity — Information should not be altered in ways that render it " @@ -295,7 +305,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:117 +#: Security_Introduction.xml:122 #, no-c-format msgid "" "Availability — Information should be accessible to authorized users " @@ -307,32 +317,34 @@ msgid "" msgstr "" #. Tag: title -#: Security_Introduction.xml:127 -#, no-c-format -msgid "Security Controls" -msgstr "" - -#. Tag: secondary -#: Security_Introduction.xml:130 +#: Security_Introduction.xml:131 #, no-c-format -msgid "controls" +msgid "SELinux" msgstr "" -#. Tag: see -#: Security_Introduction.xml:131 +#. Tag: para +#: Security_Introduction.xml:132 #, no-c-format -msgid "controls" +msgid "" +"Fedora includes an enhancement to the Linux kernel called SELinux, which " +"implements a Mandatory Access Control (MAC) architecture that provides a " +"fine-grained level of control over files, processes, users and applications " +"in the system. Detailed discussion of SELinux is beyond the scope of this " +"document; however, for more information on SELinux and its use in Fedora, " +"refer to the Fedora SELinux User Guide available at http://docs.fedoraproject.org/" +"selinux-user-guide/. Other available resources for SELinux are " +"listed in ." msgstr "" -#. Tag: primary -#: Security_Introduction.xml:134 Security_Introduction.xml:162 -#: Security_Introduction.xml:205 Security_Introduction.xml:243 +#. Tag: title +#: Security_Introduction.xml:137 #, no-c-format -msgid "controls" +msgid "Security Controls" msgstr "" #. Tag: para -#: Security_Introduction.xml:136 +#: Security_Introduction.xml:138 #, no-c-format msgid "" "Computer security is often divided into three distinct master categories, " @@ -340,25 +352,25 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:141 +#: Security_Introduction.xml:143 #, no-c-format msgid "Physical" msgstr "" #. Tag: para -#: Security_Introduction.xml:146 +#: Security_Introduction.xml:148 #, no-c-format msgid "Technical" msgstr "" #. Tag: para -#: Security_Introduction.xml:151 +#: Security_Introduction.xml:153 #, no-c-format msgid "Administrative" msgstr "" #. Tag: para -#: Security_Introduction.xml:156 +#: Security_Introduction.xml:158 #, no-c-format msgid "" "These three broad categories define the main objectives of proper security " @@ -367,19 +379,13 @@ msgid "" msgstr "" #. Tag: title -#: Security_Introduction.xml:160 +#: Security_Introduction.xml:162 #, no-c-format msgid "Physical Controls" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:163 -#, no-c-format -msgid "physical" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:165 +#: Security_Introduction.xml:163 #, no-c-format msgid "" "Physical control is the implementation of security measures in a defined " @@ -388,37 +394,37 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:170 +#: Security_Introduction.xml:168 #, no-c-format msgid "Closed-circuit surveillance cameras" msgstr "" #. Tag: para -#: Security_Introduction.xml:175 +#: Security_Introduction.xml:173 #, no-c-format msgid "Motion or thermal alarm systems" msgstr "" #. Tag: para -#: Security_Introduction.xml:180 +#: Security_Introduction.xml:178 #, no-c-format msgid "Security guards" msgstr "" #. Tag: para -#: Security_Introduction.xml:185 +#: Security_Introduction.xml:183 #, no-c-format msgid "Picture IDs" msgstr "" #. Tag: para -#: Security_Introduction.xml:190 +#: Security_Introduction.xml:188 #, no-c-format msgid "Locked and dead-bolted steel doors" msgstr "" #. Tag: para -#: Security_Introduction.xml:195 +#: Security_Introduction.xml:193 #, no-c-format msgid "" "Biometrics (includes fingerprint, voice, face, iris, handwriting, and other " @@ -426,19 +432,13 @@ msgid "" msgstr "" #. Tag: title -#: Security_Introduction.xml:203 +#: Security_Introduction.xml:201 #, no-c-format msgid "Technical Controls" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:206 -#, no-c-format -msgid "technical" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:208 +#: Security_Introduction.xml:202 #, no-c-format msgid "" "Technical controls use technology as a basis for controlling the access and " @@ -448,100 +448,89 @@ msgid "" msgstr "" #. Tag: para -#: Security_Introduction.xml:213 +#: Security_Introduction.xml:207 #, no-c-format msgid "Encryption" msgstr "" #. Tag: para -#: Security_Introduction.xml:218 +#: Security_Introduction.xml:212 #, no-c-format msgid "Smart cards" msgstr "" #. Tag: para -#: Security_Introduction.xml:223 +#: Security_Introduction.xml:217 #, no-c-format msgid "Network authentication" msgstr "" #. Tag: para -#: Security_Introduction.xml:228 +#: Security_Introduction.xml:222 #, no-c-format msgid "Access control lists (ACLs)" msgstr "" #. Tag: para -#: Security_Introduction.xml:233 +#: Security_Introduction.xml:227 #, no-c-format msgid "File integrity auditing software" msgstr "" #. Tag: title -#: Security_Introduction.xml:241 +#: Security_Introduction.xml:235 #, no-c-format msgid "Administrative Controls" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:244 -#, no-c-format -msgid "administrative" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:246 +#: Security_Introduction.xml:236 #, no-c-format msgid "" -"Administrative controls define the human factors of security. It involves " -"all levels of personnel within an organization and determines which users " +"Administrative controls define the human factors of security. They involve " +"all levels of personnel within an organization and determine which users " "have access to what resources and information by such means as:" msgstr "" #. Tag: para -#: Security_Introduction.xml:251 +#: Security_Introduction.xml:241 #, no-c-format msgid "Training and awareness" msgstr "" #. Tag: para -#: Security_Introduction.xml:256 +#: Security_Introduction.xml:246 #, no-c-format msgid "Disaster preparedness and recovery plans" msgstr "" #. Tag: para -#: Security_Introduction.xml:261 +#: Security_Introduction.xml:251 #, no-c-format msgid "Personnel recruitment and separation strategies" msgstr "" #. Tag: para -#: Security_Introduction.xml:266 +#: Security_Introduction.xml:256 #, no-c-format msgid "Personnel registration and accounting" msgstr "" #. Tag: title -#: Security_Introduction.xml:276 +#: Security_Introduction.xml:265 #, no-c-format msgid "Conclusion" msgstr "" -#. Tag: secondary -#: Security_Introduction.xml:279 -#, no-c-format -msgid "conclusion" -msgstr "" - #. Tag: para -#: Security_Introduction.xml:281 +#: Security_Introduction.xml:266 #, no-c-format msgid "" "Now that you have learned about the origins, reasons, and aspects of " -"security, you can determine the appropriate course of action with regard to " -"Fedora. It is important to know what factors and conditions make up security " -"in order to plan and implement a proper strategy. With this information in " -"mind, the process can be formalized and the path becomes clearer as you " -"delve deeper into the specifics of the security process." +"security, you will find it easier to determine the appropriate course of " +"action with regard to Fedora. It is important to know what factors and " +"conditions make up security in order to plan and implement a proper " +"strategy. With this information in mind, the process can be formalized and " +"the path becomes clearer as you delve deeper into the specifics of the " +"security process." msgstr "" diff --git a/pot/Security_Overview.pot b/pot/Security_Overview.pot index d9ab452..e93a5f4 100644 --- a/pot/Security_Overview.pot +++ b/pot/Security_Overview.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,34 +20,23 @@ msgstr "" msgid "Security Overview" msgstr "" -#. Tag: primary -#: Security_Overview.xml:8 -#, no-c-format -msgid "security overview" -msgstr "" - -#. Tag: primary -#: Security_Overview.xml:11 -#, no-c-format -msgid "overview" -msgstr "" - #. Tag: para -#: Security_Overview.xml:13 +#: Security_Overview.xml:7 #, no-c-format msgid "" "Because of the increased reliance on powerful, networked computers to help " -"run businesses and keep track of our personal information, industries have " -"been formed around the practice of network and computer security. " +"run businesses and keep track of our personal information, entire industries " +"have been formed around the practice of network and computer security. " "Enterprises have solicited the knowledge and skills of security experts to " "properly audit systems and tailor solutions to fit the operating " -"requirements of the organization. Because most organizations are dynamic in " -"nature, with workers accessing company IT resources locally and remotely, " -"the need for secure computing environments has become more pronounced." +"requirements of the organization. Because most organizations are " +"increasingly dynamic in nature, with workers accessing company IT resources " +"locally and remotely, the need for secure computing environments has become " +"more pronounced." msgstr "" #. Tag: para -#: Security_Overview.xml:16 +#: Security_Overview.xml:10 #, no-c-format msgid "" "Unfortunately, most organizations (as well as individual users) regard " @@ -55,7 +44,7 @@ msgid "" "increased power, productivity, and budgetary concerns. Proper security " "implementation is often enacted postmortem — " "after an unauthorized intrusion has already occurred. Security experts agree " -"that the right measures taken prior to connecting a site to an untrusted " +"that taking the correct measures prior to connecting a site to an untrusted " "network, such as the Internet, is an effective means of thwarting most " "attempts at intrusion." msgstr "" diff --git a/pot/Security_Updates.pot b/pot/Security_Updates.pot index 044c5ce..330f58e 100644 --- a/pot/Security_Updates.pot +++ b/pot/Security_Updates.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,59 +20,40 @@ msgstr "" msgid "Security Updates" msgstr "" -#. Tag: primary -#: Security_Updates.xml:8 -#, no-c-format -msgid "updates" -msgstr "" - -#. Tag: see -#: Security_Updates.xml:9 -#, no-c-format -msgid "security errata" -msgstr "" - -#. Tag: primary -#: Security_Updates.xml:12 Security_Updates.xml:49 Security_Updates.xml:75 -#: Security_Updates.xml:174 Security_Updates.xml:178 -#, no-c-format -msgid "security errata" -msgstr "" - #. Tag: para -#: Security_Updates.xml:14 +#: Security_Updates.xml:7 #, no-c-format msgid "" "As security vulnerabilities are discovered, the affected software must be " "updated in order to limit any potential security risks. If the software is " "part of a package within a Fedora distribution that is currently supported, " -"Fedora. is committed to releasing updated packages that fix the " -"vulnerability as soon as possible. Often, announcements about a given " -"security exploit are accompanied with a patch (or source code that fixes the " -"problem). This patch is then applied to the Fedora package, tested by the " -"Red Hat quality assurance team, and released as an errata update. However, " -"if an announcement does not include a patch, a Red Hat developer works with " -"the maintainer of the software to fix the problem. Once the problem is " -"fixed, the package is tested and released as an errata update." +"Fedora is committed to releasing updated packages that fix the vulnerability " +"as soon as is possible. Often, announcements about a given security exploit " +"are accompanied with a patch (or source code that fixes the problem). This " +"patch is then applied to the Fedora package and tested and released as an " +"errata update. However, if an announcement does not include a patch, a " +"developer first works with the maintainer of the software to fix the " +"problem. Once the problem is fixed, the package is tested and released as an " +"errata update." msgstr "" #. Tag: para -#: Security_Updates.xml:17 +#: Security_Updates.xml:10 #, no-c-format msgid "" "If an errata update is released for software used on your system, it is " -"highly recommended that you update the effected packages as soon as possible " +"highly recommended that you update the affected packages as soon as possible " "to minimize the amount of time the system is potentially vulnerable." msgstr "" #. Tag: title -#: Security_Updates.xml:21 +#: Security_Updates.xml:14 #, no-c-format msgid "Updating Packages" msgstr "" #. Tag: para -#: Security_Updates.xml:22 +#: Security_Updates.xml:15 #, no-c-format msgid "" "When updating software on a system, it is important to download the update " @@ -81,226 +62,70 @@ msgid "" "a different security exploit and release it on the Internet. If this " "happens, using security measures such as verifying files against the " "original RPM does not detect the exploit. Thus, it is very important to only " -"download RPMs from trusted sources, such as from Fedora. and check the " +"download RPMs from trusted sources, such as from Fedora and to check the " "signature of the package to verify its integrity." msgstr "" -#. Tag: para -#: Security_Updates.xml:25 -#, no-c-format -msgid "Red Hat offers two ways to find information on errata updates:" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:30 -#, no-c-format -msgid "Listed and available for download on Red Hat Network" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:35 -#, no-c-format -msgid "Listed and unlinked on the Red Hat Errata website" -msgstr "" - #. Tag: title -#: Security_Updates.xml:41 Security_Updates.xml:158 Security_Updates.xml:185 +#: Security_Updates.xml:19 Security_Updates.xml:83 Security_Updates.xml:102 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Security_Updates.xml:42 -#, no-c-format -msgid "" -"Beginning with the Fedora product line, updated packages can be downloaded " -"only from Red Hat Network. Although the Red Hat Errata website contains " -"updated information, it does not contain the actual packages for download." -msgstr "" - -#. Tag: title -#: Security_Updates.xml:47 -#, no-c-format -msgid "Using Red Hat Network" -msgstr "" - -#. Tag: secondary -#: Security_Updates.xml:50 -#, no-c-format -msgid "via Red Hat Network" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:52 -#, no-c-format -msgid "" -"Red Hat Network allows the majority of the update process to be automated. " -"It determines which RPM packages are necessary for the system, downloads " -"them from a secure repository, verifies the RPM signature to make sure they " -"have not been tampered with, and updates them. The package install can occur " -"immediately or can be scheduled during a certain time period." -msgstr "" - -#. Tag: para -#: Security_Updates.xml:55 -#, no-c-format -msgid "" -"Red Hat Network requires a System Profile for each " -"machine to be updated. The System Profile contains hardware and software " -"information about the system. This information is kept confidential and is " -"not given to anyone else. It is only used to determine which errata updates " -"are applicable to each system, and, without it, Red Hat Network can not " -"determine whether a given system needs updates. When a security errata (or " -"any type of errata) is released, Red Hat Network sends an email with a " -"description of the errata as well as a list of systems which are affected. " -"To apply the update, use the Red Hat Update Agent " -"or schedule the package to be updated through the website http://rhn.redhat.com." -msgstr "" - -#. Tag: title -#: Security_Updates.xml:59 -#, no-c-format -msgid "Tip" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:60 -#, no-c-format -msgid "" -"Fedora includes the Red Hat Network Alert Notification Tool, a convenient panel icon that displays visible alerts when " -"there is an update for a registered Fedora system. Refer to the following " -"URL for more information about the applet: https://rhn.redhat.com/rhn/help/quickstart." -"jsp" -msgstr "" - -#. Tag: title -#: Security_Updates.xml:65 Security_Updates.xml:164 -#, no-c-format -msgid "Important" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:66 Security_Updates.xml:165 -#, no-c-format -msgid "" -"Before installing any security errata, be sure to read any special " -"instructions contained in the errata report and execute them accordingly. " -"Refer to for general instructions about applying the changes " -"made by an errata update." -msgstr "" - -#. Tag: title -#: Security_Updates.xml:73 -#, no-c-format -msgid "Using the Red Hat Errata Website" -msgstr "" - -#. Tag: secondary -#: Security_Updates.xml:76 -#, no-c-format -msgid "via Red Hat errata website" -msgstr "" - -#. Tag: primary -#: Security_Updates.xml:79 Security_Updates.xml:96 Security_Updates.xml:136 -#, no-c-format -msgid "RPM" -msgstr "" - -#. Tag: secondary -#: Security_Updates.xml:80 -#, no-c-format -msgid "importing GPG key" -msgstr "" - -#. Tag: para -#: Security_Updates.xml:82 -#, no-c-format -msgid "" -"When security errata reports are released, they are published on the Red Hat " -"Errata website available at http://www.redhat.com/security/. From this page, select the " -"product and version for your system, and then select security at the top of the page to display only Fedora Security Advisories. " -"If the synopsis of one of the advisories describes a package used on your " -"system, click on the synopsis for more details." -msgstr "" - -#. Tag: para -#: Security_Updates.xml:85 -#, no-c-format -msgid "" -"The details page describes the security exploit and any special instructions " -"that must be performed in addition to updating the package to fix the " -"security hole." -msgstr "" - -#. Tag: para -#: Security_Updates.xml:88 +#: Security_Updates.xml:20 #, no-c-format msgid "" -"To download the updated package(s), click on the link to login to Red Hat " -"Network, click the package name(s) and save to the hard drive. It is highly " -"recommended that you create a new directory, such as /tmp/updates, and save all the downloaded packages to it." +"Fedora includes a convenient panel icon that displays visible alerts when " +"there is an update for a Fedora system." msgstr "" #. Tag: title -#: Security_Updates.xml:94 +#: Security_Updates.xml:27 #, no-c-format msgid "Verifying Signed Packages" msgstr "" -#. Tag: secondary -#: Security_Updates.xml:97 Security_Updates.xml:137 -#, no-c-format -msgid "verifying signed packages" -msgstr "" - #. Tag: para -#: Security_Updates.xml:99 +#: Security_Updates.xml:28 #, no-c-format msgid "" -"All Fedora packages are signed with the Fedora. GPG " +"All Fedora packages are signed with the Fedora GPG " "key. GPG stands for GNU Privacy Guard, or GnuPG, a free software package " "used for ensuring the authenticity of distributed files. For example, a " -"private key (secret key) held by Red Hat locks the package while the public " -"key unlocks and verifies the package. If the public key distributed by Red " -"Hat does not match the private key during RPM verification, the package may " -"have been altered and therefore cannot be trusted." +"private key (secret key) locks the package while the public key unlocks and " +"verifies the package. If the public key distributed by Fedora does not match " +"the private key during RPM verification, the package may have been altered " +"and therefore cannot be trusted." msgstr "" #. Tag: para -#: Security_Updates.xml:102 +#: Security_Updates.xml:31 #, no-c-format msgid "" "The RPM utility within Fedora automatically tries to verify the GPG " -"signature of an RPM package before installing it. If the Red Hat GPG key is " +"signature of an RPM package before installing it. If the Fedora GPG key is " "not installed, install it from a secure, static location, such as an Fedora " -"installation CD-ROM." +"installation CD-ROM or DVD." msgstr "" #. Tag: para -#: Security_Updates.xml:105 +#: Security_Updates.xml:34 #, no-c-format msgid "" -"Assuming the CD-ROM is mounted in /mnt/cdrom, use the " +"Assuming the disc is mounted in /mnt/cdrom, use the " "following command to import it into the keyring (a " "database of trusted keys on the system):" msgstr "" #. Tag: screen -#: Security_Updates.xml:108 +#: Security_Updates.xml:37 #, no-c-format msgid "rpm --import /mnt/cdrom/RPM-GPG-KEY" msgstr "" #. Tag: para -#: Security_Updates.xml:109 +#: Security_Updates.xml:38 #, no-c-format msgid "" "To display a list of all keys installed for RPM verification, execute the " @@ -308,25 +133,25 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:112 +#: Security_Updates.xml:41 #, no-c-format msgid "rpm -qa gpg-pubkey*" msgstr "" #. Tag: para -#: Security_Updates.xml:113 +#: Security_Updates.xml:42 #, no-c-format -msgid "For the Red Hat key, the output includes the following:" +msgid "The output will look similar to the following:" msgstr "" #. Tag: screen -#: Security_Updates.xml:116 +#: Security_Updates.xml:45 #, no-c-format msgid "gpg-pubkey-db42a60e-37ea5438" msgstr "" #. Tag: para -#: Security_Updates.xml:117 +#: Security_Updates.xml:46 #, no-c-format msgid "" "To display details about a specific key, use the rpm -qi " @@ -334,40 +159,40 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:120 +#: Security_Updates.xml:49 #, no-c-format msgid "rpm -qi gpg-pubkey-db42a60e-37ea5438" msgstr "" #. Tag: para -#: Security_Updates.xml:121 +#: Security_Updates.xml:50 #, no-c-format msgid "" "It is extremely important to verify the signature of the RPM files before " -"installing them to ensure that they have not been altered from the Fedora. " -"release of the packages. To verify all the downloaded packages at once, " -"issue the following command:" +"installing them to ensure that they have not been altered from the original " +"source of the packages. To verify all the downloaded packages at once, issue " +"the following command:" msgstr "" #. Tag: screen -#: Security_Updates.xml:124 +#: Security_Updates.xml:53 #, no-c-format msgid "rpm -K /tmp/updates/*.rpm" msgstr "" #. Tag: para -#: Security_Updates.xml:125 +#: Security_Updates.xml:54 #, no-c-format msgid "" "For each package, if the GPG key verifies successfully, the command returns " "gpg OK. If it doesn't, make sure you " -"are using the correct Red Hat public key, as well as verifying the source of " +"are using the correct Fedora public key, as well as verifying the source of " "the content. Packages that do not pass GPG verifications should not be " "installed, as they may have been altered by a third party." msgstr "" #. Tag: para -#: Security_Updates.xml:128 +#: Security_Updates.xml:57 #, no-c-format msgid "" "After verifying the GPG key and downloading all the packages associated with " @@ -375,13 +200,13 @@ msgid "" msgstr "" #. Tag: title -#: Security_Updates.xml:134 +#: Security_Updates.xml:63 #, no-c-format msgid "Installing Signed Packages" msgstr "" #. Tag: para -#: Security_Updates.xml:139 +#: Security_Updates.xml:64 #, no-c-format msgid "" "Installation for most packages can be done safely (except kernel packages) " @@ -389,19 +214,19 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:142 +#: Security_Updates.xml:67 #, no-c-format msgid "rpm -Uvh /tmp/updates/*.rpm" msgstr "" #. Tag: para -#: Security_Updates.xml:143 +#: Security_Updates.xml:68 #, no-c-format msgid "For kernel packages use the following command:" msgstr "" #. Tag: screen -#: Security_Updates.xml:146 +#: Security_Updates.xml:71 #, no-c-format msgid "" "rpm -ivh /tmp/updates/<kernel-package><kernel-package> in the previous " @@ -417,7 +242,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:150 +#: Security_Updates.xml:75 #, no-c-format msgid "" "Once the machine has been safely rebooted using the new kernel, the old " @@ -425,7 +250,7 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:153 +#: Security_Updates.xml:78 #, no-c-format msgid "" "rpm -e <old-kernel-package><old-kernel-package> in the " @@ -441,7 +266,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:159 +#: Security_Updates.xml:84 #, no-c-format msgid "" "It is not a requirement that the old kernel be removed. The default boot " @@ -450,52 +275,56 @@ msgid "" msgstr "" #. Tag: title -#: Security_Updates.xml:172 +#: Security_Updates.xml:89 #, no-c-format -msgid "Applying the Changes" +msgid "Important" msgstr "" -#. Tag: secondary -#: Security_Updates.xml:175 +#. Tag: para +#: Security_Updates.xml:90 #, no-c-format -msgid "applying changes" +msgid "" +"Before installing any security errata, be sure to read any special " +"instructions contained in the errata report and execute them accordingly. " +"Refer to for general instructions about applying the changes " +"made by an errata update." msgstr "" -#. Tag: secondary -#: Security_Updates.xml:179 +#. Tag: title +#: Security_Updates.xml:97 #, no-c-format -msgid "when to reboot" +msgid "Applying the Changes" msgstr "" #. Tag: para -#: Security_Updates.xml:181 +#: Security_Updates.xml:98 #, no-c-format msgid "" -"After downloading and installing security errata via Red Hat Network or the " -"Red Hat errata website, it is important to halt usage of the older software " -"and begin using the new software. How this is done depends on the type of " -"software that has been updated. The following list itemizes the general " -"categories of software and provides instructions for using the updated " -"versions after a package upgrade." +"After downloading and installing security errata and updates, it is " +"important to halt usage of the older software and begin using the new " +"software. How this is done depends on the type of software that has been " +"updated. The following list itemizes the general categories of software and " +"provides instructions for using the updated versions after a package upgrade." msgstr "" #. Tag: para -#: Security_Updates.xml:186 +#: Security_Updates.xml:103 #, no-c-format msgid "" "In general, rebooting the system is the surest way to ensure that the latest " "version of a software package is used; however, this option is not always " -"available to the system administrator." +"required, or available to the system administrator." msgstr "" #. Tag: term -#: Security_Updates.xml:192 +#: Security_Updates.xml:109 #, no-c-format msgid "Applications" msgstr "" #. Tag: para -#: Security_Updates.xml:194 +#: Security_Updates.xml:111 #, no-c-format msgid "" "User-space applications are any programs that can be initiated by a system " @@ -505,7 +334,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:197 +#: Security_Updates.xml:114 #, no-c-format msgid "" "Once such a user-space application is updated, halt any instances of the " @@ -514,13 +343,13 @@ msgid "" msgstr "" #. Tag: term -#: Security_Updates.xml:203 +#: Security_Updates.xml:120 #, no-c-format msgid "Kernel" msgstr "" #. Tag: para -#: Security_Updates.xml:205 +#: Security_Updates.xml:122 #, no-c-format msgid "" "The kernel is the core software component for the Fedora operating system. " @@ -529,7 +358,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:208 +#: Security_Updates.xml:125 #, no-c-format msgid "" "Because of its central role, the kernel cannot be restarted without also " @@ -538,13 +367,13 @@ msgid "" msgstr "" #. Tag: term -#: Security_Updates.xml:214 +#: Security_Updates.xml:131 #, no-c-format msgid "Shared Libraries" msgstr "" #. Tag: para -#: Security_Updates.xml:216 +#: Security_Updates.xml:133 #, no-c-format msgid "" "Shared libraries are units of code, such as glibc, " @@ -555,7 +384,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:219 +#: Security_Updates.xml:136 #, no-c-format msgid "" "To determine which running applications link against a particular library, " @@ -563,13 +392,13 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:222 +#: Security_Updates.xml:139 #, no-c-format -msgid "lsof /usr/lib/libwrap.so*" +msgid "lsof /lib/libwrap.so*" msgstr "" #. Tag: para -#: Security_Updates.xml:223 +#: Security_Updates.xml:140 #, no-c-format msgid "" "This command returns a list of all the running programs which use TCP " @@ -579,13 +408,13 @@ msgid "" msgstr "" #. Tag: term -#: Security_Updates.xml:229 +#: Security_Updates.xml:146 #, no-c-format msgid "SysV Services" msgstr "" #. Tag: para -#: Security_Updates.xml:231 +#: Security_Updates.xml:148 #, no-c-format msgid "" "SysV services are persistent server programs launched during the boot " @@ -594,7 +423,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:234 +#: Security_Updates.xml:151 #, no-c-format msgid "" "Because these programs usually persist in memory as long as the machine is " @@ -606,7 +435,7 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:237 +#: Security_Updates.xml:154 #, no-c-format msgid "" "/sbin/service <service-name> " @@ -614,7 +443,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:238 +#: Security_Updates.xml:155 #, no-c-format msgid "" "In the previous example, replace <service-name>xinetd Services" msgstr "" #. Tag: para -#: Security_Updates.xml:246 +#: Security_Updates.xml:163 #, no-c-format msgid "" "Services controlled by the xinetd super service only run " @@ -637,7 +466,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:249 +#: Security_Updates.xml:166 #, no-c-format msgid "" "Because new instances of these services are launched by xinetdxinetd " @@ -659,7 +488,7 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:255 +#: Security_Updates.xml:172 #, no-c-format msgid "" "For example, if security errata imap packages are " @@ -668,13 +497,13 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:258 +#: Security_Updates.xml:175 #, no-c-format msgid "ps -aux | grep imap" msgstr "" #. Tag: para -#: Security_Updates.xml:259 +#: Security_Updates.xml:176 #, no-c-format msgid "" "This command returns all active IMAP sessions. Individual sessions can then " @@ -682,26 +511,26 @@ msgid "" msgstr "" #. Tag: screen -#: Security_Updates.xml:262 +#: Security_Updates.xml:179 #, no-c-format msgid "kill <PID>" msgstr "" #. Tag: para -#: Security_Updates.xml:263 +#: Security_Updates.xml:180 #, no-c-format msgid "" "If this fails to terminate the session, use the following command instead:" msgstr "" #. Tag: screen -#: Security_Updates.xml:266 +#: Security_Updates.xml:183 #, no-c-format msgid "kill -9 <PID>" msgstr "" #. Tag: para -#: Security_Updates.xml:267 +#: Security_Updates.xml:184 #, no-c-format msgid "" "In the previous examples, replace <PID> " @@ -710,13 +539,13 @@ msgid "" msgstr "" #. Tag: para -#: Security_Updates.xml:270 +#: Security_Updates.xml:187 #, no-c-format msgid "To kill all active IMAP sessions, issue the following command:" msgstr "" #. Tag: screen -#: Security_Updates.xml:273 +#: Security_Updates.xml:190 #, no-c-format msgid "killall imapd" msgstr "" diff --git a/pot/Server.pot b/pot/Server.pot index fac0e60..63373c3 100644 --- a/pot/Server.pot +++ b/pot/Server.