From owner-svn-doc-head@FreeBSD.ORG  Tue Aug  6 13:21:03 2013
Return-Path: <owner-svn-doc-head@FreeBSD.ORG>
Delivered-To: svn-doc-head@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id B5A8F64F;
 Tue,  6 Aug 2013 13:21:03 +0000 (UTC)
 (envelope-from wblock@FreeBSD.org)
Received: from svn.freebsd.org (svn.freebsd.org
 [IPv6:2001:1900:2254:2068::e6a:0])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 87D962E18;
 Tue,  6 Aug 2013 13:21:03 +0000 (UTC)
Received: from svn.freebsd.org ([127.0.1.70])
 by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r76DL3w3007832;
 Tue, 6 Aug 2013 13:21:03 GMT (envelope-from wblock@svn.freebsd.org)
Received: (from wblock@localhost)
 by svn.freebsd.org (8.14.7/8.14.5/Submit) id r76DL3ti007831;
 Tue, 6 Aug 2013 13:21:03 GMT (envelope-from wblock@svn.freebsd.org)
Message-Id: <201308061321.r76DL3ti007831@svn.freebsd.org>
From: Warren Block <wblock@FreeBSD.org>
Date: Tue, 6 Aug 2013 13:21:03 +0000 (UTC)
To: doc-committers@freebsd.org, svn-doc-all@freebsd.org,
 svn-doc-head@freebsd.org
Subject: svn commit: r42501 - head/en_US.ISO8859-1/books/handbook/security
X-SVN-Group: doc-head
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-doc-head@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: SVN commit messages for the doc tree for head
 <svn-doc-head.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>,
 <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head>
List-Post: <mailto:svn-doc-head@freebsd.org>
List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>,
 <mailto:svn-doc-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Aug 2013 13:21:03 -0000

Author: wblock
Date: Tue Aug  6 13:21:03 2013
New Revision: 42501
URL: http://svnweb.freebsd.org/changeset/doc/42501

Log:
  Give less open permissions in process accounting log example, discussed
  in forum thread http://forums.freebsd.org/showthread.php?t=41059.
  Remove filename and username attributes from userinput sections, other
  small fixes.
  
  Reviewed by:	trhodes

Modified:
  head/en_US.ISO8859-1/books/handbook/security/chapter.xml

Modified: head/en_US.ISO8859-1/books/handbook/security/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Aug  6 12:49:24 2013	(r42500)
+++ head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Aug  6 13:21:03 2013	(r42501)
@@ -3681,11 +3681,10 @@ VII. References <co id="co-ref"/></progr
       <para>Before using process accounting, it must be enabled using
 	the following commands:</para>
 
-      <screen>&prompt.root; <userinput>touch <filename>/var/account/acct</filename></userinput>
-
-&prompt.root; <userinput>accton <filename>/var/account/acct</filename></userinput>
-
-&prompt.root; <userinput>echo 'accounting_enable="YES"' &gt;&gt; <filename>/etc/rc.conf</filename></userinput></screen>
+      <screen>&prompt.root; <userinput>touch /var/account/acct</userinput>
+&prompt.root; <userinput>chmod 600 /var/account/acct</userinput>
+&prompt.root; <userinput>accton /var/account/acct</userinput>
+&prompt.root; <userinput>echo 'accounting_enable="YES"' &gt;&gt; /etc/rc.conf</userinput></screen>
 
       <para>Once enabled, accounting will begin to track information
 	such as <acronym>CPU</acronym> statistics and executed
@@ -3703,10 +3702,9 @@ VII. References <co id="co-ref"/></progr
 	<username>trhodes</username> on the <literal>ttyp1</literal>
 	terminal:</para>
 
-      <screen>&prompt.root; <userinput>lastcomm ls
-	<username>trhodes</username> ttyp1</userinput></screen>
+      <screen>&prompt.root; <userinput>lastcomm ls trhodes ttyp1</userinput></screen>
 
-      <para>Many other useful options exist and are explained in the
+      <para>Many other useful options exist and are explained in
 	&man.lastcomm.1;, &man.acct.5;, and &man.sa.8;.</para>
     </sect2>
   </sect1>
@@ -3764,7 +3762,7 @@ options         RCTL</programlisting>
 
     <para>The entire system will need rebuilt.  See
       <xref linkend="kernelconfig"/>, which will provide instructions
-      for the process.  Once this is complete, the
+      for the process.  Once this is complete,
       <command>rctl</command> may be used to set rules for the
       system.</para>