From owner-svn-doc-projects@FreeBSD.ORG Mon May 6 11:53:22 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id EB86FEBB; Mon, 6 May 2013 11:53:22 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id DCDA7EB3; Mon, 6 May 2013 11:53:22 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r46BrMS9069788; Mon, 6 May 2013 11:53:22 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r46BrMX7069787; Mon, 6 May 2013 11:53:22 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305061153.r46BrMX7069787@svn.freebsd.org> From: Dru Lavigne Date: Mon, 6 May 2013 11:53:22 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41554 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/install X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 May 2013 11:53:23 -0000 Author: dru Date: Mon May 6 11:53:22 2013 New Revision: 41554 URL: http://svnweb.freebsd.org/changeset/doc/41554 Log: First pass to cleanup this chapter: - &os; and "you" - dir tags and some (not all) acronyms - fixes broken URLs, grammos, typos, outdated info - removes 3.13.5 which assumes a boot floppy - removes references to deprecated utilities partition magic, xcopy, fdimage, doublespace - removes unrecommended tip in Q&A - removes 3.13.3 as floppies were covered earlier for pc98 Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/install/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/install/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/install/chapter.xml Mon May 6 11:34:28 2013 (r41553) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/install/chapter.xml Mon May 6 11:53:22 2013 (r41554) @@ -27,39 +27,40 @@ - Installing &os; 8.<replaceable>X</replaceable> and Earlier + Installing &os; 8.<replaceable>X</replaceable> Synopsis installation - FreeBSD is provided with a text-based, easy to use installation + &os; provides a text-based, easy to use installation program. &os; 9.0-RELEASE and later use the installation program - known as bsdinstall, with releases prior - to 9.0-RELEASE using sysinstall for - installation. This chapter describes the use of sysinstall - to install &os;. The use of bsdinstall + known as &man.bsdinstall.8; + while &os; 8.X uses + &man.sysinstall.8;. This chapter describes + how to use &man.sysinstall.8;. + The use of &man.bsdinstall.8; is covered in . After reading this chapter, you will know: - How to create the FreeBSD installation disks. + How to create the &os; installation media. - How FreeBSD refers to, and subdivides, your hard disks. + How &os; refers to and subdivides hard disks. - How to start sysinstall. + How to start &man.sysinstall.8;. - The questions sysinstall will ask - you, what they mean, and how to answer them. + The questions &man.sysinstall.8; asks, + what they mean, and how to answer them. @@ -68,19 +69,18 @@ Read the supported hardware list that shipped with the version - of FreeBSD you are installing, and verify that your hardware is + of &os; to install, and verify that the system's hardware is supported. In general, these installation instructions are written - for &i386; (PC compatible) architecture - computers. Where applicable, instructions specific to other - platforms will be listed. Although this - guide is kept as up to date as possible, you may find minor - differences between the installer and what is shown here. It is - suggested that you use this chapter as a general guide rather + for the &i386; and &os;/&arch.amd64; architectures. + Where applicable, instructions specific to other + platforms will be listed. There may be minor + differences between the installer and what is shown here. + This chapter should be used as a general guide rather than a literal installation manual. @@ -96,23 +96,24 @@ &os; version and the hardware architecture. A summary of this information is given in the following sections. - Depending on the method you choose to install &os;, you may - also need a floppy drive, a supported CDROM drive, and in some - case a network adapter. This will be covered by the . + Depending on the method chosen to install &os;, + a floppy drive, CDROM drive, or + network adapter may be needed. Instructions on how to + prepare the installation media can be found in + . &os;/&arch.i386; and &os;/&arch.pc98; Both &os;/&arch.i386; and &os;/&arch.pc98; require a 486 or - better processor and at least 24 MB of RAM. You will - need at least 150 MB of free hard drive space for the + better processor, at least 24 MB of RAM, and at + least 150 MB of free hard drive space for the most minimal installation. - In case of old configurations, most of time, getting - more RAM and more hard drive space is more important than - getting a faster processor. + In the case of older hardware, installing more RAM and + more hard drive space is often more