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,26 +20,8 @@ msgstr "" msgid "Server Security" msgstr "" -#. Tag: primary -#: Server.xml:8 Server.xml:59 Server.xml:72 Server.xml:95 Server.xml:131 -#: Server.xml:155 Server.xml:168 Server.xml:220 Server.xml:229 Server.xml:290 -#: Server.xml:353 Server.xml:401 Server.xml:417 Server.xml:450 Server.xml:479 -#: Server.xml:488 Server.xml:521 Server.xml:542 Server.xml:561 Server.xml:577 -#: Server.xml:617 Server.xml:631 Server.xml:674 Server.xml:699 Server.xml:713 -#: Server.xml:744 Server.xml:784 Server.xml:810 Server.xml:850 Server.xml:887 -#: Server.xml:905 Server.xml:921 Server.xml:968 Server.xml:1002 -#, no-c-format -msgid "server security" -msgstr "" - -#. Tag: secondary -#: Server.xml:9 -#, no-c-format -msgid "overview of" -msgstr "" - #. Tag: para -#: Server.xml:11 +#: Server.xml:7 #, no-c-format msgid "" "When a system is used as a server on a public network, it becomes a target " @@ -48,7 +30,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:14 +#: Server.xml:10 #, no-c-format msgid "" "Before delving into specific issues, review the following general tips for " @@ -56,37 +38,37 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:19 +#: Server.xml:15 #, no-c-format msgid "Keep all services current, to protect against the latest threats." msgstr "" #. Tag: para -#: Server.xml:24 +#: Server.xml:20 #, no-c-format msgid "Use secure protocols whenever possible." msgstr "" #. Tag: para -#: Server.xml:29 +#: Server.xml:25 #, no-c-format msgid "Serve only one type of network service per machine whenever possible." msgstr "" #. Tag: para -#: Server.xml:34 +#: Server.xml:30 #, no-c-format msgid "Monitor all servers carefully for suspicious activity." msgstr "" #. Tag: title -#: Server.xml:40 +#: Server.xml:36 #, no-c-format msgid "Securing Services With TCP Wrappers and xinetd" msgstr "" #. Tag: para -#: Server.xml:41 +#: Server.xml:37 #, no-c-format msgid "" "TCP Wrappers provide access control to a variety of " @@ -96,7 +78,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:44 +#: Server.xml:40 #, no-c-format msgid "" "The benefits offered by TCP Wrappers are enhanced when used in conjunction " @@ -105,13 +87,14 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:48 Server.xml:341 Server.xml:507 +#: Server.xml:44 Server.xml:91 Server.xml:227 Server.xml:259 Server.xml:325 +#: Server.xml:372 Server.xml:574 Server.xml:720 #, no-c-format -msgid "Tip" +msgid "Note" msgstr "" #. Tag: para -#: Server.xml:49 +#: Server.xml:45 #, no-c-format msgid "" "It is a good idea to use iptables firewall rules in conjunction with TCP " @@ -121,7 +104,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:53 +#: Server.xml:49 #, no-c-format msgid "" "The following subsections assume a basic knowledge of each topic and focus " @@ -129,19 +112,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:57 +#: Server.xml:53 #, no-c-format msgid "Enhancing Security With TCP Wrappers" msgstr "" -#. Tag: secondary -#: Server.xml:60 Server.xml:73 Server.xml:96 Server.xml:132 -#, no-c-format -msgid "TCP Wrappers" -msgstr "" - #. Tag: para -#: Server.xml:62 +#: Server.xml:54 #, no-c-format msgid "" "TCP Wrappers are capable of much more than denying access to services. This " @@ -152,31 +129,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:66 +#: Server.xml:58 #, no-c-format msgid "TCP Wrappers and Connection Banners" msgstr "" -#. Tag: primary -#: Server.xml:68 Server.xml:100 Server.xml:127 Server.xml:312 Server.xml:883 -#, no-c-format -msgid "TCP Wrappers" -msgstr "" - -#. Tag: secondary -#: Server.xml:69 -#, no-c-format -msgid "banners" -msgstr "" - -#. Tag: tertiary -#: Server.xml:74 -#, no-c-format -msgid "banners" -msgstr "" - #. Tag: para -#: Server.xml:76 +#: Server.xml:59 #, no-c-format msgid "" "Displaying a suitable banner when users connect to a service is a good way " @@ -187,7 +146,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:79 +#: Server.xml:62 #, no-c-format msgid "" "This example implements a banner for vsftpd. To begin, " @@ -197,16 +156,16 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:82 +#: Server.xml:65 #, no-c-format msgid "" -" 220-Hello, %c 220-All activity on ftp.example.com is " -"logged. 220-Inappropriate use will result in your access privileges being " -"removed. " +"220-Hello, %c \n" +"220-All activity on ftp.example.com is logged.\n" +"220-Inappropriate use will result in your access privileges being removed." msgstr "" #. Tag: para -#: Server.xml:83 +#: Server.xml:66 #, no-c-format msgid "" "The %c token supplies a variety of client " @@ -215,7 +174,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:86 +#: Server.xml:69 #, no-c-format msgid "" "For this banner to be displayed to incoming connections, add the following " @@ -223,31 +182,19 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:89 +#: Server.xml:72 #, no-c-format msgid " vsftpd : ALL : banners /etc/banners/ " msgstr "" #. Tag: title -#: Server.xml:93 +#: Server.xml:76 #, no-c-format msgid "TCP Wrappers and Attack Warnings" msgstr "" -#. Tag: tertiary -#: Server.xml:97 -#, no-c-format -msgid "attack warnings" -msgstr "" - -#. Tag: secondary -#: Server.xml:101 -#, no-c-format -msgid "attack warnings" -msgstr "" - #. Tag: para -#: Server.xml:103 +#: Server.xml:77 #, no-c-format msgid "" "If a particular host or network has been detected attacking the server, TCP " @@ -256,7 +203,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:106 +#: Server.xml:80 #, no-c-format msgid "" "In this example, assume that a cracker from the 206.182.68.0/24 network has " @@ -266,7 +213,7 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:109 +#: Server.xml:83 #, no-c-format msgid "" " ALL : 206.182.68.0 : spawn /bin/ 'date' %c %" @@ -274,7 +221,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:110 +#: Server.xml:84 #, no-c-format msgid "" "The %d token supplies the name of the service that " @@ -282,49 +229,31 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:113 +#: Server.xml:87 #, no-c-format msgid "" "To allow the connection and log it, place the spawn " "directive in the /etc/hosts.allow file." msgstr "" -#. Tag: title -#: Server.xml:117 Server.xml:297 Server.xml:433 Server.xml:763 Server.xml:979 -#, no-c-format -msgid "Note" -msgstr "" - #. Tag: para -#: Server.xml:118 +#: Server.xml:92 #, no-c-format msgid "" "Because the spawn directive executes any shell command, " -"create a special script to notify the administrator or execute a chain of " -"commands in the event that a particular client attempts to connect to the " -"server." +"it is a good idea to create a special script to notify the administrator or " +"execute a chain of commands in the event that a particular client attempts " +"to connect to the server." msgstr "" #. Tag: title -#: Server.xml:125 +#: Server.xml:99 #, no-c-format msgid "TCP Wrappers and Enhanced Logging" msgstr "" -#. Tag: secondary -#: Server.xml:128 -#, no-c-format -msgid "logging" -msgstr "" - -#. Tag: tertiary -#: Server.xml:133 -#, no-c-format -msgid "logging" -msgstr "" - #. Tag: para -#: Server.xml:135 +#: Server.xml:100 #, no-c-format msgid "" "If certain types of connections are of more concern than others, the log " @@ -333,7 +262,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:138 +#: Server.xml:103 #, no-c-format msgid "" "For this example, assume that anyone attempting to connect to port 23 (the " @@ -343,20 +272,20 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:141 +#: Server.xml:106 #, no-c-format msgid "" "To do this, place the following line in /etc/hosts.deny:" msgstr "" #. Tag: screen -#: Server.xml:144 +#: Server.xml:109 #, no-c-format msgid " in.telnetd : ALL : severity emerg " msgstr "" #. Tag: para -#: Server.xml:145 +#: Server.xml:110 #, no-c-format msgid "" "This uses the default authpriv logging facility, but " @@ -365,20 +294,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:153 +#: Server.xml:118 #, no-c-format msgid "Enhancing Security With xinetd" msgstr "" -#. Tag: command -#: Server.xml:156 Server.xml:164 Server.xml:169 Server.xml:216 Server.xml:221 -#: Server.xml:225 Server.xml:230 -#, no-c-format -msgid "xinetd" -msgstr "" - #. Tag: para -#: Server.xml:158 +#: Server.xml:119 #, no-c-format msgid "" "This section focuses on using xinetd to set a trap " @@ -390,25 +312,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:162 +#: Server.xml:123 #, no-c-format msgid "Setting a Trap" msgstr "" -#. Tag: secondary -#: Server.xml:165 -#, no-c-format -msgid "SENSOR trap" -msgstr "" - -#. Tag: tertiary -#: Server.xml:170 -#, no-c-format -msgid "SENSOR trap" -msgstr "" - #. Tag: para -#: Server.xml:172 +#: Server.xml:124 #, no-c-format msgid "" "One important feature of xinetd is its ability to add " @@ -421,7 +331,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:175 +#: Server.xml:127 #, no-c-format msgid "" "The first step in setting up a SENSOR is to choose a " @@ -429,7 +339,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:178 +#: Server.xml:130 #, no-c-format msgid "" "Edit the file /etc/xinetd.d/telnet and change the " @@ -437,25 +347,25 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:181 +#: Server.xml:133 #, no-c-format msgid "flags = SENSOR" msgstr "" #. Tag: para -#: Server.xml:182 +#: Server.xml:134 #, no-c-format msgid "Add the following line:" msgstr "" #. Tag: screen -#: Server.xml:185 +#: Server.xml:137 #, no-c-format msgid "deny_time = 30" msgstr "" #. Tag: para -#: Server.xml:186 +#: Server.xml:138 #, no-c-format msgid "" "This denies any further connection attempts to that port by that host for 30 " @@ -465,25 +375,25 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:189 +#: Server.xml:141 #, no-c-format msgid "Finally, the last line should read:" msgstr "" #. Tag: screen -#: Server.xml:192 +#: Server.xml:144 #, no-c-format msgid "disable = no" msgstr "" #. Tag: para -#: Server.xml:193 +#: Server.xml:145 #, no-c-format msgid "This enables the trap itself." msgstr "" #. Tag: para -#: Server.xml:196 +#: Server.xml:148 #, no-c-format msgid "" "While using is a good way to detect and stop " @@ -491,13 +401,13 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:201 +#: Server.xml:153 #, no-c-format msgid "It does not work against stealth scans." msgstr "" #. Tag: para -#: Server.xml:206 +#: Server.xml:158 #, no-c-format msgid "" "An attacker who knows that a is running can mount a " @@ -506,37 +416,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:214 +#: Server.xml:166 #, no-c-format msgid "Controlling Server Resources" msgstr "" -#. Tag: secondary -#: Server.xml:217 -#, no-c-format -msgid "managing resources with" -msgstr "" - -#. Tag: tertiary -#: Server.xml:222 -#, no-c-format -msgid "managing resources with" -msgstr "" - -#. Tag: secondary -#: Server.xml:226 -#, no-c-format -msgid "preventing DoS with" -msgstr "" - -#. Tag: tertiary -#: Server.xml:231 -#, no-c-format -msgid "preventing DoS with" -msgstr "" - #. Tag: para -#: Server.xml:233 +#: Server.xml:167 #, no-c-format msgid "" "Another important feature of xinetd is its ability to set " @@ -544,13 +430,13 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:236 +#: Server.xml:170 #, no-c-format msgid "It does this using the following directives:" msgstr "" #. Tag: para -#: Server.xml:241 +#: Server.xml:175 #, no-c-format msgid "" " " @@ -559,7 +445,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:246 +#: Server.xml:180 #, no-c-format msgid "" " — The number of " @@ -569,7 +455,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:251 +#: Server.xml:185 #, no-c-format msgid "" " — The number of seconds to wait " @@ -578,7 +464,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:258 +#: Server.xml:192 #, no-c-format msgid "" " — Specifies " @@ -587,7 +473,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:263 +#: Server.xml:197 #, no-c-format msgid "" " — " @@ -596,7 +482,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:268 +#: Server.xml:202 #, no-c-format msgid "" " — Specifies the " @@ -606,7 +492,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:273 +#: Server.xml:207 #, no-c-format msgid "" " — Specifies " @@ -615,7 +501,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:278 +#: Server.xml:212 #, no-c-format msgid "" "Using these directives can help prevent any single xinetd " @@ -623,19 +509,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:288 +#: Server.xml:222 #, no-c-format msgid "Securing Portmap" msgstr "" -#. Tag: command -#: Server.xml:291 Server.xml:308 Server.xml:326 -#, no-c-format -msgid "portmap" -msgstr "" - #. Tag: para -#: Server.xml:293 +#: Server.xml:223 #, no-c-format msgid "" "The portmap service is a dynamic port assignment daemon " @@ -645,7 +525,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:298 +#: Server.xml:228 #, no-c-format msgid "" "Securing portmap only affects NFSv2 and NFSv3 " @@ -655,31 +535,19 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:302 +#: Server.xml:232 #, no-c-format msgid "If running RPC services, follow these basic rules." msgstr "" #. Tag: title -#: Server.xml:306 +#: Server.xml:236 #, no-c-format msgid "Protect portmap With TCP Wrappers" msgstr "" -#. Tag: secondary -#: Server.xml:309 -#, no-c-format -msgid "and TCP Wrappers" -msgstr "" - -#. Tag: secondary -#: Server.xml:313 -#, no-c-format -msgid "and portmap" -msgstr "" - #. Tag: para -#: Server.xml:315 +#: Server.xml:237 #, no-c-format msgid "" "It is important to use TCP Wrappers to limit which networks or hosts have " @@ -688,7 +556,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:318 +#: Server.xml:240 #, no-c-format msgid "" "Further, use only IP addresses when limiting access to " @@ -697,19 +565,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:324 +#: Server.xml:246 #, no-c-format msgid "Protect portmap With iptables" msgstr "" -#. Tag: secondary -#: Server.xml:327 -#, no-c-format -msgid "and iptables" -msgstr "" - #. Tag: para -#: Server.xml:329 +#: Server.xml:247 #, no-c-format msgid "" "To further restrict access to the portmap service, it is " @@ -718,7 +580,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:332 +#: Server.xml:250 #, no-c-format msgid "" "Below are two example iptables commands. The first allows TCP connections to " @@ -730,7 +592,7 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:335 +#: Server.xml:253 #, no-c-format msgid "" "iptables -A INPUT -p tcp -s! 192.168.0.0/24 --dport 111 -j DROP\n" @@ -738,19 +600,19 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:336 +#: Server.xml:254 #, no-c-format msgid "To similarly limit UDP traffic, use the following command." msgstr "" #. Tag: screen -#: Server.xml:339 +#: Server.xml:257 #, no-c-format msgid "iptables -A INPUT -p udp -s! 192.168.0.0/24 --dport 111 -j DROP" msgstr "" #. Tag: para -#: Server.xml:342 Server.xml:508 +#: Server.xml:260 Server.xml:373 #, no-c-format msgid "" "Refer to for more " @@ -758,44 +620,24 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:351 +#: Server.xml:269 #, no-c-format msgid "Securing NIS" msgstr "" -#. Tag: secondary -#: Server.xml:354 Server.xml:402 Server.xml:418 Server.xml:451 Server.xml:480 -#: Server.xml:489 Server.xml:522 Server.xml:527 -#, no-c-format -msgid "NIS" -msgstr "" - -#. Tag: primary -#: Server.xml:357 Server.xml:397 Server.xml:413 Server.xml:446 Server.xml:475 -#: Server.xml:484 Server.xml:517 -#, no-c-format -msgid "NIS" -msgstr "" - -#. Tag: secondary -#: Server.xml:358 Server.xml:614 Server.xml:696 Server.xml:902 -#, no-c-format -msgid "introducing" -msgstr "" - #. Tag: para -#: Server.xml:360 +#: Server.xml:270 #, no-c-format msgid "" "The Network Information Service (NIS) is an RPC service, called ypserv,--> which " -"is used in conjunction with portmap and other related " -"services to distribute maps of usernames, passwords, and other sensitive " -"information to any computer claiming to be within its domain." +"acronym>) is an RPC service, called ypserv, which is used " +"in conjunction with portmap and other related services to " +"distribute maps of usernames, passwords, and other sensitive information to " +"any computer claiming to be within its domain." msgstr "" #. Tag: para -#: Server.xml:363 +#: Server.xml:273 #, no-c-format msgid "" "An NIS server is comprised of several applications. They include the " @@ -803,7 +645,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:368 +#: Server.xml:278 #, no-c-format msgid "" "/usr/sbin/rpc.yppasswdd — Also called the " @@ -812,7 +654,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:373 +#: Server.xml:283 #, no-c-format msgid "" "/usr/sbin/rpc.ypxfrd — Also called the " @@ -821,7 +663,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:378 +#: Server.xml:288 #, no-c-format msgid "" "/usr/sbin/yppush — This application propagates " @@ -829,14 +671,14 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:383 +#: Server.xml:293 #, no-c-format msgid "" "/usr/sbin/ypserv — This is the NIS server daemon." msgstr "" #. Tag: para -#: Server.xml:388 +#: Server.xml:298 #, no-c-format msgid "" "NIS is somewhat insecure by today's standards. It has no host " @@ -848,7 +690,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:391 +#: Server.xml:301 #, no-c-format msgid "" "It is recommended that anyone planning to implement an NIS server first " @@ -858,25 +700,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:395 Server.xml:555 +#: Server.xml:305 Server.xml:400 #, no-c-format msgid "Carefully Plan the Network" msgstr "" -#. Tag: secondary -#: Server.xml:398 -#, no-c-format -msgid "planning network" -msgstr "" - -#. Tag: tertiary -#: Server.xml:403 -#, no-c-format -msgid "planning network" -msgstr "" - #. Tag: para -#: Server.xml:405 +#: Server.xml:306 #, no-c-format msgid "" "Because NIS transmits sensitive information unencrypted over the network, it " @@ -887,25 +717,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:411 +#: Server.xml:312 #, no-c-format msgid "Use a Password-like NIS Domain Name and Hostname" msgstr "" -#. Tag: secondary -#: Server.xml:414 -#, no-c-format -msgid "NIS domain name" -msgstr "" - -#. Tag: tertiary -#: Server.xml:419 -#, no-c-format -msgid "NIS domain name" -msgstr "" - #. Tag: para -#: Server.xml:421 +#: Server.xml:313 #, no-c-format msgid "" "Any machine within an NIS domain can use commands to extract information " @@ -914,7 +732,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:424 +#: Server.xml:316 #, no-c-format msgid "" "For instance, if someone either connects a laptop computer into the network " @@ -924,7 +742,7 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:427 +#: Server.xml:319 #, no-c-format msgid "" "ypcat -d <NIS_domain> -h <" @@ -932,7 +750,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:428 +#: Server.xml:320 #, no-c-format msgid "" "If this attacker is a root user, they can obtain the /etc/shadow<NIS_domain> -h <" @@ -948,7 +766,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:434 +#: Server.xml:326 #, no-c-format msgid "" "If Kerberos is used, the /etc/shadow file is not stored " @@ -956,7 +774,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:438 +#: Server.xml:330 #, no-c-format msgid "" "To make access to NIS maps harder for an attacker, create a random string " @@ -967,19 +785,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:444 +#: Server.xml:336 #, no-c-format msgid "Edit the /var/yp/securenets File" msgstr "" -#. Tag: filename -#: Server.xml:447 Server.xml:452 -#, no-c-format -msgid "securenets" -msgstr "" - #. Tag: para -#: Server.xml:454 +#: Server.xml:337 #, no-c-format msgid "" "If the /var/yp/securenets file is blank or does not " @@ -990,26 +802,26 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:457 +#: Server.xml:340 #, no-c-format msgid "" "Below is a sample entry from a /var/yp/securenets file:" msgstr "" #. Tag: screen -#: Server.xml:460 +#: Server.xml:343 #, no-c-format msgid "255.255.255.0 192.168.0.0" msgstr "" #. Tag: title -#: Server.xml:462 Server.xml:830 +#: Server.xml:345 Server.xml:600 Server.xml:623 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Server.xml:463 +#: Server.xml:346 #, no-c-format msgid "" "Never start an NIS server for the first time without creating the /" @@ -1017,7 +829,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:467 +#: Server.xml:350 #, no-c-format msgid "" "This technique does not provide protection from an IP spoofing attack, but " @@ -1025,37 +837,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:473 +#: Server.xml:356 #, no-c-format msgid "Assign Static Ports and Use iptables Rules" msgstr "" -#. Tag: secondary -#: Server.xml:476 -#, no-c-format -msgid "static ports" -msgstr "" - -#. Tag: tertiary -#: Server.xml:481 -#, no-c-format -msgid "static ports" -msgstr "" - -#. Tag: secondary -#: Server.xml:485 -#, no-c-format -msgid "iptables" -msgstr "" - -#. Tag: tertiary -#: Server.xml:490 -#, no-c-format -msgid "iptables" -msgstr "" - #. Tag: para -#: Server.xml:492 +#: Server.xml:357 #, no-c-format msgid "" "All of the servers related to NIS can be assigned specific ports except for " @@ -1067,7 +855,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:495 +#: Server.xml:360 #, no-c-format msgid "" "To do this, add the following lines to /etc/sysconfig/networkKerberos" -msgstr "" - -#. Tag: tertiary -#: Server.xml:523 -#, no-c-format -msgid "Kerberos" -msgstr "" - -#. Tag: primary -#: Server.xml:526 -#, no-c-format -msgid "Kerberos" -msgstr "" - #. Tag: para -#: Server.xml:529 +#: Server.xml:381 #, no-c-format msgid "" "One of the issues to consider when NIS is used for authentication is that " @@ -1143,7 +913,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:532 +#: Server.xml:384 #, no-c-format msgid "" "Since Kerberos uses secret-key cryptography, no password hashes are ever " @@ -1153,31 +923,19 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:540 +#: Server.xml:392 #, no-c-format msgid "Securing NFS" msgstr "" -#. Tag: secondary -#: Server.xml:543 Server.xml:562 Server.xml:578 -#, no-c-format -msgid "NFS" -msgstr "" - -#. Tag: primary -#: Server.xml:546 Server.xml:557 Server.xml:573 Server.xml:964 -#, no-c-format -msgid "NFS" -msgstr "" - #. Tag: title -#: Server.xml:549 Server.xml:683 +#: Server.xml:394 #, no-c-format msgid "Important" msgstr "" #. Tag: para -#: Server.xml:550 +#: Server.xml:395 #, no-c-format msgid "" "The version of NFS included in Fedora, NFSv4, no longer requires the " @@ -1190,20 +948,8 @@ msgid "" "and NFSv3, both of which utilize portmap." msgstr "" -#. Tag: secondary -#: Server.xml:558 -#, no-c-format -msgid "network design" -msgstr "" - -#. Tag: tertiary -#: Server.xml:563 -#, no-c-format -msgid "network design" -msgstr "" - #. Tag: para -#: Server.xml:565 +#: Server.xml:401 #, no-c-format msgid "" "Now that NFSv4 has the ability to pass all information encrypted using " @@ -1215,25 +961,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:571 +#: Server.xml:407 #, no-c-format msgid "Beware of Syntax Errors" msgstr "" -#. Tag: secondary -#: Server.xml:574 -#, no-c-format -msgid "syntax errors" -msgstr "" - -#. Tag: tertiary -#: Server.xml:579 -#, no-c-format -msgid "syntax errors" -msgstr "" - #. Tag: para -#: Server.xml:581 +#: Server.xml:408 #, no-c-format msgid "" "The NFS server determines which file systems to export and which hosts to " @@ -1243,7 +977,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:584 +#: Server.xml:411 #, no-c-format msgid "" "For instance, the following line in the /etc/exports " @@ -1252,13 +986,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:587 +#: Server.xml:414 #, no-c-format msgid "/tmp/nfs/ bob.example.com(rw)" msgstr "" #. Tag: para -#: Server.xml:588 +#: Server.xml:415 #, no-c-format msgid "" "The following line in the /etc/exports file, on the " @@ -1269,13 +1003,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:591 +#: Server.xml:418 #, no-c-format msgid "/tmp/nfs/ bob.example.com (rw)" msgstr "" #. Tag: para -#: Server.xml:592 +#: Server.xml:419 #, no-c-format msgid "" "It is good practice to check any configured NFS shares by using the " @@ -1283,19 +1017,19 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:595 +#: Server.xml:422 #, no-c-format msgid "showmount -e <hostname>" msgstr "" #. Tag: title -#: Server.xml:599 +#: Server.xml:426 #, no-c-format msgid "Do Not Use the no_root_squash Option" msgstr "" #. Tag: para -#: Server.xml:600 +#: Server.xml:427 #, no-c-format msgid "" "By default, NFS shares change the root user to the nfsnobodyno_root_squash is used, remote root users are able to " @@ -1314,198 +1048,199 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:611 +#: Server.xml:436 #, no-c-format -msgid "Securing the Apache HTTP Server" +msgid "NFS Firewall Configuration" msgstr "" -#. Tag: primary -#: Server.xml:613 Server.xml:627 Server.xml:670 -#, no-c-format -msgid "Apache HTTP Server" -msgstr "" - -#. Tag: secondary -#: Server.xml:618 Server.xml:632 Server.xml:675 +#. Tag: para +#: Server.xml:437 #, no-c-format -msgid "Apache HTTP Server" +msgid "" +"The ports used for NFS are assigned dynamically by rpcbind, which can cause " +"problems when creating firewall rules. To simplify this process, use the " +"/etc/sysconfig/nfs file to specify which ports are to " +"be used:" msgstr "" #. Tag: para -#: Server.xml:620 +#: Server.xml:442 #, no-c-format msgid "" -"The Apache HTTP Server is one of the most stable and secure services that " -"ships with Fedora. A large number of options and techniques are available to " -"secure the Apache HTTP Server — too numerous to delve into deeply here." +"MOUNTD_PORT — TCP and UDP port for mountd (rpc." +"mountd)" msgstr "" #. Tag: para -#: Server.xml:623 +#: Server.xml:447 #, no-c-format msgid "" -"System Administrators should be careful when using the following " -"configuration options:" +"STATD_PORT — TCP and UDP port for status (rpc.statd)" msgstr "" -#. Tag: secondary -#: Server.xml:628 +#. Tag: para +#: Server.xml:452 #, no-c-format -msgid "directives" +msgid "" +"LOCKD_TCPPORT — TCP port for nlockmgr (rpc.lockd)" msgstr "" -#. Tag: tertiary -#: Server.xml:633 +#. Tag: para +#: Server.xml:458 #, no-c-format -msgid "directives" +msgid "LOCKD_UDPPORT — UDP port nlockmgr (rpc.lockd)" msgstr "" -#. Tag: command -#: Server.xml:636 +#. Tag: para +#: Server.xml:463 #, no-c-format -msgid "FollowSymLinks" +msgid "" +"Port numbers specified must not be used by any other service. Configure your " +"firewall to allow the port numbers specified, as well as TCP and UDP port " +"2049 (NFS)." msgstr "" #. Tag: para -#: Server.xml:637 +#: Server.xml:466 #, no-c-format msgid "" -"This directive is enabled by default, so be sure to use caution when " -"creating symbolic links to the document root of the Web server. For " -"instance, it is a bad idea to provide a symbolic link to /." +"Run the rpcinfo -p command on the NFS server to see which " +"ports and RPC programs are being used." msgstr "" #. Tag: title -#: Server.xml:643 +#: Server.xml:475 #, no-c-format -msgid "The Indexes Directive" +msgid "Securing the Apache HTTP Server" msgstr "" #. Tag: para -#: Server.xml:644 +#: Server.xml:476 #, no-c-format msgid "" -"This directive is enabled by default, but may not be desirable. To prevent " -"visitors from browsing files on the server, remove this directive." +"The Apache HTTP Server is one of the most stable and secure services that " +"ships with Fedora. A large number of options and techniques are available to " +"secure the Apache HTTP Server — too numerous to delve into deeply " +"here. The following section briefly explains good practices when running the " +"Apache HTTP Server." msgstr "" -#. Tag: title -#: Server.xml:650 +#. Tag: para +#: Server.xml:479 #, no-c-format -msgid "The UserDir Directive" +msgid "" +"Always verify that any scripts running on the system work as intended " +"before putting them into production. Also, ensure that " +"only the root user has write permissions to any directory containing scripts " +"or CGIs. To do this, run the following commands as the root user:" msgstr "" -#. Tag: para -#: Server.xml:651 +#. Tag: screen +#: Server.xml:484 #, no-c-format -msgid "" -"The UserDir directive is disabled by default because it " -"can confirm the presence of a user account on the system. To enable user " -"directory browsing on the server, use the following directives:" +msgid "chown root <directory_name>" msgstr "" #. Tag: screen -#: Server.xml:654 +#: Server.xml:487 #, no-c-format -msgid "" -"UserDir enabled\n" -"UserDir disabled root" +msgid "chmod 755 <directory_name>" msgstr "" #. Tag: para -#: Server.xml:655 +#: Server.xml:490 #, no-c-format msgid "" -"These directives activate user directory browsing for all user directories " -"other than /root/. To add users to the list of disabled " -"accounts, add a space-delimited list of users on the UserDir " -"disabled line." +"System administrators should be careful when using the following " +"configuration options (configured in /etc/httpd/conf/httpd.conf):" msgstr "" -#. Tag: title -#: Server.xml:661 +#. Tag: option +#: Server.xml:494 #, no-c-format -msgid "Do Not Remove the IncludesNoExec Directive" +msgid "FollowSymLinks" msgstr "" #. Tag: para -#: Server.xml:662 +#: Server.xml:496 #, no-c-format msgid "" -"By default, the Server-Side Includes (SSI) module cannot execute commands. It is recommended that you do not " -"change this setting unless absolutely necessary, as it could potentially " -"enable an attacker to execute commands on the system." +"This directive is enabled by default, so be sure to use caution when " +"creating symbolic links to the document root of the Web server. For " +"instance, it is a bad idea to provide a symbolic link to /." msgstr "" -#. Tag: title -#: Server.xml:668 +#. Tag: option +#: Server.xml:501 #, no-c-format -msgid "Restrict Permissions for Executable Directories" +msgid "Indexes" msgstr "" -#. Tag: secondary -#: Server.xml:671 +#. Tag: para +#: Server.xml:503 #, no-c-format -msgid "cgi security" +msgid "" +"This directive is enabled by default, but may not be desirable. To prevent " +"visitors from browsing files on the server, remove this directive." msgstr "" -#. Tag: tertiary -#: Server.xml:676 +#. Tag: option +#: Server.xml:508 #, no-c-format -msgid "cgi security" +msgid "UserDir" msgstr "" #. Tag: para -#: Server.xml:678 +#: Server.xml:510 #, no-c-format msgid "" -"Ensure that only the root user has write permissions to any directory " -"containing scripts or CGIs. To do this, type the following commands:" +"The directive is disabled by default because it can " +"confirm the presence of a user account on the system. To enable user " +"directory browsing on the server, use the following directives:" msgstr "" #. Tag: screen -#: Server.xml:681 +#: Server.xml:514 #, no-c-format msgid "" -"chown root <directory_name>chmod 755 " -"<directory_name>" +"UserDir enabled\n" +"UserDir disabled root" msgstr "" #. Tag: para -#: Server.xml:684 +#: Server.xml:516 #, no-c-format msgid "" -"Always verify that any scripts running on the system work as intended " -"before putting them into production." -msgstr "" - -#. Tag: title -#: Server.xml:693 -#, no-c-format -msgid "Securing FTP" +"These directives activate user directory browsing for all user directories " +"other than /root/. To add users to the list of disabled " +"accounts, add a space-delimited list of users on the line." msgstr "" -#. Tag: primary -#: Server.xml:695 Server.xml:709 Server.xml:740 Server.xml:780 Server.xml:806 -#: Server.xml:846 Server.xml:879 +#. Tag: para +#: Server.xml:523 #, no-c-format -msgid "FTP" +msgid "" +"Do not remove the directive. By default, the " +"Server-Side Includes (SSI) module " +"cannot execute commands. It is recommended that you do not change this " +"setting unless absolutely necessary, as it could, potentially, enable an " +"attacker to execute commands on the system." msgstr "" -#. Tag: secondary -#: Server.xml:700 Server.xml:714 Server.xml:745 Server.xml:785 Server.xml:811 -#: Server.xml:851 Server.xml:888 +#. Tag: title +#: Server.xml:530 #, no-c-format -msgid "FTP" +msgid "Securing FTP" msgstr "" #. Tag: para -#: Server.xml:702 +#: Server.xml:531 #, no-c-format msgid "" -"The File Transport Protocol (FTP) is " +"The File Transfer Protocol (FTP) is " "an older TCP protocol designed to transfer files over a network. Because all " "transactions with the server, including user authentication, are " "unencrypted, it is considered an insecure protocol and should be carefully " @@ -1513,19 +1248,13 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:705 +#: Server.xml:534 #, no-c-format msgid "Fedora provides three FTP servers." msgstr "" -#. Tag: command -#: Server.xml:710 Server.xml:715 -#, no-c-format -msgid "vsftpd" -msgstr "" - #. Tag: para -#: Server.xml:719 +#: Server.xml:539 #, no-c-format msgid "" "gssftpd — A Kerberos-aware xinetdRed Hat Content Accelerator (tuxvsftpd — A standalone, security oriented " @@ -1550,7 +1279,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:734 +#: Server.xml:554 #, no-c-format msgid "" "The following security guidelines are for setting up the vsftpdgreeting banner" -msgstr "" - -#. Tag: tertiary -#: Server.xml:746 -#, no-c-format -msgid "greeting banner" -msgstr "" - #. Tag: para -#: Server.xml:748 +#: Server.xml:559 #, no-c-format msgid "" "Before submitting a username and password, all users are presented with a " @@ -1585,7 +1302,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:751 +#: Server.xml:562 #, no-c-format msgid "" "To change the greeting banner for vsftpd, add the " @@ -1593,13 +1310,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:754 +#: Server.xml:565 #, no-c-format msgid "ftpd_banner=<insert_greeting_here>" msgstr "" #. Tag: para -#: Server.xml:755 +#: Server.xml:566 #, no-c-format msgid "" "Replace <insert_greeting_here> in the above " @@ -1607,7 +1324,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:758 +#: Server.xml:569 #, no-c-format msgid "" "For mutli-line banners, it is best to use a banner file. To simplify " @@ -1618,13 +1335,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:761 +#: Server.xml:572 #, no-c-format msgid "######### # Hello, all activity on ftp.example.com is logged. #########" msgstr "" #. Tag: para -#: Server.xml:764 +#: Server.xml:575 #, no-c-format msgid "" "It is not necessary to begin each line of the file with 220vsftpd, add " @@ -1642,13 +1359,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:771 +#: Server.xml:582 #, no-c-format msgid "banner_file=/etc/banners/ftp.msg" msgstr "" #. Tag: para -#: Server.xml:772 +#: Server.xml:583 #, no-c-format msgid "" "It also is possible to send additional banners to incoming connections using " @@ -1657,25 +1374,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:778 +#: Server.xml:589 #, no-c-format msgid "Anonymous Access" msgstr "" -#. Tag: secondary -#: Server.xml:781 -#, no-c-format -msgid "anonymous access" -msgstr "" - -#. Tag: tertiary -#: Server.xml:786 -#, no-c-format -msgid "anonymous access" -msgstr "" - #. Tag: para -#: Server.xml:788 +#: Server.xml:590 #, no-c-format msgid "" "The presence of the /var/ftp/ directory activates the " @@ -1683,7 +1388,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:791 +#: Server.xml:593 #, no-c-format msgid "" "The easiest way to create this directory is to install the vsftpdanonymous upload" -msgstr "" - -#. Tag: tertiary -#: Server.xml:812 -#, no-c-format -msgid "anonymous upload" -msgstr "" - #. Tag: para -#: Server.xml:814 +#: Server.xml:607 #, no-c-format msgid "" "To allow anonymous users to upload files, it is recommended that a write-" @@ -1739,19 +1426,19 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:817 +#: Server.xml:610 #, no-c-format msgid "To do this, type the following command:" msgstr "" #. Tag: screen -#: Server.xml:820 +#: Server.xml:613 #, no-c-format msgid "mkdir /var/ftp/pub/upload" msgstr "" #. Tag: para -#: Server.xml:821 +#: Server.xml:614 #, no-c-format msgid "" "Next, change the permissions so that anonymous users cannot view the " @@ -1759,25 +1446,25 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:824 +#: Server.xml:617 #, no-c-format msgid "chmod 730 /var/ftp/pub/upload" msgstr "" #. Tag: para -#: Server.xml:825 +#: Server.xml:618 #, no-c-format msgid "A long format listing of the directory should look like this:" msgstr "" #. Tag: screen -#: Server.xml:828 +#: Server.xml:621 #, no-c-format msgid "drwx-wx--- 2 root ftp 4096 Feb 13 20:05 upload" msgstr "" #. Tag: para -#: Server.xml:831 +#: Server.xml:624 #, no-c-format msgid "" "Administrators who allow anonymous users to read and write in directories " @@ -1785,7 +1472,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:835 +#: Server.xml:628 #, no-c-format msgid "" "Additionally, under vsftpd, add the following line to the " @@ -1793,31 +1480,19 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:838 +#: Server.xml:631 #, no-c-format msgid "anon_upload_enable=YES" msgstr "" #. Tag: title -#: Server.xml:844 +#: Server.xml:637 #, no-c-format msgid "User Accounts" msgstr "" -#. Tag: secondary -#: Server.xml:847 -#, no-c-format -msgid "user accounts" -msgstr "" - -#. Tag: tertiary -#: Server.xml:852 -#, no-c-format -msgid "user accounts" -msgstr "" - #. Tag: para -#: Server.xml:854 +#: Server.xml:638 #, no-c-format msgid "" "Because FTP transmits unencrypted usernames and passwords over insecure " @@ -1826,7 +1501,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:857 +#: Server.xml:641 #, no-c-format msgid "" "To disable all user accounts in vsftpd, add the following " @@ -1834,19 +1509,19 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:860 +#: Server.xml:644 #, no-c-format msgid "local_enable=NO" msgstr "" #. Tag: title -#: Server.xml:862 +#: Server.xml:646 #, no-c-format msgid "Restricting User Accounts" msgstr "" #. Tag: para -#: Server.xml:863 +#: Server.xml:647 #, no-c-format msgid "" "To disable FTP access for specific accounts or specific groups of accounts, " @@ -1858,14 +1533,14 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:866 +#: Server.xml:650 #, no-c-format msgid "" "It is also possible to disable user accounts within each service directly." msgstr "" #. Tag: para -#: Server.xml:869 +#: Server.xml:653 #, no-c-format msgid "" "To disable specific user accounts in vsftpd, add the " @@ -1873,31 +1548,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:877 +#: Server.xml:661 #, no-c-format msgid "Use TCP Wrappers To Control Access" msgstr "" -#. Tag: secondary -#: Server.xml:880 -#, no-c-format -msgid "TCP Wrappers and" -msgstr "" - -#. Tag: secondary -#: Server.xml:884 -#, no-c-format -msgid "and FTP" -msgstr "" - -#. Tag: tertiary -#: Server.xml:889 -#, no-c-format -msgid "TCP Wrappers and" -msgstr "" - #. Tag: para -#: Server.xml:891 +#: Server.xml:662 #, no-c-format msgid "" "Use TCP Wrappers to control access to either FTP daemon as outlined in Sendmail" -msgstr "" - -#. Tag: secondary -#: Server.xml:906 Server.xml:922 Server.xml:969 -#, no-c-format -msgid "Sendmail" -msgstr "" - #. Tag: para -#: Server.xml:908 +#: Server.xml:671 #, no-c-format msgid "" -"Sendmail is a Mail Transport Agent (MTA) that uses the Simple Mail Transport " +"Sendmail is a Mail Transfer Agent (MTA) that uses the Simple Mail Transfer " "Protocol (SMTP) to deliver electronic messages between other MTAs and to " "email clients or delivery agents. Although many MTAs are capable of " "encrypting traffic between one another, most do not, so sending email over " @@ -1936,7 +1581,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:911 +#: Server.xml:674 #, no-c-format msgid "" "It is recommended that anyone planning to implement a Sendmail server " @@ -1944,25 +1589,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:915 +#: Server.xml:678 #, no-c-format msgid "Limiting a Denial of Service Attack" msgstr "" -#. Tag: secondary -#: Server.xml:918 -#, no-c-format -msgid "limiting DoS" -msgstr "" - -#. Tag: tertiary -#: Server.xml:923 -#, no-c-format -msgid "limiting DoS" -msgstr "" - #. Tag: para -#: Server.xml:925 +#: Server.xml:679 #, no-c-format msgid "" "Because of the nature of email, a determined attacker can flood the server " @@ -1972,7 +1605,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:930 +#: Server.xml:684 #, no-c-format msgid "" "confCONNECTION_RATE_THROTTLE — The number of " @@ -1982,7 +1615,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:935 +#: Server.xml:689 #, no-c-format msgid "" "confMAX_DAEMON_CHILDREN — The maximum number of " @@ -1992,7 +1625,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:940 +#: Server.xml:694 #, no-c-format msgid "" "confMIN_FREE_BLOCKS — The minimum number of free " @@ -2001,7 +1634,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:945 +#: Server.xml:699 #, no-c-format msgid "" "confMAX_HEADERS_LENGTH — The maximum acceptable " @@ -2009,7 +1642,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:950 +#: Server.xml:704 #, no-c-format msgid "" "confMAX_MESSAGE_SIZE — The maximum acceptable size " @@ -2017,31 +1650,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:958 +#: Server.xml:712 #, no-c-format msgid "NFS and Sendmail" msgstr "" -#. Tag: secondary -#: Server.xml:961 -#, no-c-format -msgid "and NFS" -msgstr "" - -#. Tag: secondary -#: Server.xml:965 -#, no-c-format -msgid "and Sendmail" -msgstr "" - -#. Tag: tertiary -#: Server.xml:970 -#, no-c-format -msgid "and NFS" -msgstr "" - #. Tag: para -#: Server.xml:972 +#: Server.xml:713 #, no-c-format msgid "" "Never put the mail spool directory, /var/spool/mail/, " @@ -2049,7 +1664,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:975 +#: Server.xml:716 #, no-c-format msgid "" "Because NFSv2 and NFSv3 do not maintain control over user and group IDs, two " @@ -2058,23 +1673,23 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:980 +#: Server.xml:721 #, no-c-format msgid "" "With NFSv4 using Kerberos, this is not the case, since the " "SECRPC_GSS kernel module does not utilize UID-based " -"authentication. However, it is considered good practice notnot to put the mail spool directory on NFS shared volumes." msgstr "" #. Tag: title -#: Server.xml:987 +#: Server.xml:728 #, no-c-format msgid "Mail-only Users" msgstr "" #. Tag: para -#: Server.xml:988 +#: Server.xml:729 #, no-c-format msgid "" "To help prevent local user exploits on the Sendmail server, it is best for " @@ -2085,61 +1700,13 @@ msgid "" msgstr "" #. Tag: title -#: Server.xml:996 +#: Server.xml:737 #, no-c-format msgid "Verifying Which Ports Are Listening" msgstr "" -#. Tag: primary -#: Server.xml:998 -#, no-c-format -msgid "ports" -msgstr "" - -#. Tag: secondary -#: Server.xml:999 -#, no-c-format -msgid "monitoring" -msgstr "" - -#. Tag: secondary -#: Server.xml:1003 -#, no-c-format -msgid "ports" -msgstr "" - -#. Tag: tertiary -#: Server.xml:1004 -#, no-c-format -msgid "monitoring" -msgstr "" - -#. Tag: command -#: Server.xml:1007 -#, no-c-format -msgid "nmap" -msgstr "" - -#. Tag: command -#: Server.xml:1010 -#, no-c-format -msgid "netstat" -msgstr "" - -#. Tag: primary -#: Server.xml:1013 -#, no-c-format -msgid "services" -msgstr "" - -#. Tag: command -#: Server.xml:1016 -#, no-c-format -msgid "lsof" -msgstr "" - #. Tag: para -#: Server.xml:1018 +#: Server.xml:738 #, no-c-format msgid "" "After configuring network services, it is important to pay attention to " @@ -2148,7 +1715,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1021 +#: Server.xml:741 #, no-c-format msgid "" "There are two basic approaches for listing the ports that are listening on " @@ -2163,7 +1730,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1024 +#: Server.xml:744 #, no-c-format msgid "" "A more reliable way to check which ports are listening on the network is to " @@ -2171,7 +1738,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1027 +#: Server.xml:747 #, no-c-format msgid "" "The following command issued from the console determines which ports are " @@ -2179,25 +1746,24 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:1030 +#: Server.xml:750 #, no-c-format msgid "nmap -sT -O localhost" msgstr "" #. Tag: para -#: Server.xml:1031 +#: Server.xml:751 #, no-c-format msgid "The output of this command appears as follows:" msgstr "" #. Tag: screen -#: Server.xml:1034 +#: Server.xml:754 #, no-c-format msgid "" -"Starting nmap 3.55 ( http://www.insecure.org/nmap/ ) at 2004-09-24 13:49 " -"EDT\n" +"Starting Nmap 4.68 ( http://nmap.org ) at 2009-03-06 12:08 EST\n" "Interesting ports on localhost.localdomain (127.0.0.1):\n" -"(The 1653 ports scanned but not shown below are in state: closed)\n" +"Not shown: 1711 closed ports\n" "PORT STATE SERVICE\n" "22/tcp open ssh \n" "25/tcp open smtp\n" @@ -2208,15 +1774,17 @@ msgid "" "2601/tcp open zebra\n" "32774/tcp open sometimes-rpc11\n" "Device type: general purpose\n" -"Running: Linux 2.4.X|2.5.X|2.6.X OS details: Linux 2.5.25 - 2.6.3 or Gentoo " -"1.2 Linux 2.4.19 rc1-rc7)\n" -"Uptime 12.857 days (since Sat Sep 11 17:16:20 2004)\n" -"\n" -"Nmap run completed -- 1 IP address (1 host up) scanned in 5.190 seconds" +"Running: Linux 2.6.X\n" +"OS details: Linux 2.6.17 - 2.6.24\n" +"Uptime: 4.122 days (since Mon Mar 2 09:12:31 2009)\n" +"Network Distance: 0 hops\n" +"OS detection performed. Please report any incorrect results at http://nmap." +"org/submit/ .\n" +"Nmap done: 1 IP address (1 host up) scanned in 1.420 seconds" msgstr "" #. Tag: para -#: Server.xml:1035 +#: Server.xml:755 #, no-c-format msgid "" "This output shows the system is running portmap due to " @@ -2226,13 +1794,13 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:1038 +#: Server.xml:758 #, no-c-format msgid "cat /etc/services | grep 834" msgstr "" #. Tag: para -#: Server.xml:1039 +#: Server.xml:759 #, no-c-format msgid "" "This command returns no output. This indicates that while the port is in the " @@ -2241,7 +1809,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1042 +#: Server.xml:762 #, no-c-format msgid "" "Next, check for information about the port using netstat " @@ -2250,25 +1818,25 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:1045 +#: Server.xml:765 #, no-c-format msgid "netstat -anp | grep 834" msgstr "" #. Tag: para -#: Server.xml:1046 +#: Server.xml:766 #, no-c-format msgid "The command returns the following output:" msgstr "" #. Tag: screen -#: Server.xml:1049 +#: Server.xml:769 #, no-c-format msgid "tcp 0 0 0.0.0.0:834 0.0.0.0:* LISTEN 653/ypbind" msgstr "" #. Tag: para -#: Server.xml:1050 +#: Server.xml:770 #, no-c-format msgid "" "The presence of the open port in netstat is reassuring " @@ -2281,7 +1849,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1053 +#: Server.xml:773 #, no-c-format msgid "" "The lsof command reveals similar information to " @@ -2290,19 +1858,19 @@ msgid "" msgstr "" #. Tag: screen -#: Server.xml:1056 +#: Server.xml:776 #, no-c-format msgid "lsof -i | grep 834" msgstr "" #. Tag: para -#: Server.xml:1057 +#: Server.xml:777 #, no-c-format msgid "The relevant portion of the output from this command follows:" msgstr "" #. Tag: screen -#: Server.xml:1060 +#: Server.xml:780 #, no-c-format msgid "" "ypbind 653 0 7u IPv4 1319 TCP *:834 " @@ -2316,7 +1884,7 @@ msgid "" msgstr "" #. Tag: para -#: Server.xml:1061 +#: Server.xml:781 #, no-c-format msgid "" "These tools reveal a great deal about the status of the services running on " diff --git a/pot/SoftwareMaintenance.pot b/pot/SoftwareMaintenance.pot index f766c6c..5850057 100644 --- a/pot/SoftwareMaintenance.pot +++ b/pot/SoftwareMaintenance.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -95,7 +95,7 @@ msgstr "" #: SoftwareMaintenance.xml:30 #, no-c-format msgid "" -"Fedora 9 is configured to apply all updates on a daily schedule. If you want " +"Fedora is configured to apply all updates on a daily schedule. If you want " "to change the how your system installs updates you must do so via " "'''Software Update Preferences'''. You can change the schedule, the type of " "updates to apply or to notify you of available updates." diff --git a/pot/Tcp_Wrappers.pot b/pot/Tcp_Wrappers.pot index dd39fa9..40fade9 100644 --- a/pot/Tcp_Wrappers.pot +++ b/pot/Tcp_Wrappers.