svn commit: r42501 - head/en_US.ISO8859-1/books/handbook/security

[Warren Block]

Author: wblock
Date: Tue Aug  6 13:21:03 2013
New Revision: 42501
URL: http://svnweb.freebsd.org/changeset/doc/42501

Log:
  Give less open permissions in process accounting log example, discussed
  in forum thread http://forums.freebsd.org/showthread.php?t=41059.
  Remove filename and username attributes from userinput sections, other
  small fixes.
  
  Reviewed by:	trhodes

Modified:
  head/en_US.ISO8859-1/books/handbook/security/chapter.xml

Modified: head/en_US.ISO8859-1/books/handbook/security/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Aug  6 12:49:24 2013	(r42500)
+++ head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Aug  6 13:21:03 2013	(r42501)
@@ -3681,11 +3681,10 @@ VII. References <co id="co-ref"/></progr
       <para>Before using process accounting, it must be enabled using
 	the following commands:</para>
 
-      <screen>&prompt.root; <userinput>touch <filename>/var/account/acct</filename></userinput>
-
-&prompt.root; <userinput>accton <filename>/var/account/acct</filename></userinput>
-
-&prompt.root; <userinput>echo 'accounting_enable="YES"' >> <filename>/etc/rc.conf</filename></userinput></screen>
+      <screen>&prompt.root; <userinput>touch /var/account/acct</userinput>
+&prompt.root; <userinput>chmod 600 /var/account/acct</userinput>
+&prompt.root; <userinput>accton /var/account/acct</userinput>
+&prompt.root; <userinput>echo 'accounting_enable="YES"' >> /etc/rc.conf</userinput></screen>
 
       <para>Once enabled, accounting will begin to track information
 	such as <acronym>CPU</acronym> statistics and executed
@@ -3703,10 +3702,9 @@ VII. References <co id="co-ref"/></progr
 	<username>trhodes</username> on the <literal>ttyp1</literal>
 	terminal:</para>
 
-      <screen>&prompt.root; <userinput>lastcomm ls
-	<username>trhodes</username> ttyp1</userinput></screen>
+      <screen>&prompt.root; <userinput>lastcomm ls trhodes ttyp1</userinput></screen>
 
-      <para>Many other useful options exist and are explained in the
+      <para>Many other useful options exist and are explained in
 	&man.lastcomm.1;, &man.acct.5;, and &man.sa.8;.</para>
     </sect2>
   </sect1>
@@ -3764,7 +3762,7 @@ options         RCTL</programlisting>
 
     <para>The entire system will need rebuilt.  See
       <xref linkend="kernelconfig"/>, which will provide instructions
-      for the process.  Once this is complete, the
+      for the process.  Once this is complete,
       <command>rctl</command> may be used to set rules for the
       system.</para>