Proposal regarding security chapter

Tillman Hodgson tillman at seekingfire.com
Fri Nov 19 20:33:38 UTC 2004


On Fri, Nov 19, 2004 at 09:01:15PM +0100, Remko Lodder wrote:
> Tillman Hodgson wrote:
> >
> >"Firewall", by itself, doesn't feel like an intuitive place to split
> >topics to me (aside from the convenience of its size).  However, I
> >can see a natural split between network security and host security.
> >In that scenario, MAC would become the largest portion of the host
> >security chapter.
> >
> >That still leaves security with 2 chapters, unfortunately. It only
> >addressed the page count balance between the two chapters.
> 
> Well, i had a tiny little discussion on EFNet on our docs channel
> (#bsddocs) and there is another suggestion to make a section V for
> security and place all security related stuff in there like
> MAC,Firewalls,Secure system stuff (or whatever it should be named).

I like this idea the best.

Ok, granted, in one of aspects I'm a security consultant and so I'm a
/little/ biased as to it's importance, but there's a practical benefit
as well: Each topic gets it's own chapter. And, seriously, some of the
Security sub-chapters suffer from too-many-sub-level-itis. This would
alleviate a lot of that.

> I do not think that it's good to place Firewall and Mac into one
> chapter. But that's perhaps a bit of taste :)

Nope, I agree with you. I was proposing to have a network and a host (or
local, which Tom suggested for a name) chapter. Firewalling would be in
the network chapter, MAC would be in the local chapter. This is now my
second-best ideal, though, after the new Section V idea.

-T


-- 
"Yield to temptation; it may not pass your way again."
    -- Robert Heinlein



More information about the freebsd-doc mailing list