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,45 +20,8 @@ msgstr "" msgid "TCP Wrappers and xinetd" msgstr "" -#. Tag: primary -#: Tcp_Wrappers.xml:8 Tcp_Wrappers.xml:43 Tcp_Wrappers.xml:51 -#: Tcp_Wrappers.xml:56 Tcp_Wrappers.xml:95 Tcp_Wrappers.xml:120 -#: Tcp_Wrappers.xml:125 Tcp_Wrappers.xml:138 Tcp_Wrappers.xml:207 -#: Tcp_Wrappers.xml:283 Tcp_Wrappers.xml:331 Tcp_Wrappers.xml:412 -#: Tcp_Wrappers.xml:443 Tcp_Wrappers.xml:453 Tcp_Wrappers.xml:479 -#: Tcp_Wrappers.xml:498 Tcp_Wrappers.xml:503 Tcp_Wrappers.xml:508 -#: Tcp_Wrappers.xml:543 Tcp_Wrappers.xml:636 Tcp_Wrappers.xml:1061 -#: Tcp_Wrappers.xml:1070 Tcp_Wrappers.xml:1140 Tcp_Wrappers.xml:1166 -#, no-c-format -msgid "TCP Wrappers" -msgstr "" - -#. Tag: secondary -#: Tcp_Wrappers.xml:9 Tcp_Wrappers.xml:13 Tcp_Wrappers.xml:645 -#, no-c-format -msgid "introducing" -msgstr "" - -#. Tag: systemitem -#: Tcp_Wrappers.xml:12 Tcp_Wrappers.xml:637 Tcp_Wrappers.xml:640 -#: Tcp_Wrappers.xml:644 Tcp_Wrappers.xml:664 Tcp_Wrappers.xml:685 -#: Tcp_Wrappers.xml:690 Tcp_Wrappers.xml:744 Tcp_Wrappers.xml:749 -#: Tcp_Wrappers.xml:827 Tcp_Wrappers.xml:877 Tcp_Wrappers.xml:882 -#: Tcp_Wrappers.xml:967 Tcp_Wrappers.xml:972 Tcp_Wrappers.xml:1009 -#: Tcp_Wrappers.xml:1014 Tcp_Wrappers.xml:1024 Tcp_Wrappers.xml:1075 -#: Tcp_Wrappers.xml:1145 Tcp_Wrappers.xml:1171 -#, no-c-format -msgid "xinetd" -msgstr "" - -#. Tag: primary -#: Tcp_Wrappers.xml:16 -#, no-c-format -msgid "access control" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:18 +#: Tcp_Wrappers.xml:7 #, no-c-format msgid "" "Controlling access to network services is one of the most important security " @@ -75,7 +38,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:21 +#: Tcp_Wrappers.xml:10 #, no-c-format msgid "" "is a basic illustration of how these tools work together to protect network " @@ -83,19 +46,19 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:25 +#: Tcp_Wrappers.xml:14 #, no-c-format msgid "Access Control to Network Services" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:31 +#: Tcp_Wrappers.xml:20 #, no-c-format msgid "Exhibit A: Access Control to Network Services Flowchart" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:37 +#: Tcp_Wrappers.xml:26 #, no-c-format msgid "" "This chapter focuses on the role of TCP Wrappers and TCP Wrappers" -msgstr "" - -#. Tag: secondary -#: Tcp_Wrappers.xml:44 -#, no-c-format -msgid "definition of" -msgstr "" - -#. Tag: primary -#: Tcp_Wrappers.xml:47 -#, no-c-format -msgid "hosts access files" -msgstr "" - -#. Tag: see -#: Tcp_Wrappers.xml:48 Tcp_Wrappers.xml:131 Tcp_Wrappers.xml:135 -#, no-c-format -msgid "TCP Wrappers" -msgstr "" - -#. Tag: secondary -#: Tcp_Wrappers.xml:52 Tcp_Wrappers.xml:57 Tcp_Wrappers.xml:121 -#: Tcp_Wrappers.xml:126 Tcp_Wrappers.xml:139 Tcp_Wrappers.xml:208 -#: Tcp_Wrappers.xml:284 Tcp_Wrappers.xml:332 Tcp_Wrappers.xml:413 -#: Tcp_Wrappers.xml:444 Tcp_Wrappers.xml:454 Tcp_Wrappers.xml:480 -#: Tcp_Wrappers.xml:499 Tcp_Wrappers.xml:504 Tcp_Wrappers.xml:509 -#: Tcp_Wrappers.xml:544 Tcp_Wrappers.xml:665 Tcp_Wrappers.xml:686 -#: Tcp_Wrappers.xml:691 Tcp_Wrappers.xml:745 Tcp_Wrappers.xml:750 -#: Tcp_Wrappers.xml:828 Tcp_Wrappers.xml:878 Tcp_Wrappers.xml:968 -#: Tcp_Wrappers.xml:973 Tcp_Wrappers.xml:1010 -#, no-c-format -msgid "configuration files" -msgstr "" - -#. Tag: filename -#: Tcp_Wrappers.xml:53 Tcp_Wrappers.xml:122 Tcp_Wrappers.xml:148 +#: Tcp_Wrappers.xml:30 #, no-c-format -msgid "/etc/hosts.allow" -msgstr "" - -#. Tag: filename -#: Tcp_Wrappers.xml:58 Tcp_Wrappers.xml:127 Tcp_Wrappers.xml:153 -#, no-c-format -msgid "/etc/hosts.deny" +msgid "TCP Wrappers" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:60 +#: Tcp_Wrappers.xml:31 #, no-c-format msgid "" "The TCP Wrappers package (tcp_wrappers) is installed by " @@ -167,7 +86,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:63 +#: Tcp_Wrappers.xml:34 #, no-c-format msgid "" "When a connection attempt is made to a TCP-wrapped service, the service " @@ -180,7 +99,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:66 +#: Tcp_Wrappers.xml:37 #, no-c-format msgid "" "If a client is allowed to connect, TCP Wrappers release control of the " @@ -189,7 +108,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:69 +#: Tcp_Wrappers.xml:40 #, no-c-format msgid "" "In addition to access control and logging, TCP Wrappers can execute commands " @@ -198,7 +117,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:72 +#: Tcp_Wrappers.xml:43 #, no-c-format msgid "" "Because TCP Wrappers are a valuable addition to any server administrator'" @@ -210,15 +129,15 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:76 Tcp_Wrappers.xml:236 Tcp_Wrappers.xml:431 -#: Tcp_Wrappers.xml:469 Tcp_Wrappers.xml:734 Tcp_Wrappers.xml:777 -#: Tcp_Wrappers.xml:892 +#: Tcp_Wrappers.xml:47 Tcp_Wrappers.xml:175 Tcp_Wrappers.xml:355 +#: Tcp_Wrappers.xml:383 Tcp_Wrappers.xml:597 Tcp_Wrappers.xml:630 +#: Tcp_Wrappers.xml:731 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:77 +#: Tcp_Wrappers.xml:48 #, no-c-format msgid "" "To determine if a network service binary is linked to libwrap.a<binary-name> with the name of the " @@ -240,7 +159,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:84 +#: Tcp_Wrappers.xml:55 #, no-c-format msgid "" "If the command returns straight to the prompt with no output, then the " @@ -249,7 +168,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:87 +#: Tcp_Wrappers.xml:58 #, no-c-format msgid "" "The following example indicates that /usr/sbin/" @@ -257,28 +176,22 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:90 +#: Tcp_Wrappers.xml:61 #, no-c-format msgid "" -"[root@myserver ~]# ldd /usr/sbin/sshd | grep libwrap\n" -" libwrap.so.0 => /usr/lib/libwrap.so.0 (0x00655000)\n" -"[root@myserver ~]#" +"[root@myServer ~]# ldd /usr/sbin/sshd | grep libwrap\n" +" libwrap.so.0 => /lib/libwrap.so.0 (0x00655000)\n" +"[root@myServer ~]#" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:93 +#: Tcp_Wrappers.xml:64 #, no-c-format msgid "Advantages of TCP Wrappers" msgstr "" -#. Tag: secondary -#: Tcp_Wrappers.xml:96 -#, no-c-format -msgid "advantages of" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:98 +#: Tcp_Wrappers.xml:65 #, no-c-format msgid "" "TCP Wrappers provide the following advantages over other network service " @@ -286,7 +199,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:103 +#: Tcp_Wrappers.xml:70 #, no-c-format msgid "" "Transparency to both the client and the wrapped network serviceCentralized management of multiple protocols — " @@ -307,40 +220,34 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:118 +#: Tcp_Wrappers.xml:85 #, no-c-format msgid "TCP Wrappers Configuration Files" msgstr "" -#. Tag: filename -#: Tcp_Wrappers.xml:130 +#. Tag: para +#: Tcp_Wrappers.xml:86 #, no-c-format -msgid "hosts.allow" +msgid "" +"To determine if a client is allowed to connect to a service, TCP Wrappers " +"reference the following two files, which are commonly referred to as " +"hosts access files:" msgstr "" #. Tag: filename -#: Tcp_Wrappers.xml:134 +#: Tcp_Wrappers.xml:92 #, no-c-format -msgid "hosts.deny" -msgstr "" - -#. Tag: tertiary -#: Tcp_Wrappers.xml:140 -#, no-c-format -msgid "hosts access files" +msgid "/etc/hosts.allow" msgstr "" -#. Tag: para -#: Tcp_Wrappers.xml:142 +#. Tag: filename +#: Tcp_Wrappers.xml:97 #, no-c-format -msgid "" -"To determine if a client is allowed to connect to a service, TCP Wrappers " -"reference the following two files, which are commonly referred to as " -"hosts access files:" +msgid "/etc/hosts.deny" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:157 +#: Tcp_Wrappers.xml:101 #, no-c-format msgid "" "When a TCP-wrapped service receives a client request, it performs the " @@ -348,7 +255,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:162 +#: Tcp_Wrappers.xml:106 #, no-c-format msgid "" "It references /etc/hosts.allow. " @@ -359,7 +266,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:167 +#: Tcp_Wrappers.xml:111 #, no-c-format msgid "" "It references /etc/hosts.deny. " @@ -369,7 +276,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:172 +#: Tcp_Wrappers.xml:116 #, no-c-format msgid "" "The following are important points to consider when using TCP Wrappers to " @@ -377,7 +284,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:177 +#: Tcp_Wrappers.xml:121 #, no-c-format msgid "" "Because access rules in hosts.allow are applied first, " @@ -388,7 +295,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:182 +#: Tcp_Wrappers.xml:126 #, no-c-format msgid "" "The rules in each file are read from the top down and the first matching " @@ -397,7 +304,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:187 +#: Tcp_Wrappers.xml:131 #, no-c-format msgid "" "If no rules for the service are found in either file, or if neither file " @@ -405,7 +312,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:192 +#: Tcp_Wrappers.xml:136 #, no-c-format msgid "" "TCP-wrapped services do not cache the rules from the hosts access files, so " @@ -414,13 +321,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:198 Tcp_Wrappers.xml:389 +#: Tcp_Wrappers.xml:142 Tcp_Wrappers.xml:318 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:199 +#: Tcp_Wrappers.xml:143 #, no-c-format msgid "" "If the last line of a hosts access file is not a newline character (created " @@ -433,25 +340,19 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:202 +#: Tcp_Wrappers.xml:146 #, no-c-format msgid "warning: /etc/hosts.allow, line 20: missing newline or line too long" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:205 +#: Tcp_Wrappers.xml:149 #, no-c-format msgid "Formatting Access Rules" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:209 -#, no-c-format -msgid "formatting rules within" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:211 +#: Tcp_Wrappers.xml:150 #, no-c-format msgid "" "The format for both /etc/hosts.allow and /etc/" @@ -460,7 +361,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:214 +#: Tcp_Wrappers.xml:153 #, no-c-format msgid "" "Each rule uses the following basic format to control access to network " @@ -468,7 +369,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:217 +#: Tcp_Wrappers.xml:156 #, no-c-format msgid "" "<daemon list>: <client " @@ -477,7 +378,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:220 +#: Tcp_Wrappers.xml:159 #, no-c-format msgid "" "<daemon list> — A comma-separated " @@ -488,7 +389,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:225 +#: Tcp_Wrappers.xml:164 #, no-c-format msgid "" "<client list> — A comma-separated " @@ -499,7 +400,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:230 +#: Tcp_Wrappers.xml:169 #, no-c-format msgid "" "<option> — An optional action or " @@ -509,7 +410,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:237 +#: Tcp_Wrappers.xml:176 #, no-c-format msgid "" "More information on the specialist terms above can be found elsewhere in " @@ -517,19 +418,19 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:263 +#: Tcp_Wrappers.xml:202 #, no-c-format msgid "The following is a basic sample hosts access rule:" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:266 +#: Tcp_Wrappers.xml:205 #, no-c-format msgid "vsftpd : .example.com" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:267 +#: Tcp_Wrappers.xml:206 #, no-c-format msgid "" "This rule instructs TCP Wrappers to watch for connections to the FTP daemon " @@ -541,14 +442,14 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:270 +#: Tcp_Wrappers.xml:209 #, no-c-format msgid "" "The next sample hosts access rule is more complex and uses two option fields:" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:273 +#: Tcp_Wrappers.xml:212 #, no-c-format msgid "" "sshd : .example.com \\ : spawn /bin/echo `/bin/date` access denied>>/" @@ -556,7 +457,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:274 +#: Tcp_Wrappers.xml:213 #, no-c-format msgid "" "Note that each option field is preceded by the backslash (\\). Use of the " @@ -564,7 +465,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:277 +#: Tcp_Wrappers.xml:216 #, no-c-format msgid "" "This sample rule states that if a connection to the SSH daemon (ALL — Matches everything. It can be used for both the " @@ -614,7 +509,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:300 +#: Tcp_Wrappers.xml:234 #, no-c-format msgid "" " — Matches any host that does not contain a " @@ -622,7 +517,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:305 +#: Tcp_Wrappers.xml:239 #, no-c-format msgid "" " — Matches any host where the hostname and host " @@ -630,7 +525,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:310 +#: Tcp_Wrappers.xml:244 #, no-c-format msgid "" " — Matches any host where the hostname or host " @@ -638,7 +533,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:315 +#: Tcp_Wrappers.xml:249 #, no-c-format msgid "" " — Matches any host where the hostname does " @@ -646,13 +541,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:321 +#: Tcp_Wrappers.xml:255 Tcp_Wrappers.xml:289 Tcp_Wrappers.xml:796 #, no-c-format -msgid "Caution" +msgid "Important" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:322 +#: Tcp_Wrappers.xml:256 #, no-c-format msgid "" "The , , and operator allows specific exceptions to broader " @@ -886,7 +763,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:422 +#: Tcp_Wrappers.xml:346 #, no-c-format msgid "" "In the following example from a hosts.allow file, all " @@ -896,13 +773,13 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:425 +#: Tcp_Wrappers.xml:349 #, no-c-format msgid "ALL: .example.com EXCEPT cracker.example.com" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:426 +#: Tcp_Wrappers.xml:350 #, no-c-format msgid "" "In another example from a hosts.allow file, clients " @@ -911,13 +788,13 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:429 +#: Tcp_Wrappers.xml:353 #, no-c-format msgid "ALL EXCEPT vsftpd: 192.168.0." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:432 +#: Tcp_Wrappers.xml:356 #, no-c-format msgid "" "Organizationally, it is often easier to avoid using " @@ -927,19 +804,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:441 +#: Tcp_Wrappers.xml:365 #, no-c-format msgid "Option Fields" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:445 -#, no-c-format -msgid "option fields" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:447 +#: Tcp_Wrappers.xml:366 #, no-c-format msgid "" "In addition to basic rules that allow and deny access, the &PROD; " @@ -951,19 +822,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:451 +#: Tcp_Wrappers.xml:370 #, no-c-format msgid "Logging" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:455 -#, no-c-format -msgid "log option" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:457 +#: Tcp_Wrappers.xml:371 #, no-c-format msgid "" "Option fields let administrators easily change the log facility and priority " @@ -971,7 +836,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:460 +#: Tcp_Wrappers.xml:374 #, no-c-format msgid "" "In the following example, connections to the SSH daemon from any host in the " @@ -982,13 +847,13 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:463 +#: Tcp_Wrappers.xml:377 #, no-c-format msgid "sshd : .example.com : severity emerg" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:464 +#: Tcp_Wrappers.xml:378 #, no-c-format msgid "" "It is also possible to specify a facility using the option" -msgstr "" - -#. Tag: tertiary -#: Tcp_Wrappers.xml:510 -#, no-c-format -msgid "twist option" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:512 +#: Tcp_Wrappers.xml:406 #, no-c-format msgid "" "Option fields allow access rules to launch shell commands through the " @@ -1095,7 +936,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:517 +#: Tcp_Wrappers.xml:411 #, no-c-format msgid "" "spawn — Launches a shell command as a child " @@ -1105,7 +946,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:520 +#: Tcp_Wrappers.xml:414 #, no-c-format msgid "" "In the following example, clients attempting to access Telnet services from " @@ -1114,7 +955,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:523 +#: Tcp_Wrappers.xml:417 #, no-c-format msgid "" "in.telnetd : .example.com \\\n" @@ -1123,7 +964,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:526 +#: Tcp_Wrappers.xml:420 #, no-c-format msgid "" "twist — Replaces the requested service with the " @@ -1134,7 +975,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:529 +#: Tcp_Wrappers.xml:423 #, no-c-format msgid "" "In the following example, clients attempting to access FTP services from the " @@ -1143,7 +984,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:532 +#: Tcp_Wrappers.xml:426 #, no-c-format msgid "" "vsftpd : .example.com \\\n" @@ -1152,7 +993,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:535 +#: Tcp_Wrappers.xml:429 #, no-c-format msgid "" "For more information about shell command options, refer to the " @@ -1160,19 +1001,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:541 +#: Tcp_Wrappers.xml:435 #, no-c-format msgid "Expansions" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:545 -#, no-c-format -msgid "expansions" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:547 +#: Tcp_Wrappers.xml:436 #, no-c-format msgid "" "Expansions, when used in conjunction with the spawn and " @@ -1181,25 +1016,25 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:550 +#: Tcp_Wrappers.xml:439 #, no-c-format msgid "The following is a list of supported expansions:" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:555 +#: Tcp_Wrappers.xml:444 #, no-c-format msgid " — Returns the client's IP address." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:560 +#: Tcp_Wrappers.xml:449 #, no-c-format msgid " — Returns the server's IP address." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:565 +#: Tcp_Wrappers.xml:454 #, no-c-format msgid "" " — Returns a variety of client information, such as " @@ -1207,13 +1042,13 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:570 +#: Tcp_Wrappers.xml:459 #, no-c-format msgid " — Returns the daemon process name." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:575 +#: Tcp_Wrappers.xml:464 #, no-c-format msgid "" " — Returns the client's hostname (or IP " @@ -1221,7 +1056,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:580 +#: Tcp_Wrappers.xml:469 #, no-c-format msgid "" " — Returns the server's hostname (or IP " @@ -1229,7 +1064,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:585 +#: Tcp_Wrappers.xml:474 #, no-c-format msgid "" " — Returns the client's hostname. If " @@ -1239,7 +1074,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:590 +#: Tcp_Wrappers.xml:479 #, no-c-format msgid "" " — Returns the server's hostname. If " @@ -1249,13 +1084,13 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:595 +#: Tcp_Wrappers.xml:484 #, no-c-format msgid " — Returns the daemon's process ID." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:600 +#: Tcp_Wrappers.xml:489 #, no-c-format msgid "" " —Returns various types of server information, such " @@ -1263,7 +1098,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:605 +#: Tcp_Wrappers.xml:494 #, no-c-format msgid "" " — Returns the client's username. If " @@ -1271,7 +1106,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:610 +#: Tcp_Wrappers.xml:499 #, no-c-format msgid "" "The following sample rule uses an expansion in conjunction with the " @@ -1280,7 +1115,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:613 +#: Tcp_Wrappers.xml:502 #, no-c-format msgid "" "When connections to the SSH daemon (sshdxinetd" -msgstr "" - -#. Tag: seealso -#: Tcp_Wrappers.xml:641 +#: Tcp_Wrappers.xml:523 #, no-c-format -msgid "TCP Wrappers" +msgid "xinetd" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:647 +#: Tcp_Wrappers.xml:524 #, no-c-format msgid "" "The xinetd daemon is a TCP-wrapped " @@ -1360,7 +1189,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:650 +#: Tcp_Wrappers.xml:527 #, no-c-format msgid "" "When a client attempts to connect to a network service controlled by " @@ -1369,7 +1198,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:653 +#: Tcp_Wrappers.xml:530 #, no-c-format msgid "" "If access is allowed, xinetd " @@ -1379,7 +1208,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:656 +#: Tcp_Wrappers.xml:533 #, no-c-format msgid "" "If all these conditions are met (that is, access is allowed to the service; " @@ -1392,13 +1221,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:662 +#: Tcp_Wrappers.xml:539 #, no-c-format msgid "xinetd Configuration Files" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:667 +#: Tcp_Wrappers.xml:540 #, no-c-format msgid "" "The configuration files for xinetd " @@ -1406,7 +1235,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:672 +#: Tcp_Wrappers.xml:545 #, no-c-format msgid "" "/etc/xinetd.conf — The global /etc/xinetd.d/ — The directory containing all " @@ -1422,25 +1251,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:683 +#: Tcp_Wrappers.xml:556 #, no-c-format msgid "The /etc/xinetd.conf File" msgstr "" -#. Tag: filename -#: Tcp_Wrappers.xml:687 -#, no-c-format -msgid "/etc/xinetd.conf" -msgstr "" - -#. Tag: tertiary -#: Tcp_Wrappers.xml:692 Tcp_Wrappers.xml:751 Tcp_Wrappers.xml:829 -#, no-c-format -msgid "logging options" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:694 +#: Tcp_Wrappers.xml:557 #, no-c-format msgid "" "The /etc/xinetd.conf file contains general " @@ -1453,7 +1270,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:697 +#: Tcp_Wrappers.xml:560 #, no-c-format msgid "" "defaults\n" @@ -1468,7 +1285,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:698 +#: Tcp_Wrappers.xml:561 #, no-c-format msgid "" "These lines control the following aspects of instances — Specifies the maximum number of " @@ -1485,7 +1302,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:708 +#: Tcp_Wrappers.xml:571 #, no-c-format msgid "" " — Configures log_on_success — Configures log_on_failure — Configures cps — Configures xinetdincludedir /etc/xinetd.d/ — " @@ -1536,7 +1353,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:735 +#: Tcp_Wrappers.xml:598 #, no-c-format msgid "" "Often, both the and directory" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:753 +#: Tcp_Wrappers.xml:606 #, no-c-format msgid "" "The /etc/xinetd.d/ directory contains the configuration " @@ -1574,7 +1385,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:756 +#: Tcp_Wrappers.xml:609 #, no-c-format msgid "" "The format of files in the /etc/xinetd.d/ directory use " @@ -1584,7 +1395,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:759 +#: Tcp_Wrappers.xml:612 #, no-c-format msgid "" "To gain an understanding of how these files are structured, consider the " @@ -1592,7 +1403,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:762 +#: Tcp_Wrappers.xml:615 #, no-c-format msgid "" "service telnet\n" @@ -1608,14 +1419,14 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:763 +#: Tcp_Wrappers.xml:616 #, no-c-format msgid "" "These lines control various aspects of the telnet service:" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:768 +#: Tcp_Wrappers.xml:621 #, no-c-format msgid "" " — Specifies the service name, usually one of " @@ -1623,7 +1434,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:773 +#: Tcp_Wrappers.xml:626 #, no-c-format msgid "" " — Sets any of a number of attributes for the " @@ -1632,7 +1443,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:778 +#: Tcp_Wrappers.xml:631 #, no-c-format msgid "" "The flag is deprecated. All services now implicitly " @@ -1640,7 +1451,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:784 +#: Tcp_Wrappers.xml:637 #, no-c-format msgid "" " — Sets the network socket type to " @@ -1648,7 +1459,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:789 +#: Tcp_Wrappers.xml:642 #, no-c-format msgid "" " — Specifies whether the service is single-" @@ -1656,21 +1467,21 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:794 +#: Tcp_Wrappers.xml:647 #, no-c-format msgid "" " — Specifies which user ID the process runs under." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:799 +#: Tcp_Wrappers.xml:652 #, no-c-format msgid "" " — Specifies which binary executable to launch." msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:804 +#: Tcp_Wrappers.xml:657 #, no-c-format msgid "" " — Specifies logging parameters for " @@ -1679,7 +1490,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:809 +#: Tcp_Wrappers.xml:662 #, no-c-format msgid "" " — Specifies whether the service is disabled " @@ -1687,7 +1498,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:814 +#: Tcp_Wrappers.xml:667 #, no-c-format msgid "" "Refer to the xinetd.conf man page for more information " @@ -1695,13 +1506,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:820 +#: Tcp_Wrappers.xml:673 #, no-c-format msgid "Altering xinetd Configuration Files" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:821 +#: Tcp_Wrappers.xml:674 #, no-c-format msgid "" "A range of directives is available for services protected by /etc/xinetd." @@ -1725,14 +1536,14 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:834 +#: Tcp_Wrappers.xml:682 #, no-c-format msgid "" "The following is a list of some of the more commonly used logging options:" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:839 +#: Tcp_Wrappers.xml:687 #, no-c-format msgid "" " — Logs the fact that a failed attempt was " @@ -1740,7 +1551,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:844 +#: Tcp_Wrappers.xml:692 #, no-c-format msgid "" " — Logs the length of time the service is " @@ -1748,7 +1559,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:849 +#: Tcp_Wrappers.xml:697 #, no-c-format msgid "" " — Logs the exit status or termination signal of " @@ -1756,7 +1567,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:854 +#: Tcp_Wrappers.xml:702 #, no-c-format msgid "" " — Logs the remote host's IP address " @@ -1764,7 +1575,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:859 +#: Tcp_Wrappers.xml:707 #, no-c-format msgid "" " — Logs the process ID of the server receiving the " @@ -1772,7 +1583,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:864 +#: Tcp_Wrappers.xml:712 #, no-c-format msgid "" " — Logs the remote user using the method " @@ -1781,7 +1592,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:869 +#: Tcp_Wrappers.xml:717 #, no-c-format msgid "" "For a complete list of logging options, refer to the xinetd.confxinetd services can " @@ -1819,7 +1618,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:888 +#: Tcp_Wrappers.xml:727 #, no-c-format msgid "" "This section discusses using xinetdxinetd hosts access control " @@ -1858,7 +1657,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:903 +#: Tcp_Wrappers.xml:742 #, no-c-format msgid "" "The following hosts access options are supported by only_from — Allows only the specified hosts to use " @@ -1874,7 +1673,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:913 +#: Tcp_Wrappers.xml:752 #, no-c-format msgid "" " — Blocks listed hosts from using the " @@ -1882,7 +1681,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:918 +#: Tcp_Wrappers.xml:757 #, no-c-format msgid "" " — Specifies the time range when a " @@ -1891,7 +1690,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:923 +#: Tcp_Wrappers.xml:762 #, no-c-format msgid "" "The and options can " @@ -1903,7 +1702,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:926 +#: Tcp_Wrappers.xml:765 #, no-c-format msgid "" "For example, the following /etc/xinetd.d/telnet file " @@ -1912,7 +1711,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:929 +#: Tcp_Wrappers.xml:768 #, no-c-format msgid "" "service telnet\n" @@ -1931,7 +1730,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:930 +#: Tcp_Wrappers.xml:769 #, no-c-format msgid "" "In this example, when a client system from the /var/log/messagesxinetd daemon accesses the TCP " @@ -1995,7 +1794,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:951 +#: Tcp_Wrappers.xml:790 #, no-c-format msgid "" "The xinetd daemon checks its own " @@ -2007,7 +1806,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:958 +#: Tcp_Wrappers.xml:797 #, no-c-format msgid "" "Care should be taken when using TCP Wrappers access controls in conjunction " @@ -2016,25 +1815,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:965 +#: Tcp_Wrappers.xml:804 #, no-c-format msgid "Binding and Redirection Options" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:969 -#, no-c-format -msgid "binding options" -msgstr "" - -#. Tag: tertiary -#: Tcp_Wrappers.xml:974 -#, no-c-format -msgid "redirection options" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:976 +#: Tcp_Wrappers.xml:805 #, no-c-format msgid "" "The service configuration files for xinetdbind option in the service-" @@ -2055,7 +1842,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:982 +#: Tcp_Wrappers.xml:811 #, no-c-format msgid "" "This is particularly useful for systems with multiple network adapters or " @@ -2066,7 +1853,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:985 +#: Tcp_Wrappers.xml:814 #, no-c-format msgid "" "The option accepts an IP address or hostname " @@ -2080,7 +1867,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:988 +#: Tcp_Wrappers.xml:817 #, no-c-format msgid "" "The xinetd daemon is able to " @@ -2091,7 +1878,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:991 +#: Tcp_Wrappers.xml:820 #, no-c-format msgid "" "The advantages of the and " @@ -2106,7 +1893,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:994 +#: Tcp_Wrappers.xml:823 #, no-c-format msgid "" "For example, consider a system that is used as a firewall with this setting " @@ -2114,7 +1901,7 @@ msgid "" msgstr "" #. Tag: screen -#: Tcp_Wrappers.xml:997 +#: Tcp_Wrappers.xml:826 #, no-c-format msgid "" "service telnet\n" @@ -2130,7 +1917,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:998 +#: Tcp_Wrappers.xml:827 #, no-c-format msgid "" "The and options in this file " @@ -2147,7 +1934,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1001 +#: Tcp_Wrappers.xml:830 #, no-c-format msgid "" "This feature is particularly useful for users with broadband connections and " @@ -2164,49 +1951,13 @@ msgid "" msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:1007 +#: Tcp_Wrappers.xml:836 #, no-c-format msgid "Resource Management Options" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:1011 -#, no-c-format -msgid "resource management options" -msgstr "" - -#. Tag: secondary -#: Tcp_Wrappers.xml:1015 -#, no-c-format -msgid "DoS attacks and" -msgstr "" - -#. Tag: primary -#: Tcp_Wrappers.xml:1018 -#, no-c-format -msgid "DoS" -msgstr "" - -#. Tag: see -#: Tcp_Wrappers.xml:1019 -#, no-c-format -msgid "Denial of Service" -msgstr "" - -#. Tag: primary -#: Tcp_Wrappers.xml:1022 -#, no-c-format -msgid "Denial of Service" -msgstr "" - -#. Tag: secondary -#: Tcp_Wrappers.xml:1023 -#, no-c-format -msgid "prevention using xinetd" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:1026 +#: Tcp_Wrappers.xml:837 #, no-c-format msgid "" "The xinetd daemon can add a basic " @@ -2216,7 +1967,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1031 +#: Tcp_Wrappers.xml:842 #, no-c-format msgid "" " — Defines the maximum number of instances " @@ -2226,7 +1977,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1036 +#: Tcp_Wrappers.xml:847 #, no-c-format msgid "" " — Defines the maximum number of connections per " @@ -2240,7 +1991,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1041 +#: Tcp_Wrappers.xml:852 #, no-c-format msgid "" " — Defines the CPU usage or load average " @@ -2248,7 +1999,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1044 +#: Tcp_Wrappers.xml:855 #, no-c-format msgid "" "The load average is a rough measure of how many processes are active at a " @@ -2257,7 +2008,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1049 +#: Tcp_Wrappers.xml:860 #, no-c-format msgid "" "There are more resource management options available for xinetd/usr/share/doc/tcp_wrappers-<version>/usr/share/doc/xinetd-<version>/xinetd-related " @@ -2341,13 +2078,13 @@ msgid "" msgstr "" #. Tag: term -#: Tcp_Wrappers.xml:1099 +#: Tcp_Wrappers.xml:896 #, no-c-format msgid "Server Applications" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1103 +#: Tcp_Wrappers.xml:900 #, no-c-format msgid "" "man xinetd — The man page for man 5 hosts_access — The man page for the TCP " @@ -2369,7 +2106,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1120 +#: Tcp_Wrappers.xml:917 #, no-c-format msgid "" "man hosts_options — The man page for the TCP " @@ -2377,7 +2114,7 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1125 +#: Tcp_Wrappers.xml:922 #, no-c-format msgid "" "man xinetd.conf — The man page listing http://www.xinetd.org/ — " @@ -2407,30 +2138,24 @@ msgid "" msgstr "" #. Tag: para -#: Tcp_Wrappers.xml:1156 +#: Tcp_Wrappers.xml:943 #, no-c-format msgid "" -"http://www.macsecurity.org/resources/xinetd/tutorial.shtml " -"— A thorough tutorial that discusses many different ways to optimize " -"default xinetd configuration files " -"to meet specific security goals." +"http://www.docstoc.com/docs/2133633/An-Unofficial-Xinetd-" +"Tutorial — A thorough tutorial that discusses many different " +"ways to optimize default xinetd " +"configuration files to meet specific security goals." msgstr "" #. Tag: title -#: Tcp_Wrappers.xml:1164 +#: Tcp_Wrappers.xml:951 #, no-c-format msgid "Related Books" msgstr "" -#. Tag: tertiary -#: Tcp_Wrappers.xml:1168 Tcp_Wrappers.xml:1173 -#, no-c-format -msgid "related books" -msgstr "" - #. Tag: para -#: Tcp_Wrappers.xml:1177 +#: Tcp_Wrappers.xml:954 #, no-c-format msgid "" "Hacking Linux Exposed by Brian Hatch, James Lee, and " diff --git a/pot/VPN.pot b/pot/VPN.pot index 1cc4889..5951026 100644 --- a/pot/VPN.pot +++ b/pot/VPN.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,20 +20,8 @@ msgstr "" msgid "Virtual Private Networks (VPNs)" msgstr "" -#. Tag: primary -#: VPN.xml:8 VPN.xml:45 VPN.xml:82 VPN.xml:130 VPN.xml:537 -#, no-c-format -msgid "Virtual Private Networks" -msgstr "" - -#. Tag: primary -#: VPN.xml:11 -#, no-c-format -msgid "VPN" -msgstr "" - #. Tag: para -#: VPN.xml:13 +#: VPN.xml:7 #, no-c-format msgid "" "Organizations with several satellite offices often connect to each other " @@ -47,7 +35,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:16 +#: VPN.xml:10 #, no-c-format msgid "" "To address this need, Virtual Private Networks " @@ -65,7 +53,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:19 +#: VPN.xml:13 #, no-c-format msgid "" "Some organizations employ hardware VPN solutions to augment " @@ -81,13 +69,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:23 +#: VPN.xml:17 #, no-c-format msgid "How Does a VPN Work?" msgstr "" #. Tag: para -#: VPN.xml:24 +#: VPN.xml:18 #, no-c-format msgid "" "When a packet is transmitted from a client, it sends it through the " @@ -100,7 +88,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:27 +#: VPN.xml:21 #, no-c-format msgid "" "The receiving VPN router strips the header information, " @@ -113,7 +101,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:30 +#: VPN.xml:24 #, no-c-format msgid "" "With such a heightened level of security, an attacker must not only " @@ -126,13 +114,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:36 +#: VPN.xml:30 #, no-c-format msgid "VPNs and &PROD;" msgstr "" #. Tag: para -#: VPN.xml:37 +#: VPN.xml:31 #, no-c-format msgid "" "&PROD; provides various options in terms of implementing a software solution " @@ -143,26 +131,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:43 -#, no-c-format -msgid "IPsec" -msgstr "" - -#. Tag: secondary -#: VPN.xml:46 VPN.xml:83 VPN.xml:131 VPN.xml:538 -#, no-c-format -msgid "IPsec" -msgstr "" - -#. Tag: primary -#: VPN.xml:49 VPN.xml:58 VPN.xml:87 VPN.xml:135 VPN.xml:140 VPN.xml:149 -#: VPN.xml:542 VPN.xml:546 VPN.xml:606 +#: VPN.xml:37 #, no-c-format -msgid "IPsec" +msgid "IPsec" msgstr "" #. Tag: para -#: VPN.xml:51 +#: VPN.xml:38 #, no-c-format msgid "" "&PROD; supports IPsec for connecting remote hosts and " @@ -173,7 +148,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:54 +#: VPN.xml:41 #, no-c-format msgid "" "The IPsec implementation in &PROD; uses Internet " @@ -183,20 +158,14 @@ msgid "" "connecting systems." msgstr "" -#. Tag: secondary -#: VPN.xml:59 -#, no-c-format -msgid "phases" -msgstr "" - #. Tag: title -#: VPN.xml:64 +#: VPN.xml:47 #, no-c-format msgid "Creating an IPsec Connection" msgstr "" #. Tag: para -#: VPN.xml:65 +#: VPN.xml:48 #, no-c-format msgid "" "An IPsec connection is split into two logical phases. In " @@ -207,7 +176,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:68 +#: VPN.xml:51 #, no-c-format msgid "" "On &PROD; systems, an IPsec connection uses the " @@ -218,7 +187,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:71 +#: VPN.xml:54 #, no-c-format msgid "" "Phase 2 of the IPsec connection is where the " @@ -231,7 +200,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:74 +#: VPN.xml:57 #, no-c-format msgid "" "The &PROD; implementation of IPsec uses IKE for sharing " @@ -241,25 +210,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:80 +#: VPN.xml:63 #, no-c-format msgid "IPsec Installation" msgstr "" -#. Tag: tertiary -#: VPN.xml:84 -#, no-c-format -msgid "installing" -msgstr "" - -#. Tag: secondary -#: VPN.xml:88 -#, no-c-format -msgid "installing" -msgstr "" - #. Tag: para -#: VPN.xml:90 +#: VPN.xml:64 #, no-c-format msgid "" "Implementing IPsec requires that the ipsec-tools/sbin/setkey — manipulates the key management and " @@ -281,16 +238,16 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:100 +#: VPN.xml:74 #, no-c-format msgid "" -"/sbin/racoon — the IKE key management daemon, used " -"to manage and control security associations and key sharing between IPsec-" -"connected systems." +"/usr/sbin/racoon — the IKE key management daemon, " +"used to manage and control security associations and key sharing between " +"IPsec-connected systems." msgstr "" #. Tag: para -#: VPN.xml:105 +#: VPN.xml:79 #, no-c-format msgid "" "/etc/racoon/racoon.conf — the racoonIPsec on &PROD;, you can use the " @@ -310,7 +267,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:115 +#: VPN.xml:89 #, no-c-format msgid "" "To connect two network-connected hosts via IPsec, refer to LAN/WAN to another via " @@ -328,31 +285,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:128 +#: VPN.xml:102 #, no-c-format msgid "IPsec Host-to-Host Configuration" msgstr "" -#. Tag: tertiary -#: VPN.xml:132 VPN.xml:137 -#, no-c-format -msgid "host-to-host" -msgstr "" - -#. Tag: secondary -#: VPN.xml:136 VPN.xml:543 -#, no-c-format -msgid "configuration" -msgstr "" - -#. Tag: secondary -#: VPN.xml:141 VPN.xml:150 -#, no-c-format -msgid "host-to-host" -msgstr "" - #. Tag: para -#: VPN.xml:143 +#: VPN.xml:103 #, no-c-format msgid "" "IPsec can be configured to connect one desktop or workstation (host) to " @@ -365,25 +304,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:147 +#: VPN.xml:107 #, no-c-format msgid "Host-to-Host Connection" msgstr "" -#. Tag: primary -#: VPN.xml:153 VPN.xml:610 -#, no-c-format -msgid "network configuration" -msgstr "" - -#. Tag: secondary -#: VPN.xml:154 -#, no-c-format -msgid "IPsec, host-to-host" -msgstr "" - #. Tag: para -#: VPN.xml:156 +#: VPN.xml:108 #, no-c-format msgid "" "A host-to-host IPsec connection is an encrypted connection " @@ -393,7 +320,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:159 +#: VPN.xml:111 #, no-c-format msgid "" "To configure a host-to-host IPsec connection, use the " @@ -401,13 +328,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:163 VPN.xml:230 VPN.xml:364 +#: VPN.xml:115 VPN.xml:176 VPN.xml:310 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: VPN.xml:164 +#: VPN.xml:116 #, no-c-format msgid "" "You should perform the following procedures on the actual machine that you " @@ -416,7 +343,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:170 VPN.xml:643 +#: VPN.xml:122 VPN.xml:568 #, no-c-format msgid "" "In a command shell, type system-config-network to start " @@ -424,7 +351,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:175 VPN.xml:648 +#: VPN.xml:127 VPN.xml:573 #, no-c-format msgid "" "On the IPsec tab, click New to " @@ -432,7 +359,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:180 +#: VPN.xml:132 #, no-c-format msgid "" "Click Forward to start configuring a host-to-host " @@ -440,7 +367,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:185 +#: VPN.xml:137 #, no-c-format msgid "" "Enter a unique name for the connection, for example, ipsec0Host to Host encryption as the connection type, " @@ -458,25 +385,13 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:195 VPN.xml:668 +#: VPN.xml:147 VPN.xml:593 #, no-c-format msgid "Select the type of encryption to use: manual or automatic." msgstr "" -#. Tag: filename -#: VPN.xml:199 VPN.xml:672 -#, no-c-format -msgid "ipsec-tools" -msgstr "" - -#. Tag: command -#: VPN.xml:202 VPN.xml:675 -#, no-c-format -msgid "racoon" -msgstr "" - #. Tag: para -#: VPN.xml:204 VPN.xml:677 +#: VPN.xml:150 VPN.xml:596 #, no-c-format msgid "" "If you select manual encryption, an encryption key must be provided later in " @@ -486,19 +401,19 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:207 VPN.xml:238 VPN.xml:253 VPN.xml:680 VPN.xml:705 VPN.xml:756 +#: VPN.xml:153 VPN.xml:184 VPN.xml:199 VPN.xml:599 VPN.xml:624 VPN.xml:675 #, no-c-format msgid "Click Forward to continue." msgstr "" #. Tag: para -#: VPN.xml:212 +#: VPN.xml:158 #, no-c-format msgid "Enter the IP address of the remote host." msgstr "" #. Tag: para -#: VPN.xml:215 +#: VPN.xml:161 #, no-c-format msgid "" "To determine the IP address of the remote host, use the following command " @@ -506,14 +421,14 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:218 +#: VPN.xml:164 #, no-c-format msgid "" "[root@myServer ~] # /sbin/ifconfig <device>" msgstr "" #. Tag: para -#: VPN.xml:219 +#: VPN.xml:165 #, no-c-format msgid "" "where <device> is the Ethernet device that " @@ -521,7 +436,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:222 +#: VPN.xml:168 #, no-c-format msgid "" "If only one Ethernet card exists in the system, the device name is typically " @@ -530,7 +445,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:225 +#: VPN.xml:171 #, no-c-format msgid "" "eth0 Link encap:Ethernet HWaddr 00:0C:6E:E8:98:1D\n" @@ -538,7 +453,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:226 +#: VPN.xml:172 #, no-c-format msgid "" "The IP address is the number following the inet addr:Generate to " @@ -583,7 +498,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:260 VPN.xml:774 +#: VPN.xml:206 VPN.xml:693 #, no-c-format msgid "" "Verify the information on the IPsec — Summary " @@ -591,7 +506,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:265 +#: VPN.xml:211 #, no-c-format msgid "" "Click File => Save to save " @@ -599,7 +514,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:268 +#: VPN.xml:214 #, no-c-format msgid "" "You may need to restart the network for the changes to take effect. To " @@ -607,13 +522,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:271 +#: VPN.xml:217 #, no-c-format msgid "[root@myServer ~]# service network restart" msgstr "" #. Tag: para -#: VPN.xml:274 +#: VPN.xml:220 #, no-c-format msgid "" "Select the IPsec connection from the list and click the " @@ -621,7 +536,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:279 +#: VPN.xml:225 #, no-c-format msgid "" "Repeat the entire procedure for the other host. It is essential that the " @@ -631,7 +546,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:284 +#: VPN.xml:230 #, no-c-format msgid "" "After configuring the IPsec connection, it appears in the " @@ -640,19 +555,19 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:288 +#: VPN.xml:234 #, no-c-format msgid "IPsec Connection" msgstr "" #. Tag: para -#: VPN.xml:294 +#: VPN.xml:240 #, no-c-format msgid "IPsec Connection" msgstr "" #. Tag: para -#: VPN.xml:300 +#: VPN.xml:246 #, no-c-format msgid "" "The following files are created when the IPsec connection " @@ -660,7 +575,7 @@ msgid "" msgstr "" #. Tag: filename -#: VPN.xml:306 +#: VPN.xml:252 #, no-c-format msgid "" "/etc/sysconfig/network-scripts/ifcfg-<nickname><nickname><remote-ip>.conf" msgstr "" #. Tag: filename -#: VPN.xml:321 +#: VPN.xml:267 #, no-c-format msgid "/etc/racoon/psk.txt" msgstr "" #. Tag: para -#: VPN.xml:325 +#: VPN.xml:271 #, no-c-format msgid "" "If automatic encryption is selected, /etc/racoon/racoon.conf/etc/racoon/racoon.conf is " @@ -705,13 +620,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:334 +#: VPN.xml:280 #, no-c-format msgid "Manual IPsec Host-to-Host Configuration" msgstr "" #. Tag: para -#: VPN.xml:335 +#: VPN.xml:281 #, no-c-format msgid "" "The first step in creating a connection is to gather system and network " @@ -720,13 +635,13 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:340 +#: VPN.xml:286 #, no-c-format msgid "The IP address of each host" msgstr "" #. Tag: para -#: VPN.xml:345 VPN.xml:588 +#: VPN.xml:291 VPN.xml:521 #, no-c-format msgid "" "A unique name, for example, ipsec1. This is " @@ -735,7 +650,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:350 +#: VPN.xml:296 #, no-c-format msgid "" "A fixed encryption key or one automatically generated by racoonIPsec configuration file for " @@ -792,7 +707,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:375 +#: VPN.xml:321 #, no-c-format msgid "" "DST=X.X.X.XTYPE=IPSEC\n" @@ -801,7 +716,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:376 +#: VPN.xml:322 #, no-c-format msgid "" "For Workstation A, X.X.X.X is the IP address of " @@ -813,7 +728,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:379 +#: VPN.xml:325 #, no-c-format msgid "" "The following is the content of the pre-shared key file (called /" @@ -824,19 +739,19 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:382 +#: VPN.xml:328 #, no-c-format msgid "IKE_PSK=Key_Value01" msgstr "" #. Tag: title -#: VPN.xml:384 VPN.xml:898 +#: VPN.xml:330 VPN.xml:817 #, no-c-format msgid "Important" msgstr "" #. Tag: para -#: VPN.xml:385 +#: VPN.xml:331 #, no-c-format msgid "" "To change the keys-ipsec1 file so that only the root " @@ -845,14 +760,14 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:388 +#: VPN.xml:334 #, no-c-format msgid "" "[root@myServer ~] # chmod 600 /etc/sysconfig/network-scripts/keys-ipsec1" msgstr "" #. Tag: para -#: VPN.xml:390 +#: VPN.xml:336 #, no-c-format msgid "" "To change the authentication key at any time, edit the keys-" @@ -861,7 +776,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:393 +#: VPN.xml:339 #, no-c-format msgid "" "The next example shows the specific configuration for the phase 1 connection " @@ -873,7 +788,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:396 +#: VPN.xml:342 #, no-c-format msgid "" "remote X.X.X.X{\n" @@ -889,7 +804,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:397 +#: VPN.xml:343 #, no-c-format msgid "" "The default phase 1 configuration file that is created when an " @@ -898,13 +813,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:402 +#: VPN.xml:348 #, no-c-format msgid "remote X.X.X.X" msgstr "" #. Tag: para -#: VPN.xml:404 +#: VPN.xml:350 #, no-c-format msgid "" "Specifies that the subsequent stanzas of this configuration file apply only " @@ -913,13 +828,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:410 +#: VPN.xml:356 #, no-c-format msgid "exchange_mode aggressive" msgstr "" #. Tag: para -#: VPN.xml:412 +#: VPN.xml:358 #, no-c-format msgid "" "The default configuration for IPsec on &PROD; uses an " @@ -929,13 +844,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:418 +#: VPN.xml:364 #, no-c-format msgid "my_identifier address" msgstr "" #. Tag: para -#: VPN.xml:420 +#: VPN.xml:366 #, no-c-format msgid "" "Specifies the identification method to use when authenticating nodes. &PROD; " @@ -943,13 +858,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:426 +#: VPN.xml:372 #, no-c-format msgid "encryption_algorithm 3des" msgstr "" #. Tag: para -#: VPN.xml:428 +#: VPN.xml:374 #, no-c-format msgid "" "Specifies the encryption cipher used during authentication. By default, " @@ -958,13 +873,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:434 +#: VPN.xml:380 #, no-c-format msgid "hash_algorithm sha1;" msgstr "" #. Tag: para -#: VPN.xml:436 +#: VPN.xml:382 #, no-c-format msgid "" "Specifies the hash algorithm used during phase 1 negotiation between nodes. " @@ -972,13 +887,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:442 +#: VPN.xml:388 #, no-c-format msgid "authentication_method pre_shared_key" msgstr "" #. Tag: para -#: VPN.xml:444 +#: VPN.xml:390 #, no-c-format msgid "" "Specifies the authentication method used during node negotiation. By " @@ -986,13 +901,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:450 +#: VPN.xml:396 #, no-c-format msgid "dh_group 2" msgstr "" #. Tag: para -#: VPN.xml:452 +#: VPN.xml:398 #, no-c-format msgid "" "Specifies the Diffie-Hellman group number for establishing dynamically-" @@ -1000,13 +915,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:459 +#: VPN.xml:405 #, no-c-format msgid "The Racoon Configuration File" msgstr "" #. Tag: para -#: VPN.xml:460 +#: VPN.xml:406 #, no-c-format msgid "" "The /etc/racoon/racoon.conf files should be identical " @@ -1021,7 +936,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:463 +#: VPN.xml:409 #, no-c-format msgid "" "# Racoon IKE daemon configuration file.\n" @@ -1044,7 +959,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:464 +#: VPN.xml:410 #, no-c-format msgid "" "This default racoon.conf file includes defined paths " @@ -1057,13 +972,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:469 +#: VPN.xml:415 #, no-c-format msgid "sainfo anonymous" msgstr "" #. Tag: para -#: VPN.xml:471 +#: VPN.xml:417 #, no-c-format msgid "" "Denotes that SA can anonymously initialize with any peer provided that the " @@ -1071,13 +986,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:477 +#: VPN.xml:423 #, no-c-format msgid "pfs_group 2" msgstr "" #. Tag: para -#: VPN.xml:479 +#: VPN.xml:425 #, no-c-format msgid "" "Defines the Diffie-Hellman key exchange protocol, which determines the " @@ -1091,13 +1006,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:485 +#: VPN.xml:431 #, no-c-format msgid "lifetime time 1 hour" msgstr "" #. Tag: para -#: VPN.xml:487 +#: VPN.xml:433 #, no-c-format msgid "" "This parameter specifies the lifetime of an SA and can be quantified either " @@ -1106,13 +1021,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:493 +#: VPN.xml:439 #, no-c-format msgid "encryption_algorithm 3des, blowfish 448, rijndael" msgstr "" #. Tag: para -#: VPN.xml:495 +#: VPN.xml:441 #, no-c-format msgid "" "Specifies the supported encryption ciphers for phase 2. &PROD; supports " @@ -1122,13 +1037,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:501 +#: VPN.xml:447 #, no-c-format msgid "authentication_algorithm hmac_sha1, hmac_md5" msgstr "" #. Tag: para -#: VPN.xml:503 +#: VPN.xml:449 #, no-c-format msgid "" "Lists the supported hash algorithms for authentication. Supported modes are " @@ -1136,13 +1051,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:509 +#: VPN.xml:455 #, no-c-format msgid "compression_algorithm deflate" msgstr "" #. Tag: para -#: VPN.xml:511 +#: VPN.xml:457 #, no-c-format msgid "" "Defines the Deflate compression algorithm for IP Payload Compression " @@ -1151,19 +1066,19 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:517 +#: VPN.xml:463 #, no-c-format msgid "To start the connection, use the following command on each host:" msgstr "" #. Tag: screen -#: VPN.xml:520 +#: VPN.xml:466 #, no-c-format msgid "[root@myServer ~]# /sbin/ifup <nickname>" msgstr "" #. Tag: para -#: VPN.xml:521 +#: VPN.xml:467 #, no-c-format msgid "" "where <nickname> is the name you specified for the IPsecIPsec connection, run the tcpdumpconfiguration" -msgstr "" - -#. Tag: secondary -#: VPN.xml:547 VPN.xml:607 -#, no-c-format -msgid "network-to-network" -msgstr "" - #. Tag: para -#: VPN.xml:549 +#: VPN.xml:482 #, no-c-format msgid "" "IPsec can also be configured to connect an entire network (such as a " @@ -1225,7 +1128,7 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:553 +#: VPN.xml:486 #, no-c-format msgid "" "A network-to-network <abbrev>IPsec</abbrev> tunneled connection</" @@ -1233,14 +1136,14 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:559 +#: VPN.xml:492 #, no-c-format msgid "" "<para>A network-to-network <abbrev>IPsec</abbrev> tunneled connection</para>" msgstr "" #. Tag: para -#: VPN.xml:565 +#: VPN.xml:498 #, no-c-format msgid "" "This diagram shows two separate <acronym>LAN</acronym>s separated by the " @@ -1256,13 +1159,13 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:568 +#: VPN.xml:501 #, no-c-format msgid "The information needed for a network-to-network connection include:" msgstr "" #. Tag: para -#: VPN.xml:573 +#: VPN.xml:506 #, no-c-format msgid "" "The externally-accessible IP addresses of the dedicated <abbrev>IPsec</" @@ -1270,7 +1173,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:578 +#: VPN.xml:511 #, no-c-format msgid "" "The network address ranges of the <acronym>LAN</acronym>/<acronym>WAN</" @@ -1279,7 +1182,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:583 +#: VPN.xml:516 #, no-c-format msgid "" "The IP addresses of the gateway devices that route the data from the network " @@ -1287,7 +1190,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:593 +#: VPN.xml:526 #, no-c-format msgid "" "A fixed encryption key or one automatically generated by <command>racoon</" @@ -1295,19 +1198,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:604 +#: VPN.xml:537 #, no-c-format msgid "Network-to-Network (<abbrev>VPN</abbrev>) Connection" msgstr "" -#. Tag: secondary -#: VPN.xml:611 -#, no-c-format -msgid "IPsec, network-to-network" -msgstr "" - #. Tag: para -#: VPN.xml:613 +#: VPN.xml:538 #, no-c-format msgid "" "A network-to-network <abbrev>IPsec</abbrev> connection uses two " @@ -1316,7 +1213,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:616 +#: VPN.xml:541 #, no-c-format msgid "" "For example, as shown in <xref linkend=\"figu-Security_Guide-" @@ -1327,7 +1224,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:619 +#: VPN.xml:544 #, no-c-format msgid "" "<abbrev>IPsec</abbrev> routers require publicly addressable IP addresses and " @@ -1338,19 +1235,19 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:623 +#: VPN.xml:548 #, no-c-format msgid "<title>Network-to-Network IPsec" msgstr "" #. Tag: para -#: VPN.xml:629 +#: VPN.xml:554 #, no-c-format msgid "Network-to-Network IPsec" msgstr "" #. Tag: para -#: VPN.xml:635 +#: VPN.xml:560 #, no-c-format msgid "" "Alternate network configuration options include a firewall between each IP " @@ -1365,7 +1262,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:638 +#: VPN.xml:563 #, no-c-format msgid "" "Use the following procedure to configure a network-to-network IPsecForward to start configuring a network-to-" @@ -1381,7 +1278,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:658 +#: VPN.xml:583 #, no-c-format msgid "" "Enter a unique nickname for the connection, for example, ipsec0Network to Network encryption (VPN) as the " @@ -1399,7 +1296,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:685 +#: VPN.xml:604 #, no-c-format msgid "" "On the Local Network page, enter the following " @@ -1407,7 +1304,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:690 +#: VPN.xml:609 #, no-c-format msgid "" "Local Network Address — The IP address of the " @@ -1415,7 +1312,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:695 +#: VPN.xml:614 #, no-c-format msgid "" "Local Subnet Mask — The subnet mask of the local " @@ -1423,7 +1320,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:700 +#: VPN.xml:619 #, no-c-format msgid "" "Local Network Gateway — The gateway for the " @@ -1431,19 +1328,19 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:709 +#: VPN.xml:628 #, no-c-format msgid "Local Network Information" msgstr "" #. Tag: para -#: VPN.xml:715 +#: VPN.xml:634 #, no-c-format msgid "Local Network Information" msgstr "" #. Tag: para -#: VPN.xml:723 +#: VPN.xml:642 #, no-c-format msgid "" "On the Remote Network page, enter the following " @@ -1451,7 +1348,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:728 +#: VPN.xml:647 #, no-c-format msgid "" "Remote IP Address — The publicly addressable IP " @@ -1461,7 +1358,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:733 +#: VPN.xml:652 #, no-c-format msgid "" "Remote Network Address — The network address of " @@ -1472,7 +1369,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:738 +#: VPN.xml:657 #, no-c-format msgid "" "Remote Subnet Mask — The subnet mask of the " @@ -1480,7 +1377,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:743 +#: VPN.xml:662 #, no-c-format msgid "" "Remote Network Gateway — The IP address of the " @@ -1488,7 +1385,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:748 +#: VPN.xml:667 #, no-c-format msgid "" "If manual encryption was selected in step Generate to " @@ -1506,19 +1403,19 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:760 +#: VPN.xml:679 #, no-c-format msgid "Remote Network Information" msgstr "" #. Tag: para -#: VPN.xml:766 +#: VPN.xml:685 #, no-c-format msgid "Remote Network Information" msgstr "" #. Tag: para -#: VPN.xml:779 +#: VPN.xml:698 #, no-c-format msgid "" "Select File => Save to save " @@ -1526,7 +1423,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:784 +#: VPN.xml:703 #, no-c-format msgid "" "Select the IPsec connection from the list, and then click " @@ -1534,13 +1431,13 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:789 +#: VPN.xml:708 #, no-c-format msgid "Enable IP forwarding:" msgstr "" #. Tag: para -#: VPN.xml:794 VPN.xml:920 +#: VPN.xml:713 VPN.xml:839 #, no-c-format msgid "" "Edit /etc/sysctl.conf and set net.ipv4." @@ -1548,19 +1445,19 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:799 VPN.xml:925 +#: VPN.xml:718 VPN.xml:844 #, no-c-format msgid "Use the following command to enable the change:" msgstr "" #. Tag: screen -#: VPN.xml:802 +#: VPN.xml:721 #, no-c-format msgid "[root@myServer ~]# /sbin/sysctl -p /etc/sysctl.conf" msgstr "" #. Tag: para -#: VPN.xml:807 +#: VPN.xml:726 #, no-c-format msgid "" "The network script to activate the IPsec connection " @@ -1569,13 +1466,13 @@ msgid "" msgstr "" #. Tag: title -#: VPN.xml:813 +#: VPN.xml:732 #, no-c-format msgid "Manual IPsec Network-to-Network Configuration" msgstr "" #. Tag: para -#: VPN.xml:814 +#: VPN.xml:733 #, no-c-format msgid "" "Suppose LAN A (lana.example.com) and LANIPsec connection between each network uses a pre-shared " @@ -1607,7 +1504,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:820 +#: VPN.xml:739 #, no-c-format msgid "" "The following example shows the contents of the ifcfg " @@ -1618,7 +1515,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:823 +#: VPN.xml:742 #, no-c-format msgid "" "TYPE=IPSEC\n" @@ -1632,43 +1529,43 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:824 +#: VPN.xml:743 #, no-c-format msgid "The following list describes the contents of this file:" msgstr "" #. Tag: term -#: VPN.xml:829 +#: VPN.xml:748 #, no-c-format msgid "TYPE=IPSEC" msgstr "" #. Tag: para -#: VPN.xml:831 +#: VPN.xml:750 #, no-c-format msgid "Specifies the type of connection." msgstr "" #. Tag: term -#: VPN.xml:837 +#: VPN.xml:756 #, no-c-format msgid "ONBOOT=yes" msgstr "" #. Tag: para -#: VPN.xml:839 +#: VPN.xml:758 #, no-c-format msgid "Specifies that the connection should initiate on boot-up." msgstr "" #. Tag: term -#: VPN.xml:845 +#: VPN.xml:764 #, no-c-format msgid "IKE_METHOD=PSK" msgstr "" #. Tag: para -#: VPN.xml:847 +#: VPN.xml:766 #, no-c-format msgid "" "Specifies that the connection uses the pre-shared key method of " @@ -1676,13 +1573,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:853 +#: VPN.xml:772 #, no-c-format msgid "SRCGW=192.168.1.254" msgstr "" #. Tag: para -#: VPN.xml:855 +#: VPN.xml:774 #, no-c-format msgid "" "The IP address of the source gateway. For LAN A, this is the LAN A gateway, " @@ -1690,13 +1587,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:861 +#: VPN.xml:780 #, no-c-format msgid "DSTGW=192.168.2.254" msgstr "" #. Tag: para -#: VPN.xml:863 +#: VPN.xml:782 #, no-c-format msgid "" "The IP address of the destination gateway. For LAN A, this is the LAN B " @@ -1704,13 +1601,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:869 +#: VPN.xml:788 #, no-c-format msgid "SRCNET=192.168.1.0/24" msgstr "" #. Tag: para -#: VPN.xml:871 +#: VPN.xml:790 #, no-c-format msgid "" "Specifies the source network for the IPsec connection, " @@ -1718,13 +1615,13 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:877 +#: VPN.xml:796 #, no-c-format msgid "DSTNET=192.168.2.0/24" msgstr "" #. Tag: para -#: VPN.xml:879 +#: VPN.xml:798 #, no-c-format msgid "" "Specifies the destination network for the IPsec connection, " @@ -1732,19 +1629,19 @@ msgid "" msgstr "" #. Tag: term -#: VPN.xml:885 +#: VPN.xml:804 #, no-c-format msgid "DST=X.X.X.X" msgstr "" #. Tag: para -#: VPN.xml:887 +#: VPN.xml:806 #, no-c-format msgid "The externally-accessible IP address of LAN B." msgstr "" #. Tag: para -#: VPN.xml:893 +#: VPN.xml:812 #, no-c-format msgid "" "The following example is the content of the pre-shared key file called " @@ -1756,13 +1653,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:896 +#: VPN.xml:815 #, no-c-format msgid "IKE_PSK=r3dh4tl1nux" msgstr "" #. Tag: para -#: VPN.xml:899 +#: VPN.xml:818 #, no-c-format msgid "" "To change the keys-ipsecX " @@ -1771,13 +1668,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:902 +#: VPN.xml:821 #, no-c-format msgid "chmod 600 /etc/sysconfig/network-scripts/keys-ipsec1" msgstr "" #. Tag: para -#: VPN.xml:904 +#: VPN.xml:823 #, no-c-format msgid "" "To change the authentication key at any time, edit the keys-" @@ -1787,7 +1684,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:907 +#: VPN.xml:826 #, no-c-format msgid "" "The following example is the contents of the /etc/racoon/racoon." @@ -1798,7 +1695,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:910 +#: VPN.xml:829 #, no-c-format msgid "" "# Racoon IKE daemon configuration file.\n" @@ -1820,7 +1717,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:911 +#: VPN.xml:830 #, no-c-format msgid "" "The following is the specific configuration for the connection to the remote " @@ -1832,7 +1729,7 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:914 +#: VPN.xml:833 #, no-c-format msgid "" "remote X.X.X.X{\n" @@ -1848,7 +1745,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:915 +#: VPN.xml:834 #, no-c-format msgid "" "Prior to starting the IPsec connection, IP forwarding " @@ -1856,13 +1753,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:928 +#: VPN.xml:847 #, no-c-format msgid "[root@myServer ~] # sysctl -p /etc/sysctl.conf" msgstr "" #. Tag: para -#: VPN.xml:931 +#: VPN.xml:850 #, no-c-format msgid "" "To start the IPsec connection, use the following command on " @@ -1870,13 +1767,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:934 +#: VPN.xml:853 #, no-c-format msgid "[root@myServer ~] # /sbin/ifup ipsec0" msgstr "" #. Tag: para -#: VPN.xml:935 +#: VPN.xml:854 #, no-c-format msgid "" "The connections are activated, and both LAN A and " @@ -1887,13 +1784,13 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:938 +#: VPN.xml:857 #, no-c-format msgid "[root@myServer ~] # /sbin/ip route list" msgstr "" #. Tag: para -#: VPN.xml:939 +#: VPN.xml:858 #, no-c-format msgid "" "To test the IPsec connection, run the tcpdumplana.example.comIPsec Connection" msgstr "" #. Tag: para -#: VPN.xml:953 +#: VPN.xml:872 #, no-c-format msgid "" "If the IPsec connection was not configured to activate on " @@ -1947,7 +1844,7 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:956 +#: VPN.xml:875 #, no-c-format msgid "" "To start the connection, use the following command on each host for host-to-" @@ -1956,14 +1853,14 @@ msgid "" msgstr "" #. Tag: screen -#: VPN.xml:959 +#: VPN.xml:878 #, no-c-format msgid "" "[root@myServer ~] # /sbin/ifup <nickname>" msgstr "" #. Tag: para -#: VPN.xml:960 +#: VPN.xml:879 #, no-c-format msgid "" "where <nickname> is the nickname configured " @@ -1971,13 +1868,13 @@ msgid "" msgstr "" #. Tag: para -#: VPN.xml:963 +#: VPN.xml:882 #, no-c-format msgid "To stop the connection, use the following command:" msgstr "" #. Tag: screen -#: VPN.xml:966 +#: VPN.xml:885 #, no-c-format msgid "" "[root@myServer ~] # /sbin/ifdown <nickname>" diff --git a/pot/Vulnerability_Assessment.pot b/pot/Vulnerability_Assessment.pot index 5258bba..c364b85 100644 --- a/pot/Vulnerability_Assessment.pot +++ b/pot/Vulnerability_Assessment.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,38 +20,22 @@ msgstr "" msgid "Vulnerability Assessment" msgstr "" -#. Tag: primary -#: Vulnerability_Assessment.xml:8 Vulnerability_Assessment.xml:56 -#: Vulnerability_Assessment.xml:61 Vulnerability_Assessment.xml:128 -#: Vulnerability_Assessment.xml:174 Vulnerability_Assessment.xml:216 -#: Vulnerability_Assessment.xml:242 Vulnerability_Assessment.xml:268 -#, no-c-format -msgid "vulnerabilities" -msgstr "" - -#. Tag: secondary -#: Vulnerability_Assessment.xml:9 Vulnerability_Assessment.xml:57 -#: Vulnerability_Assessment.xml:62 Vulnerability_Assessment.xml:129 -#, no-c-format -msgid "assessment" -msgstr "" - #. Tag: para -#: Vulnerability_Assessment.xml:11 +#: Vulnerability_Assessment.xml:7 #, no-c-format msgid "" "Given time, resources, and motivation, a cracker can break into nearly any " "system. At the end of the day, all of the security procedures and " -"technologies currently available cannot guarantee that any systems are safe " -"from intrusion. Routers help secure gateways to the Internet. Firewalls help " -"secure the edge of the network. Virtual Private Networks safely pass data in " -"an encrypted stream. Intrusion detection systems warn you of malicious " -"activity. However, the success of each of these technologies is dependent " -"upon a number of variables, including:" +"technologies currently available cannot guarantee that any systems are " +"completely safe from intrusion. Routers help secure gateways to the " +"Internet. Firewalls help secure the edge of the network. Virtual Private " +"Networks safely pass data in an encrypted stream. Intrusion detection " +"systems warn you of malicious activity. However, the success of each of " +"these technologies is dependent upon a number of variables, including:" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:16 +#: Vulnerability_Assessment.xml:12 #, no-c-format msgid "" "The expertise of the staff responsible for configuring, monitoring, and " @@ -59,21 +43,21 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:21 +#: Vulnerability_Assessment.xml:17 #, no-c-format msgid "" "The ability to patch and update services and kernels quickly and efficiently." msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:26 +#: Vulnerability_Assessment.xml:22 #, no-c-format msgid "" "The ability of those responsible to keep constant vigilance over the network." msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:31 +#: Vulnerability_Assessment.xml:27 #, no-c-format msgid "" "Given the dynamic state of data systems and technologies, securing corporate " @@ -87,13 +71,13 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:35 +#: Vulnerability_Assessment.xml:31 #, no-c-format msgid "Thinking Like the Enemy" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:36 +#: Vulnerability_Assessment.xml:32 #, no-c-format msgid "" "Suppose that you administer an enterprise network. Such networks are " @@ -106,7 +90,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:39 +#: Vulnerability_Assessment.xml:35 #, no-c-format msgid "" "Combine the expertise requirements with the task of keeping current, and it " @@ -115,7 +99,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:42 +#: Vulnerability_Assessment.xml:38 #, no-c-format msgid "" "To augment security technologies and aid in protecting systems, networks, " @@ -126,7 +110,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:45 +#: Vulnerability_Assessment.xml:41 #, no-c-format msgid "" "A vulnerability assessment is an internal audit of your network and system " @@ -144,7 +128,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:48 +#: Vulnerability_Assessment.xml:44 #, no-c-format msgid "" "If you were to perform a vulnerability assessment of your home, you would " @@ -157,25 +141,13 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:54 +#: Vulnerability_Assessment.xml:50 #, no-c-format msgid "Defining Assessment and Testing" msgstr "" -#. Tag: tertiary -#: Vulnerability_Assessment.xml:58 -#, no-c-format -msgid "defining" -msgstr "" - -#. Tag: tertiary -#: Vulnerability_Assessment.xml:63 -#, no-c-format -msgid "testing" -msgstr "" - #. Tag: para -#: Vulnerability_Assessment.xml:65 +#: Vulnerability_Assessment.xml:51 #, no-c-format msgid "" "Vulnerability assessments may be broken down into one of two types: " @@ -184,7 +156,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:68 +#: Vulnerability_Assessment.xml:54 #, no-c-format msgid "" "When performing an outside looking in vulnerability assessment, you are " @@ -201,7 +173,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:71 +#: Vulnerability_Assessment.xml:57 #, no-c-format msgid "" "When you perform an inside looking around vulnerability assessment, you are " @@ -212,7 +184,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:74 +#: Vulnerability_Assessment.xml:60 #, no-c-format msgid "" "There are striking distinctions between these two types of vulnerability " @@ -229,19 +201,19 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:77 +#: Vulnerability_Assessment.xml:63 #, no-c-format msgid "" "Consider the difference between vulnerability assessments and " "penetration tests. Think of a vulnerability " "assessment as the first step to a penetration test. The information gleaned " -"from the assessment is used for testing. Whereas, the assessment is checking " -"for holes and potential vulnerabilities, the penetration testing actually " -"attempts to exploit the findings." +"from the assessment is used for testing. Whereas the assessment is " +"undertaken to check for holes and potential vulnerabilities, the penetration " +"testing actually attempts to exploit the findings." msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:80 +#: Vulnerability_Assessment.xml:66 #, no-c-format msgid "" "Assessing network infrastructure is a dynamic process. Security, both " @@ -250,7 +222,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:83 +#: Vulnerability_Assessment.xml:69 #, no-c-format msgid "" "Security administrators are only as good as the tools they use and the " @@ -263,7 +235,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:86 +#: Vulnerability_Assessment.xml:72 #, no-c-format msgid "" "Now that the difference between a vulnerability assessment and a penetration " @@ -273,13 +245,13 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:90 +#: Vulnerability_Assessment.xml:76 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:91 +#: Vulnerability_Assessment.xml:77 #, no-c-format msgid "" "Attempting to exploit vulnerabilities on production resources can have " @@ -288,7 +260,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:95 +#: Vulnerability_Assessment.xml:81 #, no-c-format msgid "" "The following list examines some of the benefits to performing vulnerability " @@ -296,49 +268,43 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:100 +#: Vulnerability_Assessment.xml:86 #, no-c-format msgid "Creates proactive focus on information security" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:105 +#: Vulnerability_Assessment.xml:91 #, no-c-format msgid "Finds potential exploits before crackers find them" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:110 +#: Vulnerability_Assessment.xml:96 #, no-c-format msgid "Results in systems being kept up to date and patched" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:115 +#: Vulnerability_Assessment.xml:101 #, no-c-format msgid "Promotes growth and aids in developing staff expertise" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:120 +#: Vulnerability_Assessment.xml:106 #, no-c-format -msgid "Abates Financial loss and negative publicity" +msgid "Abates financial loss and negative publicity" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:126 +#: Vulnerability_Assessment.xml:112 #, no-c-format msgid "Establishing a Methodology" msgstr "" -#. Tag: tertiary -#: Vulnerability_Assessment.xml:130 -#, no-c-format -msgid "establishing a methodology" -msgstr "" - #. Tag: para -#: Vulnerability_Assessment.xml:132 +#: Vulnerability_Assessment.xml:113 #, no-c-format msgid "" "To aid in the selection of tools for a vulnerability assessment, it is " @@ -348,7 +314,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:135 +#: Vulnerability_Assessment.xml:116 #, no-c-format msgid "" "What is the target? Are we looking at one server, or are we " @@ -359,7 +325,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:138 +#: Vulnerability_Assessment.xml:119 #, no-c-format msgid "" "To learn more about establishing methodologies, refer to the following " @@ -367,16 +333,16 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:143 +#: Vulnerability_Assessment.xml:124 #, no-c-format msgid "" -"http://www.isecom." -"org/projects/osstmm.htm The Open Source Security Testing " -"Methodology Manual (OSSTMM)" +"http://www.isecom.org/osstmm/ The Open Source Security Testing Methodology Manual (OSSTMM)" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:148 +#: Vulnerability_Assessment.xml:129 #, no-c-format msgid "" "http://www.owasp.org/ " @@ -384,13 +350,13 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:158 +#: Vulnerability_Assessment.xml:139 #, no-c-format msgid "Evaluating the Tools" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:159 +#: Vulnerability_Assessment.xml:140 #, no-c-format msgid "" "An assessment can start by using some form of an information gathering tool. " @@ -401,7 +367,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:162 +#: Vulnerability_Assessment.xml:143 #, no-c-format msgid "" "Just as in any aspect of everyday life, there are many different tools that " @@ -414,7 +380,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:165 +#: Vulnerability_Assessment.xml:146 #, no-c-format msgid "" "Finding the right tools may be a daunting task and in the end, experience " @@ -426,32 +392,20 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:168 +#: Vulnerability_Assessment.xml:149 #, no-c-format msgid "" "The tools discussed below are just a small sampling of the available tools." msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:172 +#: Vulnerability_Assessment.xml:153 #, no-c-format msgid "Scanning Hosts with Nmap" msgstr "" -#. Tag: secondary -#: Vulnerability_Assessment.xml:175 -#, no-c-format -msgid "assessing with Nmap" -msgstr "" - -#. Tag: primary -#: Vulnerability_Assessment.xml:178 Vulnerability_Assessment.xml:189 -#, no-c-format -msgid "Nmap" -msgstr "" - #. Tag: para -#: Vulnerability_Assessment.xml:180 +#: Vulnerability_Assessment.xml:154 #, no-c-format msgid "" "Nmap is a popular tool included in Fedora that can be used to determine the " @@ -463,7 +417,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:183 +#: Vulnerability_Assessment.xml:157 #, no-c-format msgid "" "Nmap is a competent first step in vulnerability assessment. You can map out " @@ -474,19 +428,13 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:187 +#: Vulnerability_Assessment.xml:161 #, no-c-format msgid "Using Nmap" msgstr "" -#. Tag: secondary -#: Vulnerability_Assessment.xml:190 -#, no-c-format -msgid "command line version" -msgstr "" - #. Tag: para -#: Vulnerability_Assessment.xml:192 +#: Vulnerability_Assessment.xml:162 #, no-c-format msgid "" "Nmap can be run from a shell prompt by typing the nmap " @@ -494,13 +442,13 @@ msgid "" msgstr "" #. Tag: screen -#: Vulnerability_Assessment.xml:195 +#: Vulnerability_Assessment.xml:165 #, no-c-format msgid "nmap foo.example.com" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:196 +#: Vulnerability_Assessment.xml:166 #, no-c-format msgid "" "The results of the scan (which could take up to a few minutes, depending on " @@ -508,19 +456,22 @@ msgid "" msgstr "" #. Tag: screen -#: Vulnerability_Assessment.xml:199 +#: Vulnerability_Assessment.xml:169 #, no-c-format msgid "" -"Starting nmap V. 3.50 ( www.insecure.org/nmap/ ) Interesting " -"ports on localhost.localdomain (127.0.0.1): (The 1591 ports scanned but not " -"shown below are in state: closed) Port State Service 22/tcp open ssh 25/tcp " -"open smtp 111/tcp open sunrpc 443/tcp open https 515/tcp open printer 950/" -"tcp open oftep-rpc 6000/tcp open X11 Nmap run completed -- 1 IP address (1 " -"host up) scanned in 71.825 seconds" +"Starting Nmap 4.68 ( http://nmap.org )\n" +"Interesting ports on foo.example.com:\n" +"Not shown: 1710 filtered ports\n" +"PORT STATE SERVICE\n" +"22/tcp open ssh\n" +"53/tcp open domain\n" +"70/tcp closed gopher\n" +"80/tcp open http\n" +"113/tcp closed auth" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:200 +#: Vulnerability_Assessment.xml:170 #, no-c-format msgid "" "Nmap tests the most common network communication ports for listening or " @@ -529,7 +480,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:203 +#: Vulnerability_Assessment.xml:173 #, no-c-format msgid "" "For more information about using Nmap, refer to the official homepage at the " @@ -537,31 +488,19 @@ msgid "" msgstr "" #. Tag: ulink -#: Vulnerability_Assessment.xml:207 +#: Vulnerability_Assessment.xml:177 #, no-c-format msgid "http://www.insecure.org/" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:214 +#: Vulnerability_Assessment.xml:184 #, no-c-format -msgid "Nessus" -msgstr "" - -#. Tag: secondary -#: Vulnerability_Assessment.xml:217 -#, no-c-format -msgid "assessing with Nessus" -msgstr "" - -#. Tag: primary -#: Vulnerability_Assessment.xml:220 -#, no-c-format -msgid "Nessus" +msgid "Nessus" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:222 +#: Vulnerability_Assessment.xml:185 #, no-c-format msgid "" "Nessus is a full-service security scanner. The plug-in architecture of " @@ -574,14 +513,14 @@ msgid "" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:226 Vulnerability_Assessment.xml:252 -#: Vulnerability_Assessment.xml:278 +#: Vulnerability_Assessment.xml:189 Vulnerability_Assessment.xml:208 +#: Vulnerability_Assessment.xml:227 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:227 +#: Vulnerability_Assessment.xml:190 #, no-c-format msgid "" "Nessus is not included with Fedora and is not supported. It has been " @@ -590,7 +529,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:231 +#: Vulnerability_Assessment.xml:194 #, no-c-format msgid "" "For more information about Nessus, refer to the official website at the " @@ -598,31 +537,19 @@ msgid "" msgstr "" #. Tag: ulink -#: Vulnerability_Assessment.xml:235 +#: Vulnerability_Assessment.xml:198 #, no-c-format msgid "http://www.nessus.org/" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:240 -#, no-c-format -msgid "Nikto" -msgstr "" - -#. Tag: secondary -#: Vulnerability_Assessment.xml:243 -#, no-c-format -msgid "assessing with Nikto" -msgstr "" - -#. Tag: primary -#: Vulnerability_Assessment.xml:246 +#: Vulnerability_Assessment.xml:203 #, no-c-format -msgid "Nikto" +msgid "Nikto" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:248 +#: Vulnerability_Assessment.xml:204 #, no-c-format msgid "" "Nikto is an excellent common gateway interface (CGI) script scanner. Nikto " @@ -634,7 +561,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:253 +#: Vulnerability_Assessment.xml:209 #, no-c-format msgid "" "Nikto is not included with Fedora and is not supported. It has been included " @@ -643,37 +570,25 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:257 +#: Vulnerability_Assessment.xml:213 #, no-c-format msgid "More information about Nikto can be found at the following URL:" msgstr "" #. Tag: ulink -#: Vulnerability_Assessment.xml:261 +#: Vulnerability_Assessment.xml:217 #, no-c-format msgid "http://www.cirt.net/code/nikto.shtml" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:266 -#, no-c-format -msgid "VLAD the Scanner" -msgstr "" - -#. Tag: secondary -#: Vulnerability_Assessment.xml:269 -#, no-c-format -msgid "assessing with VLAD the Scanner" -msgstr "" - -#. Tag: primary -#: Vulnerability_Assessment.xml:272 +#: Vulnerability_Assessment.xml:222 #, no-c-format -msgid "VLAD the Scanner" +msgid "VLAD the Scanner" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:274 +#: Vulnerability_Assessment.xml:223 #, no-c-format msgid "" "VLAD is a vulnerabilities scanner developed by the RAZOR " @@ -683,7 +598,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:279 +#: Vulnerability_Assessment.xml:228 #, no-c-format msgid "" "VLAD is not included with Fedora and is not supported. It has been included " @@ -692,7 +607,7 @@ msgid "" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:283 +#: Vulnerability_Assessment.xml:232 #, no-c-format msgid "" "More information about VLAD can be found on the RAZOR team website at the " @@ -700,29 +615,29 @@ msgid "" msgstr "" #. Tag: ulink -#: Vulnerability_Assessment.xml:287 +#: Vulnerability_Assessment.xml:236 #, no-c-format msgid "http://www.bindview.com/Support/Razor/Utilities/" msgstr "" #. Tag: title -#: Vulnerability_Assessment.xml:292 +#: Vulnerability_Assessment.xml:241 #, no-c-format msgid "Anticipating Your Future Needs" msgstr "" #. Tag: para -#: Vulnerability_Assessment.xml:293 +#: Vulnerability_Assessment.xml:242 #, no-c-format msgid "" "Depending upon your target and resources, there are many tools available. " "There are tools for wireless networks, Novell networks, Windows systems, " "Linux systems, and more. Another essential part of performing assessments " "may include reviewing physical security, personnel screening, or voice/PBX " -"network assessment. New concepts, such as war walking " -"scanning the perimeter of your enterprise's physical structures for " -"wireless network vulnerabilities are some emerging concepts that you can " -"investigate and, if needed, incorporate into your assessments. Imagination " -"and exposure are the only limits of planning and conducting vulnerability " -"assessments." +"network assessment. New concepts, such as war walking, which involves scanning the perimeter of your enterprise's " +"physical structures for wireless network vulnerabilities, are some emerging " +"concepts that you can investigate and, if needed, incorporate into your " +"assessments. Imagination and exposure are the only limits of planning and " +"conducting vulnerability assessments." msgstr "" diff --git a/pot/Wstation.pot b/pot/Wstation.pot index 54abb38..bf82760 100644 --- a/pot/Wstation.pot +++ b/pot/Wstation.pot @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: http://bugs.kde.org\n" -"POT-Creation-Date: 2008-12-16 00:02+0000\n" +"POT-Creation-Date: 2009-06-04 22:35+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -20,16 +20,8 @@ msgstr "" msgid "Workstation Security" msgstr "" -#. Tag: primary -#: Wstation.xml:8 Wstation.xml:16 Wstation.xml:21 Wstation.xml:26 -#: Wstation.xml:31 Wstation.xml:36 Wstation.xml:41 Wstation.xml:85 -#: Wstation.xml:166 -#, no-c-format -msgid "workstation security" -msgstr "" - #. Tag: para -#: Wstation.xml:10 +#: Wstation.xml:7 #, no-c-format msgid "" "Securing a Linux environment begins with the workstation. Whether locking " @@ -39,64 +31,20 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:14 +#: Wstation.xml:11 #, no-c-format msgid "Evaluating Workstation Security" msgstr "" -#. Tag: secondary -#: Wstation.xml:17 Wstation.xml:22 Wstation.xml:27 Wstation.xml:32 -#: Wstation.xml:37 Wstation.xml:42 -#, no-c-format -msgid "evaluating" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:18 -#, no-c-format -msgid "BIOS" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:23 -#, no-c-format -msgid "boot loaders" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:28 Wstation.xml:110 Wstation.xml:142 Wstation.xml:147 -#: Wstation.xml:168 -#, no-c-format -msgid "passwords" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:33 -#, no-c-format -msgid "administrative control" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:38 -#, no-c-format -msgid "communications" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:43 -#, no-c-format -msgid "personal firewalls" -msgstr "" - #. Tag: para -#: Wstation.xml:45 +#: Wstation.xml:12 #, no-c-format msgid "" "When evaluating the security of a Fedora workstation, consider the following:" msgstr "" #. Tag: para -#: Wstation.xml:50 +#: Wstation.xml:17 #, no-c-format msgid "" "BIOS and Boot Loader Security — Can an " @@ -105,7 +53,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:55 +#: Wstation.xml:22 #, no-c-format msgid "" "Password Security — How secure are the user " @@ -113,7 +61,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:60 +#: Wstation.xml:27 #, no-c-format msgid "" "Administrative Controls — Who has an account on " @@ -121,7 +69,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:65 +#: Wstation.xml:32 #, no-c-format msgid "" "Available Network Services — What services are " @@ -129,7 +77,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:70 +#: Wstation.xml:37 #, no-c-format msgid "" "Personal Firewalls — What type of firewall, if " @@ -137,7 +85,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:75 +#: Wstation.xml:42 #, no-c-format msgid "" "Security Enhanced Communication Tools — Which " @@ -146,43 +94,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:83 +#: Wstation.xml:50 #, no-c-format msgid "BIOS and Boot Loader Security" msgstr "" -#. Tag: secondary -#: Wstation.xml:86 -#, no-c-format -msgid "BIOS" -msgstr "" - -#. Tag: primary -#: Wstation.xml:89 Wstation.xml:108 Wstation.xml:140 -#, no-c-format -msgid "BIOS" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:90 Wstation.xml:109 Wstation.xml:146 Wstation.xml:163 -#, no-c-format -msgid "security" -msgstr "" - -#. Tag: primary -#: Wstation.xml:93 -#, no-c-format -msgid "basic input output system" -msgstr "" - -#. Tag: see -#: Wstation.xml:94 -#, no-c-format -msgid "BIOS" -msgstr "" - #. Tag: para -#: Wstation.xml:96 +#: Wstation.xml:51 #, no-c-format msgid "" "Password protection for the BIOS (or BIOS equivalent) and the boot loader " @@ -194,7 +112,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:99 +#: Wstation.xml:54 #, no-c-format msgid "" "For example, if a machine is used in a trade show and contains no sensitive " @@ -205,7 +123,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:102 +#: Wstation.xml:57 #, no-c-format msgid "" "If the workstation is located in a place where only authorized or trusted " @@ -214,13 +132,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:106 +#: Wstation.xml:61 #, no-c-format msgid "BIOS Passwords" msgstr "" #. Tag: para -#: Wstation.xml:112 +#: Wstation.xml:62 #, no-c-format msgid "" "The two primary reasons for password protecting the BIOS of a computer " @@ -230,7 +148,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:121 +#: Wstation.xml:71 #, no-c-format msgid "" "Preventing Changes to BIOS Settings — If an " @@ -241,7 +159,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:126 +#: Wstation.xml:76 #, no-c-format msgid "" "Preventing System Booting — Some BIOSes allow " @@ -250,7 +168,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:131 +#: Wstation.xml:81 #, no-c-format msgid "" "Because the methods for setting a BIOS password vary between computer " @@ -258,7 +176,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:134 +#: Wstation.xml:84 #, no-c-format msgid "" "If you forget the BIOS password, it can either be reset with jumpers on the " @@ -269,25 +187,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:138 +#: Wstation.xml:88 #, no-c-format msgid "Securing Non-x86 Platforms" msgstr "" -#. Tag: secondary -#: Wstation.xml:141 -#, no-c-format -msgid "non-x86 equivalents" -msgstr "" - -#. Tag: primary -#: Wstation.xml:145 -#, no-c-format -msgid "EFI Shell" -msgstr "" - #. Tag: para -#: Wstation.xml:149 +#: Wstation.xml:89 #, no-c-format msgid "" "Other architectures use different programs to perform low-level tasks " @@ -298,7 +204,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:152 +#: Wstation.xml:92 #, no-c-format msgid "" "For instructions on password protecting BIOS-like programs on other " @@ -306,25 +212,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:160 +#: Wstation.xml:100 #, no-c-format msgid "Boot Loader Passwords" msgstr "" -#. Tag: primary -#: Wstation.xml:162 Wstation.xml:196 -#, no-c-format -msgid "boot loaders" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:167 -#, no-c-format -msgid "boot loaders" -msgstr "" - #. Tag: para -#: Wstation.xml:170 +#: Wstation.xml:101 #, no-c-format msgid "" "The primary reasons for password protecting a Linux boot loader are as " @@ -332,7 +226,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:175 +#: Wstation.xml:106 #, no-c-format msgid "" "Preventing Access to Single User Mode — If " @@ -341,7 +235,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:180 +#: Wstation.xml:111 #, no-c-format msgid "" "Preventing Access to the GRUB Console — If the " @@ -351,7 +245,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:185 +#: Wstation.xml:116 #, no-c-format msgid "" "Preventing Access to Insecure Operating Systems — " @@ -361,7 +255,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:190 +#: Wstation.xml:121 #, no-c-format msgid "" "Fedora ships with the GRUB boot loader on the x86 platform. For a detailed " @@ -369,25 +263,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:194 +#: Wstation.xml:125 #, no-c-format msgid "Password Protecting GRUB" msgstr "" -#. Tag: secondary -#: Wstation.xml:197 -#, no-c-format -msgid "GRUB" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:198 -#, no-c-format -msgid "password protecting" -msgstr "" - #. Tag: para -#: Wstation.xml:200 +#: Wstation.xml:126 #, no-c-format msgid "" "You can configure GRUB to address the first two issues listed in /sbin/grub-md5-crypt" msgstr "" #. Tag: para -#: Wstation.xml:204 +#: Wstation.xml:130 #, no-c-format msgid "" "When prompted, type the GRUB password and press Enter. This " @@ -412,7 +294,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:207 +#: Wstation.xml:133 #, no-c-format msgid "" "Next, edit the GRUB configuration file /boot/grub/grub.confpassword --md5 <password-hash><password-hash> with the value " @@ -439,7 +321,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:218 +#: Wstation.xml:144 #, no-c-format msgid "" "The next time the system boots, the GRUB menu prevents access to the editor " @@ -448,7 +330,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:221 +#: Wstation.xml:147 #, no-c-format msgid "" "Unfortunately, this solution does not prevent an attacker from booting into " @@ -458,7 +340,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:224 +#: Wstation.xml:150 #, no-c-format msgid "" "Look for the title line of the operating " @@ -467,25 +349,25 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:227 +#: Wstation.xml:153 #, no-c-format msgid "For a DOS system, the stanza should begin similar to the following:" msgstr "" #. Tag: screen -#: Wstation.xml:230 +#: Wstation.xml:156 #, no-c-format msgid "title DOS lock" msgstr "" #. Tag: title -#: Wstation.xml:232 Wstation.xml:625 Wstation.xml:950 +#: Wstation.xml:158 Wstation.xml:501 Wstation.xml:803 #, no-c-format msgid "Warning" msgstr "" #. Tag: para -#: Wstation.xml:233 +#: Wstation.xml:159 #, no-c-format msgid "" "A password line must be present in the main " @@ -495,7 +377,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:237 +#: Wstation.xml:163 #, no-c-format msgid "" "To create a different password for a particular kernel or operating system, " @@ -504,7 +386,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:240 +#: Wstation.xml:166 #, no-c-format msgid "" "Each stanza protected with a unique password should begin with lines similar " @@ -512,7 +394,7 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:243 +#: Wstation.xml:169 #, no-c-format msgid "" "title DOS lock password --md5 <password-" @@ -520,21 +402,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:251 +#: Wstation.xml:177 #, no-c-format msgid "Password Security" msgstr "" -#. Tag: primary -#: Wstation.xml:253 Wstation.xml:279 Wstation.xml:488 Wstation.xml:543 -#: Wstation.xml:562 Wstation.xml:566 Wstation.xml:589 Wstation.xml:593 -#: Wstation.xml:598 Wstation.xml:603 Wstation.xml:635 -#, no-c-format -msgid "password security" -msgstr "" - #. Tag: para -#: Wstation.xml:255 +#: Wstation.xml:178 #, no-c-format msgid "" "Passwords are the primary method that Fedora uses to verify a user's " @@ -543,7 +417,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:258 +#: Wstation.xml:181 #, no-c-format msgid "" "For security purposes, the installation program configures the system to use " @@ -553,7 +427,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:261 +#: Wstation.xml:184 #, no-c-format msgid "" "If MD5 passwords are deselected during installation, the older " @@ -564,7 +438,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:264 +#: Wstation.xml:187 #, no-c-format msgid "" "If shadow passwords are deselected during installation, all passwords are " @@ -578,7 +452,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:267 +#: Wstation.xml:190 #, no-c-format msgid "" "Shadow passwords eliminate this type of attack by storing the password " @@ -587,7 +461,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:270 +#: Wstation.xml:193 #, no-c-format msgid "" "This forces a potential attacker to attempt password cracking remotely by " @@ -600,7 +474,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:273 +#: Wstation.xml:196 #, no-c-format msgid "" "In addition to format and storage considerations is the issue of content. " @@ -609,19 +483,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:277 +#: Wstation.xml:200 #, no-c-format msgid "Creating Strong Passwords" msgstr "" -#. Tag: secondary -#: Wstation.xml:280 -#, no-c-format -msgid "strong passwords" -msgstr "" - #. Tag: para -#: Wstation.xml:282 +#: Wstation.xml:201 #, no-c-format msgid "" "When creating a secure password, it is a good idea to follow these " @@ -629,7 +497,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:287 +#: Wstation.xml:206 #, no-c-format msgid "" "Do Not Use Only Words or Numbers — Never use only " @@ -637,32 +505,32 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:290 Wstation.xml:315 Wstation.xml:340 Wstation.xml:365 -#: Wstation.xml:385 Wstation.xml:420 +#: Wstation.xml:209 Wstation.xml:234 Wstation.xml:259 Wstation.xml:284 +#: Wstation.xml:304 Wstation.xml:339 #, no-c-format msgid "Some insecure examples include the following:" msgstr "" #. Tag: para -#: Wstation.xml:295 +#: Wstation.xml:214 #, no-c-format msgid "8675309" msgstr "" #. Tag: para -#: Wstation.xml:300 +#: Wstation.xml:219 #, no-c-format msgid "juan" msgstr "" #. Tag: para -#: Wstation.xml:305 +#: Wstation.xml:224 #, no-c-format msgid "hackme" msgstr "" #. Tag: para -#: Wstation.xml:312 +#: Wstation.xml:231 #, no-c-format msgid "" "Do Not Use Recognizable Words — Words such as " @@ -671,25 +539,25 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:320 +#: Wstation.xml:239 #, no-c-format msgid "john1" msgstr "" #. Tag: para -#: Wstation.xml:325 +#: Wstation.xml:244 #, no-c-format msgid "DS-9" msgstr "" #. Tag: para -#: Wstation.xml:330 +#: Wstation.xml:249 #, no-c-format msgid "mentat123" msgstr "" #. Tag: para -#: Wstation.xml:337 +#: Wstation.xml:256 #, no-c-format msgid "" "Do Not Use Words in Foreign Languages — Password " @@ -699,25 +567,25 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:345 +#: Wstation.xml:264 #, no-c-format msgid "cheguevara" msgstr "" #. Tag: para -#: Wstation.xml:350 +#: Wstation.xml:269 #, no-c-format msgid "bienvenido1" msgstr "" #. Tag: para -#: Wstation.xml:355 +#: Wstation.xml:274 #, no-c-format msgid "1dumbKopf" msgstr "" #. Tag: para -#: Wstation.xml:362 +#: Wstation.xml:281 #, no-c-format msgid "" "Do Not Use Hacker Terminology — If you think you " @@ -727,19 +595,19 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:370 +#: Wstation.xml:289 #, no-c-format msgid "H4X0R" msgstr "" #. Tag: para -#: Wstation.xml:375 +#: Wstation.xml:294 #, no-c-format msgid "1337" msgstr "" #. Tag: para -#: Wstation.xml:382 +#: Wstation.xml:301 #, no-c-format msgid "" "Do Not Use Personal Information — Avoid using any " @@ -749,37 +617,37 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:390 +#: Wstation.xml:309 #, no-c-format msgid "Your name" msgstr "" #. Tag: para -#: Wstation.xml:395 +#: Wstation.xml:314 #, no-c-format msgid "The names of pets" msgstr "" #. Tag: para -#: Wstation.xml:400 +#: Wstation.xml:319 #, no-c-format msgid "The names of family members" msgstr "" #. Tag: para -#: Wstation.xml:405 +#: Wstation.xml:324 #, no-c-format msgid "Any birth dates" msgstr "" #. Tag: para -#: Wstation.xml:410 +#: Wstation.xml:329 #, no-c-format msgid "Your phone number or zip code" msgstr "" #. Tag: para -#: Wstation.xml:417 +#: Wstation.xml:336 #, no-c-format msgid "" "Do Not Invert Recognizable Words — Good password " @@ -788,25 +656,25 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:425 +#: Wstation.xml:344 #, no-c-format msgid "R0X4H" msgstr "" #. Tag: para -#: Wstation.xml:430 +#: Wstation.xml:349 #, no-c-format msgid "nauj" msgstr "" #. Tag: para -#: Wstation.xml:435 +#: Wstation.xml:354 #, no-c-format msgid "9-DS" msgstr "" #. Tag: para -#: Wstation.xml:442 +#: Wstation.xml:361 #, no-c-format msgid "" "Do Not Write Down Your Password — Never store a " @@ -814,7 +682,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:447 +#: Wstation.xml:366 #, no-c-format msgid "" "Do Not Use the Same Password For All Machines — " @@ -823,13 +691,13 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:452 +#: Wstation.xml:371 #, no-c-format msgid "The following guidelines will help you to create a strong password:" msgstr "" #. Tag: para -#: Wstation.xml:457 +#: Wstation.xml:376 #, no-c-format msgid "" "Make the Password at Least Eight Characters Long " @@ -839,7 +707,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:462 +#: Wstation.xml:381 #, no-c-format msgid "" "Mix Upper and Lower Case Letters — Fedora is case " @@ -847,7 +715,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:467 +#: Wstation.xml:386 #, no-c-format msgid "" "Mix Letters and Numbers — Adding numbers to " @@ -856,7 +724,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:472 +#: Wstation.xml:391 #, no-c-format msgid "" "Include Non-Alphanumeric Characters — Special " @@ -865,7 +733,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:477 +#: Wstation.xml:396 #, no-c-format msgid "" "Pick a Password You Can Remember — The best " @@ -874,7 +742,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:482 +#: Wstation.xml:401 #, no-c-format msgid "" "With all these rules, it may seem difficult to create a password that meets " @@ -884,19 +752,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:486 +#: Wstation.xml:405 #, no-c-format msgid "Secure Password Creation Methodology" msgstr "" -#. Tag: secondary -#: Wstation.xml:489 -#, no-c-format -msgid "methodology" -msgstr "" - #. Tag: para -#: Wstation.xml:491 +#: Wstation.xml:406 #, no-c-format msgid "" "There are many methods that people use to create secure passwords. One of " @@ -904,32 +766,32 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:496 +#: Wstation.xml:411 #, no-c-format msgid "Think of an easily-remembered phrase, such as:" msgstr "" #. Tag: para -#: Wstation.xml:499 +#: Wstation.xml:414 #, no-c-format msgid "" "\"over the river and through the woods, to grandmother's house we go.\"" msgstr "" #. Tag: para -#: Wstation.xml:504 +#: Wstation.xml:419 #, no-c-format msgid "Next, turn it into an acronym (including the punctuation)." msgstr "" #. Tag: userinput -#: Wstation.xml:508 +#: Wstation.xml:423 #, no-c-format msgid "otrattw,tghwg." msgstr "" #. Tag: para -#: Wstation.xml:512 +#: Wstation.xml:427 #, no-c-format msgid "" "Add complexity by substituting numbers and symbols for letters in the " @@ -939,13 +801,13 @@ msgid "" msgstr "" #. Tag: userinput -#: Wstation.xml:516 +#: Wstation.xml:431 #, no-c-format msgid "o7r@77w,7ghwg." msgstr "" #. Tag: para -#: Wstation.xml:520 +#: Wstation.xml:435 #, no-c-format msgid "" "Add more complexity by capitalizing at least one letter, such as " @@ -953,13 +815,13 @@ msgid "" msgstr "" #. Tag: userinput -#: Wstation.xml:524 +#: Wstation.xml:439 #, no-c-format msgid "o7r@77w,7gHwg." msgstr "" #. Tag: para -#: Wstation.xml:528 +#: Wstation.xml:443 #, no-c-format msgid "" "Finally, do not use the example password above for any systems, " @@ -967,7 +829,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:533 +#: Wstation.xml:448 #, no-c-format msgid "" "While creating secure passwords is imperative, managing them properly is " @@ -977,31 +839,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:541 +#: Wstation.xml:456 #, no-c-format msgid "Creating User Passwords Within an Organization" msgstr "" -#. Tag: secondary -#: Wstation.xml:544 -#, no-c-format -msgid "in an organization" -msgstr "" - -#. Tag: primary -#: Wstation.xml:547 -#, no-c-format -msgid "passwords" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:548 -#, no-c-format -msgid "within an organization" -msgstr "" - #. Tag: para -#: Wstation.xml:550 +#: Wstation.xml:457 #, no-c-format msgid "" "If an organization has a large number of users, the system administrators " @@ -1011,7 +855,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:553 +#: Wstation.xml:460 #, no-c-format msgid "" "Creating the passwords for the users ensures that the passwords are good, " @@ -1020,7 +864,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:556 +#: Wstation.xml:463 #, no-c-format msgid "" "For these reasons, most system administrators prefer to have the users " @@ -1030,37 +874,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:560 +#: Wstation.xml:467 #, no-c-format msgid "Forcing Strong Passwords" msgstr "" -#. Tag: secondary -#: Wstation.xml:563 -#, no-c-format -msgid "enforcement" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:567 -#, no-c-format -msgid "and PAM" -msgstr "" - -#. Tag: primary -#: Wstation.xml:570 -#, no-c-format -msgid "pluggable authentication modules (PAM)" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:571 -#, no-c-format -msgid "strong password enforcement" -msgstr "" - #. Tag: para -#: Wstation.xml:573 +#: Wstation.xml:468 #, no-c-format msgid "" "To protect the network from intrusion it is a good idea for system " @@ -1082,7 +902,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:576 +#: Wstation.xml:471 #, no-c-format msgid "" "The password check that is performed at the time of their creation does not " @@ -1091,7 +911,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:579 +#: Wstation.xml:474 #, no-c-format msgid "" "Many password cracking programs are available that run under Fedora, " @@ -1100,45 +920,21 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:583 Wstation.xml:722 Wstation.xml:1092 Wstation.xml:1219 +#: Wstation.xml:478 Wstation.xml:599 Wstation.xml:921 Wstation.xml:1012 #, no-c-format msgid "Note" msgstr "" #. Tag: para -#: Wstation.xml:584 +#: Wstation.xml:479 #, no-c-format msgid "" "None of these tools are supplied with Fedora and are therefore not supported " -"by Fedora. in any way." -msgstr "" - -#. Tag: secondary -#: Wstation.xml:590 Wstation.xml:594 Wstation.xml:599 Wstation.xml:604 -#, no-c-format -msgid "auditing tools" -msgstr "" - -#. Tag: application -#: Wstation.xml:595 -#, no-c-format -msgid "John the Ripper" -msgstr "" - -#. Tag: application -#: Wstation.xml:600 -#, no-c-format -msgid "Crack" -msgstr "" - -#. Tag: application -#: Wstation.xml:605 -#, no-c-format -msgid "Slurpie" +"by Fedora in any way." msgstr "" #. Tag: para -#: Wstation.xml:609 +#: Wstation.xml:485 #, no-c-format msgid "" "John The Ripper — A " @@ -1149,18 +945,19 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:614 +#: Wstation.xml:490 #, no-c-format msgid "" "Crack — Perhaps the " "most well known password cracking software, Crack " "is also very fast, though not as easy to use as John The " "Ripper. It can be found online at http://www.crypticide.com/users/alecm/." +"crypticide.com/alecm/security/c50-faq.html\">http://www.crypticide.com/alecm/" +"security/c50-faq.html." msgstr "" #. Tag: para -#: Wstation.xml:619 +#: Wstation.xml:495 #, no-c-format msgid "" "Slurpie — " @@ -1174,7 +971,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:626 +#: Wstation.xml:502 #, no-c-format msgid "" "Always get authorization in writing before attempting to crack passwords " @@ -1182,25 +979,32 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:633 +#: Wstation.xml:509 #, no-c-format -msgid "Password Aging" +msgid "Passphrases" msgstr "" -#. Tag: secondary -#: Wstation.xml:636 +#. Tag: para +#: Wstation.xml:510 #, no-c-format -msgid "aging" +msgid "" +"Passphrases and passwords are the cornerstone to security in most of today's " +"systems. Unfortunately, techniques such as biometrics and two-factor " +"authentication have not yet become mainstream in many systems which has " +"become a major problem. If passwords are going to be used to secure a " +"system, then the use of passphrases should be considered. Passphrases are " +"longer than passwords and provide better protection than a password even " +"when implemented with non-standard characters such as numbers and symbols." msgstr "" -#. Tag: primary -#: Wstation.xml:639 +#. Tag: title +#: Wstation.xml:517 #, no-c-format -msgid "password aging" +msgid "Password Aging" msgstr "" #. Tag: para -#: Wstation.xml:641 +#: Wstation.xml:518 #, no-c-format msgid "" "Password aging is another technique used by system administrators to defend " @@ -1213,7 +1017,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:644 +#: Wstation.xml:521 #, no-c-format msgid "" "There are two primary programs used to specify password aging under Fedora: " @@ -1222,7 +1026,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:647 +#: Wstation.xml:524 #, no-c-format msgid "" "The option of the chage command " @@ -1231,14 +1035,14 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:650 +#: Wstation.xml:527 #, no-c-format msgid "" "chage -M 90 <username>" msgstr "" #. Tag: para -#: Wstation.xml:651 +#: Wstation.xml:528 #, no-c-format msgid "" "In the above command, replace <username> " @@ -1248,7 +1052,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:654 +#: Wstation.xml:531 #, no-c-format msgid "" "You can also use the chage command in interactive mode to " @@ -1257,31 +1061,35 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:657 +#: Wstation.xml:534 #, no-c-format msgid "chage <username>" msgstr "" #. Tag: para -#: Wstation.xml:658 +#: Wstation.xml:535 #, no-c-format msgid "The following is a sample interactive session using this command:" msgstr "" #. Tag: screen -#: Wstation.xml:661 +#: Wstation.xml:538 #, no-c-format msgid "" -" [root@interch-dev1 ~]# chage davido Changing the aging " -"information for davido Enter the new value, or press ENTER for the default " -"Minimum Password Age [0]: 10 Maximum Password Age [99999]: 90 Last Password " -"Change (YYYY-MM-DD) [2006-08-18]: Password Expiration Warning [7]: Password " -"Inactive [-1]: Account Expiration Date (YYYY-MM-DD) [1969-12-31]: " -"[root@interch-dev1 ~]# " +"[root@interch-dev1 ~]# chage davido \n" +"Changing the aging information for davido \n" +"Enter the new value, or press ENTER for the default \n" +"Minimum Password Age [0]: 10\n" +"Maximum Password Age [99999]: 90 \n" +"Last Password Change (YYYY-MM-DD) [2006-08-18]: \n" +"Password Expiration Warning [7]: \n" +"Password Inactive [-1]: \n" +"Account Expiration Date (YYYY-MM-DD) [1969-12-31]: \n" +"[root@interch-dev1 ~]#" msgstr "" #. Tag: para -#: Wstation.xml:662 +#: Wstation.xml:539 #, no-c-format msgid "" "Refer to the man page for chage for more information on the available " @@ -1289,7 +1097,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:665 +#: Wstation.xml:542 #, no-c-format msgid "" "You can also use the graphical User Manager " @@ -1298,7 +1106,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:670 Wstation.xml:1048 +#: Wstation.xml:547 Wstation.xml:877 #, no-c-format msgid "" "Click the System menu on the Panel, point to " @@ -1308,7 +1116,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:675 Wstation.xml:1053 +#: Wstation.xml:552 Wstation.xml:882 #, no-c-format msgid "" "Click the Users tab, and select the required user in " @@ -1316,7 +1124,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:680 Wstation.xml:1058 +#: Wstation.xml:557 Wstation.xml:887 #, no-c-format msgid "" "Click Properties on the toolbar to display the User " @@ -1325,7 +1133,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:685 +#: Wstation.xml:562 #, no-c-format msgid "" "Click the Password Info tab, and select the check box " @@ -1333,7 +1141,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:690 +#: Wstation.xml:567 #, no-c-format msgid "" "Enter the required value in the Days before change requiredPassword Info pane illustration." msgstr "" #. Tag: title -#: Wstation.xml:716 +#: Wstation.xml:593 #, no-c-format msgid "Administrative Controls" msgstr "" #. Tag: para -#: Wstation.xml:717 +#: Wstation.xml:594 #, no-c-format msgid "" "When administering a home machine, the user must perform some tasks as the " @@ -1373,7 +1181,7 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:720 +#: Wstation.xml:597 #, no-c-format msgid "" "-rwsr-xr-x 1 root root 47324 May 1 08:09 /bin/sus may be upper case or lower case. If " @@ -1390,7 +1198,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:727 +#: Wstation.xml:604 #, no-c-format msgid "" "For the system administrators of an organization, however, choices must be " @@ -1409,39 +1217,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:731 +#: Wstation.xml:608 #, no-c-format msgid "Allowing Root Access" msgstr "" -#. Tag: primary -#: Wstation.xml:733 Wstation.xml:740 Wstation.xml:771 Wstation.xml:781 -#: Wstation.xml:941 Wstation.xml:960 Wstation.xml:977 Wstation.xml:1001 -#: Wstation.xml:1010 Wstation.xml:1039 Wstation.xml:1102 -#, no-c-format -msgid "root" -msgstr "" - -#. Tag: primary -#: Wstation.xml:736 -#, no-c-format -msgid "root user" -msgstr "" - -#. Tag: see -#: Wstation.xml:737 -#, no-c-format -msgid "root" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:741 -#, no-c-format -msgid "allowing access" -msgstr "" - #. Tag: para -#: Wstation.xml:743 +#: Wstation.xml:609 #, no-c-format msgid "" "If the users within an organization are trusted and computer-literate, then " @@ -1452,7 +1234,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:746 +#: Wstation.xml:612 #, no-c-format msgid "" "On the other hand, giving root access to individual users can lead to the " @@ -1460,7 +1242,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:751 +#: Wstation.xml:617 #, no-c-format msgid "" "Machine Misconfiguration — Users with root access " @@ -1469,7 +1251,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:756 +#: Wstation.xml:622 #, no-c-format msgid "" "Running Insecure Services — Users with root " @@ -1479,7 +1261,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:761 +#: Wstation.xml:627 #, no-c-format msgid "" "Running Email Attachments As Root — Although " @@ -1488,19 +1270,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:769 +#: Wstation.xml:635 #, no-c-format msgid "Disallowing Root Access" msgstr "" -#. Tag: secondary -#: Wstation.xml:772 -#, no-c-format -msgid "disallowing access" -msgstr "" - #. Tag: para -#: Wstation.xml:774 +#: Wstation.xml:636 #, no-c-format msgid "" "If an administrator is uncomfortable allowing users to log in as root for " @@ -1512,57 +1288,51 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:777 +#: Wstation.xml:639 #, no-c-format msgid "" "describes ways that an administrator can further ensure that root logins are " "disallowed:" msgstr "" -#. Tag: secondary -#: Wstation.xml:782 Wstation.xml:942 Wstation.xml:961 Wstation.xml:978 -#, no-c-format -msgid "methods of disabling" -msgstr "" - #. Tag: title -#: Wstation.xml:785 +#: Wstation.xml:643 #, no-c-format msgid "Methods of Disabling the Root Account" msgstr "" #. Tag: entry -#: Wstation.xml:793 +#: Wstation.xml:651 #, no-c-format msgid "Method" msgstr "" #. Tag: entry -#: Wstation.xml:796 +#: Wstation.xml:654 #, no-c-format msgid "Description" msgstr "" #. Tag: entry -#: Wstation.xml:799 +#: Wstation.xml:657 #, no-c-format msgid "Effects" msgstr "" #. Tag: entry -#: Wstation.xml:802 +#: Wstation.xml:660 #, no-c-format msgid "Does Not Affect" msgstr "" #. Tag: entry -#: Wstation.xml:809 +#: Wstation.xml:667 #, no-c-format msgid "Changing the root shell." msgstr "" #. Tag: entry -#: Wstation.xml:812 +#: Wstation.xml:670 #, no-c-format msgid "" "Edit the /etc/passwd file and change the shell from " @@ -1570,67 +1340,67 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:817 +#: Wstation.xml:675 #, no-c-format msgid "Prevents access to the root shell and logs any such attempts." msgstr "" #. Tag: member -#: Wstation.xml:818 +#: Wstation.xml:676 #, no-c-format msgid "The following programs are prevented from accessing the root account:" msgstr "" #. Tag: member -#: Wstation.xml:819 Wstation.xml:849 Wstation.xml:906 +#: Wstation.xml:677 Wstation.xml:707 Wstation.xml:764 #, no-c-format msgid "· login" msgstr "" #. Tag: member -#: Wstation.xml:820 Wstation.xml:850 Wstation.xml:907 +#: Wstation.xml:678 Wstation.xml:708 Wstation.xml:765 #, no-c-format msgid "· gdm" msgstr "" #. Tag: member -#: Wstation.xml:821 Wstation.xml:851 Wstation.xml:908 +#: Wstation.xml:679 Wstation.xml:709 Wstation.xml:766 #, no-c-format msgid "· kdm" msgstr "" #. Tag: member -#: Wstation.xml:822 Wstation.xml:852 Wstation.xml:909 +#: Wstation.xml:680 Wstation.xml:710 Wstation.xml:767 #, no-c-format msgid "· xdm" msgstr "" #. Tag: member -#: Wstation.xml:823 Wstation.xml:860 +#: Wstation.xml:681 Wstation.xml:718 #, no-c-format msgid "· su" msgstr "" #. Tag: member -#: Wstation.xml:824 Wstation.xml:862 Wstation.xml:878 Wstation.xml:910 +#: Wstation.xml:682 Wstation.xml:720 Wstation.xml:736 Wstation.xml:768 #, no-c-format msgid "· ssh" msgstr "" #. Tag: member -#: Wstation.xml:825 Wstation.xml:863 Wstation.xml:879 Wstation.xml:911 +#: Wstation.xml:683 Wstation.xml:721 Wstation.xml:737 Wstation.xml:769 #, no-c-format msgid "· scp" msgstr "" #. Tag: member -#: Wstation.xml:826 Wstation.xml:864 Wstation.xml:880 Wstation.xml:912 +#: Wstation.xml:684 Wstation.xml:722 Wstation.xml:738 Wstation.xml:770 #, no-c-format msgid "· sftp" msgstr "" #. Tag: member -#: Wstation.xml:831 +#: Wstation.xml:689 #, no-c-format msgid "" "Programs that do not require a shell, such as FTP clients, mail clients, and " @@ -1638,7 +1408,7 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:832 Wstation.xml:859 +#: Wstation.xml:690 Wstation.xml:717 #, no-c-format msgid "" "The following programs are not prevented from accessing " @@ -1646,31 +1416,31 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:833 Wstation.xml:861 +#: Wstation.xml:691 Wstation.xml:719 #, no-c-format msgid "· sudo" msgstr "" #. Tag: member -#: Wstation.xml:834 Wstation.xml:904 +#: Wstation.xml:692 Wstation.xml:762 #, no-c-format msgid "· FTP clients" msgstr "" #. Tag: member -#: Wstation.xml:835 Wstation.xml:905 +#: Wstation.xml:693 Wstation.xml:763 #, no-c-format msgid "· Email clients" msgstr "" #. Tag: entry -#: Wstation.xml:840 +#: Wstation.xml:698 #, no-c-format msgid "Disabling root access via any console device (tty)." msgstr "" #. Tag: entry -#: Wstation.xml:843 +#: Wstation.xml:701 #, no-c-format msgid "" "An empty /etc/securetty file prevents root login on any " @@ -1678,7 +1448,7 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:848 +#: Wstation.xml:706 #, no-c-format msgid "" "Prevents access to the root account via the console or the network. The " @@ -1686,13 +1456,13 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:853 +#: Wstation.xml:711 #, no-c-format msgid "· Other network services that open a tty" msgstr "" #. Tag: member -#: Wstation.xml:858 +#: Wstation.xml:716 #, no-c-format msgid "" "Programs that do not log in as root, but perform administrative tasks " @@ -1700,13 +1470,13 @@ msgid "" msgstr "" #. Tag: entry -#: Wstation.xml:869 +#: Wstation.xml:727 #, no-c-format msgid "Disabling root SSH logins." msgstr "" #. Tag: entry -#: Wstation.xml:872 +#: Wstation.xml:730 #, no-c-format msgid "" "Edit the /etc/ssh/sshd_config file and set the " @@ -1714,7 +1484,7 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:877 +#: Wstation.xml:735 #, no-c-format msgid "" "Prevents root access via the OpenSSH suite of tools. The following programs " @@ -1722,19 +1492,19 @@ msgid "" msgstr "" #. Tag: member -#: Wstation.xml:885 +#: Wstation.xml:743 #, no-c-format msgid "This only prevents root access to the OpenSSH suite of tools." msgstr "" #. Tag: entry -#: Wstation.xml:890 +#: Wstation.xml:748 #, no-c-format msgid "Use PAM to limit root access to services." msgstr "" #. Tag: entry -#: Wstation.xml:893 +#: Wstation.xml:751 #, no-c-format msgid "" "Edit the file for the target service in the /etc/pam.d/ " @@ -1743,7 +1513,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:895 +#: Wstation.xml:753 #, no-c-format msgid "" "Refer to echo > /etc/securetty" msgstr "" #. Tag: para -#: Wstation.xml:951 +#: Wstation.xml:804 #, no-c-format msgid "" "A blank /etc/securetty file does not/etc/ssh/sshd_config). Change the " -"line that reads:" +"Root logins via the SSH protocol are disabled by default in Fedora; however, " +"if this option has been enabled, it can be disabled again by editing the SSH " +"daemon's configuration file (/etc/ssh/sshd_config). " +"Change the line that reads:" msgstr "" #. Tag: screen -#: Wstation.xml:967 +#: Wstation.xml:815 #, no-c-format -msgid "# PermitRootLogin yes" +msgid "PermitRootLogin yes" msgstr "" #. Tag: para -#: Wstation.xml:968 +#: Wstation.xml:816 #, no-c-format msgid "to read as follows:" msgstr "" #. Tag: screen -#: Wstation.xml:971 +#: Wstation.xml:819 #, no-c-format -msgid " PermitRootLogin no" +msgid "PermitRootLogin no" msgstr "" -#. Tag: title -#: Wstation.xml:975 +#. Tag: para +#: Wstation.xml:820 #, no-c-format -msgid "Disabling Root Using PAM" +msgid "" +"For these changes to take effect, the SSH daemon must be restarted. This can " +"be done via the following command:" msgstr "" -#. Tag: tertiary -#: Wstation.xml:979 +#. Tag: screen +#: Wstation.xml:823 +#, no-c-format +msgid "kill -HUP `cat /var/run/sshd.pid`" +msgstr "" + +#. Tag: title +#: Wstation.xml:827 #, no-c-format -msgid "with PAM" +msgid "Disabling Root Using PAM" msgstr "" #. Tag: para -#: Wstation.xml:981 +#: Wstation.xml:828 #, no-c-format msgid "" "PAM, through the /lib/security/pam_listfile.so module, " @@ -1915,15 +1683,15 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:984 +#: Wstation.xml:831 #, no-c-format msgid "" -"auth required /lib/security/pam_listfile.so item=user \\ " -"sense=deny file=/etc/vsftpd.ftpusers onerr=succeed" +"auth required /lib/security/pam_listfile.so item=user \\ \n" +"sense=deny file=/etc/vsftpd.ftpusers onerr=succeed" msgstr "" #. Tag: para -#: Wstation.xml:985 +#: Wstation.xml:832 #, no-c-format msgid "" "This instructs PAM to consult the /etc/vsftpd.ftpusers " @@ -1933,7 +1701,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:988 +#: Wstation.xml:835 #, no-c-format msgid "" "If the administrator wants to deny access to multiple services, a similar " @@ -1943,7 +1711,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:991 +#: Wstation.xml:838 #, no-c-format msgid "" "For more information about PAM, refer to su Command" msgstr "" -#. Tag: tertiary -#: Wstation.xml:1012 -#, no-c-format -msgid "and su" -msgstr "" - -#. Tag: command -#: Wstation.xml:1015 -#, no-c-format -msgid "su" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:1016 Wstation.xml:1108 -#, no-c-format -msgid "and root" -msgstr "" - #. Tag: para -#: Wstation.xml:1018 +#: Wstation.xml:852 #, no-c-format msgid "" "When a user executes the su command, they are prompted " @@ -2005,7 +1749,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1021 +#: Wstation.xml:855 #, no-c-format msgid "" "Once logged in via the su command, the user isusermod -G wheel <username><username> " "with the username you want to add to the wheel group." msgstr "" -#. Tag: tertiary -#: Wstation.xml:1041 -#, no-c-format -msgid "with User Manager" -msgstr "" - #. Tag: para -#: Wstation.xml:1043 +#: Wstation.xml:872 #, no-c-format msgid "" "You can also use the User Manager to modify group " @@ -2066,7 +1804,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1063 +#: Wstation.xml:892 #, no-c-format msgid "" "Click the Groups tab, select the check box for the " @@ -2076,7 +1814,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1068 +#: Wstation.xml:897 #, no-c-format msgid "" "Open the PAM configuration file for su (/etc/" @@ -2085,13 +1823,13 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:1071 +#: Wstation.xml:900 #, no-c-format msgid "auth required /lib/security/$ISA/pam_wheel.so use_uid" msgstr "" #. Tag: para -#: Wstation.xml:1072 +#: Wstation.xml:901 #, no-c-format msgid "" "This change means that only members of the administrative group " @@ -2099,19 +1837,19 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1079 +#: Wstation.xml:908 #, no-c-format msgid "Adding users to the \"wheel\" group." msgstr "" #. Tag: para -#: Wstation.xml:1085 +#: Wstation.xml:914 #, no-c-format msgid "Groups pane illustration" msgstr "" #. Tag: para -#: Wstation.xml:1093 +#: Wstation.xml:922 #, no-c-format msgid "" "The root user is part of the wheel group by " @@ -2119,25 +1857,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1100 +#: Wstation.xml:929 #, no-c-format msgid "The sudo Command" msgstr "" -#. Tag: tertiary -#: Wstation.xml:1104 -#, no-c-format -msgid "and sudo" -msgstr "" - -#. Tag: command -#: Wstation.xml:1107 -#, no-c-format -msgid "sudo" -msgstr "" - #. Tag: para -#: Wstation.xml:1110 +#: Wstation.xml:930 #, no-c-format msgid "" "The sudo command offers another approach to giving users " @@ -2149,19 +1875,19 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1113 +#: Wstation.xml:933 #, no-c-format msgid "The basic format of the sudo command is as follows:" msgstr "" #. Tag: screen -#: Wstation.xml:1116 +#: Wstation.xml:936 #, no-c-format msgid "sudo <command>" msgstr "" #. Tag: para -#: Wstation.xml:1117 +#: Wstation.xml:937 #, no-c-format msgid "" "In the above example, <command> would be " @@ -2170,7 +1896,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1122 +#: Wstation.xml:942 #, no-c-format msgid "" "Users of the sudo command should take extra care to log " @@ -2181,7 +1907,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1126 +#: Wstation.xml:946 #, no-c-format msgid "" "The sudo command allows for a high degree of flexibility. " @@ -2194,7 +1920,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1129 +#: Wstation.xml:949 #, no-c-format msgid "" "The sudo command also provides a comprehensive audit " @@ -2204,7 +1930,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1132 +#: Wstation.xml:952 #, no-c-format msgid "" "Another advantage of the sudo command is that an " @@ -2213,7 +1939,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1135 +#: Wstation.xml:955 #, no-c-format msgid "" "Administrators wanting to edit the sudo configuration " @@ -2222,7 +1948,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1138 +#: Wstation.xml:958 #, no-c-format msgid "" "To give someone full administrative privileges, type visudojuan ALL=(ALL) ALL" msgstr "" #. Tag: para -#: Wstation.xml:1142 +#: Wstation.xml:962 #, no-c-format msgid "" "This example states that the user, juan, " @@ -2245,7 +1971,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1145 +#: Wstation.xml:965 #, no-c-format msgid "" "The example below illustrates the granularity possible when configuring " @@ -2253,13 +1979,13 @@ msgid "" msgstr "" #. Tag: screen -#: Wstation.xml:1148 +#: Wstation.xml:968 #, no-c-format msgid "%users localhost=/sbin/shutdown -h now" msgstr "" #. Tag: para -#: Wstation.xml:1149 +#: Wstation.xml:969 #, no-c-format msgid "" "This example states that any user can issue the command /sbin/" @@ -2267,7 +1993,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1152 +#: Wstation.xml:972 #, no-c-format msgid "" "The man page for sudoers has a detailed listing of " @@ -2275,20 +2001,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1162 +#: Wstation.xml:982 #, no-c-format msgid "Available Network Services" msgstr "" -#. Tag: primary -#: Wstation.xml:1164 Wstation.xml:1175 Wstation.xml:1179 Wstation.xml:1184 -#: Wstation.xml:1189 Wstation.xml:1214 Wstation.xml:1238 -#, no-c-format -msgid "network services" -msgstr "" - #. Tag: para -#: Wstation.xml:1166 +#: Wstation.xml:983 #, no-c-format msgid "" "While user access to administrative controls is an important issue for " @@ -2298,7 +2017,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1169 +#: Wstation.xml:986 #, no-c-format msgid "" "Many services under Fedora behave as network servers. If a network service " @@ -2309,37 +2028,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1173 +#: Wstation.xml:990 #, no-c-format msgid "Risks To Services" msgstr "" -#. Tag: secondary -#: Wstation.xml:1176 Wstation.xml:1180 Wstation.xml:1185 Wstation.xml:1190 -#, no-c-format -msgid "risks" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:1181 -#, no-c-format -msgid "buffer overflow" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:1186 -#, no-c-format -msgid "denial-of-service" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:1191 -#, no-c-format -msgid "script vulnerability" -msgstr "" - #. Tag: para -#: Wstation.xml:1193 +#: Wstation.xml:991 #, no-c-format msgid "" "Network services can pose many risks for Linux systems. Below is a list of " @@ -2347,7 +2042,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1198 +#: Wstation.xml:996 #, no-c-format msgid "" "Denial of Service Attacks (DoS) — By flooding a " @@ -2356,7 +2051,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1203 +#: Wstation.xml:1001 #, no-c-format msgid "" "Script Vulnerability Attacks — If a server is " @@ -2367,7 +2062,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1208 +#: Wstation.xml:1006 #, no-c-format msgid "" "Buffer Overflow Attacks — Services that connect " @@ -2379,20 +2074,8 @@ msgid "" "rootkits to maintain their access to the system." msgstr "" -#. Tag: secondary -#: Wstation.xml:1215 -#, no-c-format -msgid "buffer overflow" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:1216 -#, no-c-format -msgid "ExecShield" -msgstr "" - #. Tag: para -#: Wstation.xml:1220 +#: Wstation.xml:1013 #, no-c-format msgid "" "The threat of buffer overflow vulnerabilities is mitigated in Fedora by " @@ -2406,7 +2089,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1223 +#: Wstation.xml:1016 #, no-c-format msgid "" "Execshield also includes support for No eXecute " @@ -2419,14 +2102,8 @@ msgid "" "overflow exploits." msgstr "" -#. Tag: title -#: Wstation.xml:1228 -#, no-c-format -msgid "Tip" -msgstr "" - #. Tag: para -#: Wstation.xml:1229 +#: Wstation.xml:1022 #, no-c-format msgid "" "To limit exposure to attacks over the network, all services that are unused " @@ -2434,55 +2111,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1236 +#: Wstation.xml:1029 #, no-c-format msgid "Identifying and Configuring Services" msgstr "" -#. Tag: secondary -#: Wstation.xml:1239 -#, no-c-format -msgid "identifying and configuring" -msgstr "" - -#. Tag: command -#: Wstation.xml:1242 -#, no-c-format -msgid "cupsd" -msgstr "" - -#. Tag: command -#: Wstation.xml:1245 -#, no-c-format -msgid "lpd" -msgstr "" - -#. Tag: command -#: Wstation.xml:1248 -#, no-c-format -msgid "xinetd" -msgstr "" - -#. Tag: command -#: Wstation.xml:1251 -#, no-c-format -msgid "portmap" -msgstr "" - -#. Tag: command -#: Wstation.xml:1254 Wstation.xml:1402 -#, no-c-format -msgid "sendmail" -msgstr "" - -#. Tag: command -#: Wstation.xml:1257 -#, no-c-format -msgid "sshd" -msgstr "" - #. Tag: para -#: Wstation.xml:1259 +#: Wstation.xml:1030 #, no-c-format msgid "" "To enhance security, most network services installed with Fedora are turned " @@ -2490,19 +2125,19 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1264 +#: Wstation.xml:1035 #, no-c-format msgid "cupsd — The default print server for Fedora." msgstr "" #. Tag: para -#: Wstation.xml:1269 +#: Wstation.xml:1040 #, no-c-format msgid "lpd — An alternative print server." msgstr "" #. Tag: para -#: Wstation.xml:1274 +#: Wstation.xml:1045 #, no-c-format msgid "" "xinetd — A super server that controls connections " @@ -2511,7 +2146,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1279 +#: Wstation.xml:1050 #, no-c-format msgid "" "sendmail — The Sendmail Mail Transport " @@ -2520,7 +2155,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1284 +#: Wstation.xml:1055 #, no-c-format msgid "" "sshd — The OpenSSH server, which is a secure " @@ -2528,7 +2163,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1289 +#: Wstation.xml:1060 #, no-c-format msgid "" "When determining whether to leave these services running, it is best to use " @@ -2540,19 +2175,19 @@ msgid "" msgstr "" #. Tag: application -#: Wstation.xml:1293 Wstation.xml:1296 +#: Wstation.xml:1064 #, no-c-format msgid "Services Configuration Tool" msgstr "" #. Tag: para -#: Wstation.xml:1302 +#: Wstation.xml:1070 #, no-c-format msgid "Services Configuration Tool illustration" msgstr "" #. Tag: para -#: Wstation.xml:1308 +#: Wstation.xml:1076 #, no-c-format msgid "" "If unsure of the purpose for a particular service, the Services " @@ -2562,7 +2197,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1311 +#: Wstation.xml:1079 #, no-c-format msgid "" "Checking which network services are available to start at boot time is only " @@ -2572,19 +2207,13 @@ msgid "" msgstr "" #. Tag: title -#: Wstation.xml:1317 +#: Wstation.xml:1085 #, no-c-format msgid "Insecure Services" msgstr "" -#. Tag: primary -#: Wstation.xml:1319 Wstation.xml:1349 Wstation.xml:1353 Wstation.xml:1357 -#, no-c-format -msgid "insecure services" -msgstr "" - #. Tag: para -#: Wstation.xml:1321 +#: Wstation.xml:1086 #, no-c-format msgid "" "Potentially, any network service is insecure. This is why turning off unused " @@ -2595,7 +2224,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1324 +#: Wstation.xml:1089 #, no-c-format msgid "" "Some network protocols are inherently more insecure than others. These " @@ -2603,7 +2232,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1329 +#: Wstation.xml:1094 #, no-c-format msgid "" "Transmit Usernames and Passwords Over a Network UnencryptedTransmit Sensitive Data Over a Network Unencrypted " @@ -2624,7 +2253,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1337 +#: Wstation.xml:1102 #, no-c-format msgid "" "Remote memory dump services, like netdump, transmit the " @@ -2633,7 +2262,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1340 +#: Wstation.xml:1105 #, no-c-format msgid "" "Other services like finger and rwhod " @@ -2641,7 +2270,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1345 +#: Wstation.xml:1110 #, no-c-format msgid "" "Examples of inherently insecure services include rlogin, " @@ -2649,26 +2278,8 @@ msgid "" "command>." msgstr "" -#. Tag: secondary -#: Wstation.xml:1350 -#, no-c-format -msgid "rsh" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:1354 -#, no-c-format -msgid "Telnet" -msgstr "" - -#. Tag: secondary -#: Wstation.xml:1358 -#, no-c-format -msgid "vsftpd" -msgstr "" - #. Tag: para -#: Wstation.xml:1360 +#: Wstation.xml:1113 #, no-c-format msgid "" "All remote login and shell programs (rlogin, " @@ -2679,7 +2290,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1363 +#: Wstation.xml:1116 #, no-c-format msgid "" "FTP is not as inherently dangerous to the security of the system as remote " @@ -2689,20 +2300,20 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1366 +#: Wstation.xml:1119 #, no-c-format msgid "" "Services that should be carefully implemented and behind a firewall include:" msgstr "" #. Tag: command -#: Wstation.xml:1372 +#: Wstation.xml:1125 #, no-c-format msgid "finger" msgstr "" #. Tag: para -#: Wstation.xml:1376 +#: Wstation.xml:1129 #, no-c-format msgid "" "authd (this was called identd in " @@ -2710,55 +2321,61 @@ msgid "" msgstr "" #. Tag: command -#: Wstation.xml:1382 +#: Wstation.xml:1135 #, no-c-format msgid "netdump" msgstr "" #. Tag: command -#: Wstation.xml:1387 +#: Wstation.xml:1140 #, no-c-format msgid "netdump-server" msgstr "" #. Tag: command -#: Wstation.xml:1392 +#: Wstation.xml:1145 #, no-c-format msgid "nfs" msgstr "" #. Tag: command -#: Wstation.xml:1397 +#: Wstation.xml:1150 #, no-c-format msgid "rwhod" msgstr "" +#. Tag: command +#: Wstation.xml:1155 +#, no-c-format +msgid "sendmail" +msgstr "" + #. Tag: para -#: Wstation.xml:1406 +#: Wstation.xml:1159 #, no-c-format msgid "smb (Samba)" msgstr "" #. Tag: command -#: Wstation.xml:1412 +#: Wstation.xml:1165 #, no-c-format msgid "yppasswdd" msgstr "" #. Tag: command -#: Wstation.xml:1417 +#: Wstation.xml:1170 #, no-c-format msgid "ypserv" msgstr "" #. Tag: command -#: Wstation.xml:1422 +#: Wstation.xml:1175 #, no-c-format msgid "ypxfrd" msgstr "" #. Tag: para -#: Wstation.xml:1426 +#: Wstation.xml:1179 #, no-c-format msgid "" "More information on securing network services is available in necessary network services are configured, it " @@ -2798,7 +2403,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1447 +#: Wstation.xml:1196 #, no-c-format msgid "" "You should configure the necessary services and implement a firewall " @@ -2807,7 +2412,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1451 +#: Wstation.xml:1200 #, no-c-format msgid "" "Firewalls prevent network packets from accessing the system's network " @@ -2820,19 +2425,18 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1454 +#: Wstation.xml:1203 #, no-c-format msgid "" "For most users, the best tool for configuring a simple firewall is the " "graphical firewall configuration tool which ships with Fedora: the " "&RHSECLEVELTOOL; (system-config-" -"securitylevel). This tool creates broad iptables rules for a general-purpose firewall using a control panel " -"interface." +"firewall). This tool creates broad iptables " +"rules for a general-purpose firewall using a control panel interface." msgstr "" #. Tag: para -#: Wstation.xml:1457 +#: Wstation.xml:1206 #, no-c-format msgid "" "Refer to OpenSSH" -msgstr "" - -#. Tag: tertiary -#: Wstation.xml:1479 -#, no-c-format -msgid "GPG" -msgstr "" - #. Tag: para -#: Wstation.xml:1481 +#: Wstation.xml:1216 #, no-c-format msgid "" "As the size and popularity of the Internet has grown, so has the threat of " @@ -2891,7 +2471,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1484 +#: Wstation.xml:1219 #, no-c-format msgid "" "Fedora ships with two basic tools that use high-level, public-key-" @@ -2900,7 +2480,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1489 +#: Wstation.xml:1224 #, no-c-format msgid "" "OpenSSH — A free implementation of the SSH " @@ -2908,39 +2488,15 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1494 +#: Wstation.xml:1229 #, no-c-format msgid "" "Gnu Privacy Guard (GPG) — A free implementation " "of the PGP (Pretty Good Privacy) encryption application for encrypting data." msgstr "" -#. Tag: primary -#: Wstation.xml:1500 Wstation.xml:1503 Wstation.xml:1507 Wstation.xml:1511 -#, no-c-format -msgid "OpenSSH" -msgstr "" - -#. Tag: command -#: Wstation.xml:1504 -#, no-c-format -msgid "ssh" -msgstr "" - -#. Tag: command -#: Wstation.xml:1508 -#, no-c-format -msgid "scp" -msgstr "" - -#. Tag: command -#: Wstation.xml:1512 -#, no-c-format -msgid "sftp" -msgstr "" - #. Tag: para -#: Wstation.xml:1514 +#: Wstation.xml:1234 #, no-c-format msgid "" "OpenSSH is a safer way to access a remote machine and replaces older, " @@ -2950,19 +2506,19 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1519 +#: Wstation.xml:1239 #, no-c-format msgid "ssh — A secure remote console access client." msgstr "" #. Tag: para -#: Wstation.xml:1524 +#: Wstation.xml:1244 #, no-c-format msgid "scp — A secure remote copy command." msgstr "" #. Tag: para -#: Wstation.xml:1529 +#: Wstation.xml:1249 #, no-c-format msgid "" "sftp — A secure pseudo-ftp client that allows " @@ -2970,7 +2526,15 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1536 +#: Wstation.xml:1254 +#, no-c-format +msgid "" +"Refer to for more information regarding OpenSSH." +msgstr "" + +#. Tag: para +#: Wstation.xml:1259 #, no-c-format msgid "" "Although the sshd service is inherently secure, the " @@ -2980,7 +2544,7 @@ msgid "" msgstr "" #. Tag: para -#: Wstation.xml:1540 +#: Wstation.xml:1263 #, no-c-format msgid "" "GPG is one way to ensure private email communication. It can be used both to "