important than + a faster processor. @@ -122,33 +123,32 @@ There are two classes of processors capable of running &os;/&arch.amd64;. The first are AMD64 processors, including the &amd.athlon;64, - &amd.athlon;64-FX, &amd.opteron; or better + &amd.athlon;64-FX, and &amd.opteron; or better processors. - The second class of processors that can use - &os;/&arch.amd64; includes those using the &intel; EM64T + The second class of processors + includes those using the &intel; EM64T architecture. Examples of these processors include the &intel; &core; 2 Duo, Quad, Extreme processor families, and the &intel; &xeon; 3000, 5000, and 7000 sequences of processors. - If you have a machine based on an nVidia nForce3 - Pro-150, you must use the BIOS setup to - disable the IO APIC. If you do not have an option to do - this, you will likely have to disable ACPI instead. There - are bugs in the Pro-150 chipset that we have not found a - workaround for yet. + If the machine is based on an nVidia nForce3 + Pro-150, the BIOS setup must be used to + disable the IO APIC. If this option does not exist, + disable ACPI instead as there + are bugs in the Pro-150 chipset. &os;/&arch.sparc64; - To install &os;/&arch.sparc64;, you will need a supported + To install &os;/&arch.sparc64;, use a supported platform (see ). - You will need a dedicated disk for &os;/&arch.sparc64;. It - is not possible to share a disk with another operating + A dedicated disk is needed for &os;/&arch.sparc64; as + it is not possible to share a disk with another operating system at this time. @@ -159,14 +159,14 @@ A list of supported hardware is provided with each &os; release in the &os; Hardware Notes. This document can usually be found in a file named HARDWARE.TXT, in - the top-level directory of a CDROM or FTP distribution or in - sysinstall's documentation menu. - It lists, for a given architecture, what hardware devices are + the top-level directory of a CDROM or FTP distribution, or in + &man.sysinstall.8;'s documentation menu. + It lists, for a given architecture, which hardware devices are known to be supported by each release of &os;. Copies of the supported hardware list for various releases and architectures can also be found on the Release - Information page of the &os; Web site. + Information page of the &os; website. @@ -174,28 +174,35 @@ Pre-installation Tasks - Inventory Your Computer + Inventory the Computer - Before installing &os; you should attempt to inventory the - components in your computer. The &os; installation routines will - show you the components (hard disks, network cards, CDROM drives, and - so forth) with their model number and manufacturer. &os; will also + Before installing &os; it is recommended to inventory the + components in the computer. The &os; installation routines + will show components such as hard disks, network cards, + and CDROM drives with their model number and manufacturer. + &os; will also attempt to determine the correct configuration for these devices, - which includes information about IRQ and IO port usage. Due to the - vagaries of PC hardware this process is not always completely - successful, and you may need to correct &os;'s determination of - your configuration. - - If you already have another operating system installed, such as - &windows; or Linux, it is a good idea to use the facilities provided - by those operating systems to see how your hardware is already - configured. If you are not sure what settings an expansion - card is using, you may find it printed on the card itself. Popular IRQ - numbers are 3, 5, and 7, and IO port addresses are normally written as - hexadecimal numbers, such as 0x330. + including information about IRQ and I/O port usage. Due + to the + vagaries of computer hardware, this process is not always + completely + successful, and &os; may need some manual + configuration. - We recommend you print or write down this information before - installing &os;. It may help to use a table, like this: + If another operating system is already installed, + use the facilities provided + by that operating systems to view the hardware configuration. + If the settings of an expansion + card are not obvious, check if they are printed on the + card itself. Popular IRQ + numbers are 3, 5, and 7, and I/O port addresses are normally + written as + hexadecimal numbers, such as 0x330. + + It is recommended to print or write down this information + before + installing &os;. It may help to use a table, as seen in this + example: Sample Device Inventory @@ -211,7 +218,7 @@ IRQ - IO port(s) + I/O port(s)Notes @@ -285,43 +292,44 @@
- Once the inventory of the components in your computer is - done, you have to check if they match the hardware - requirements of the &os; release you want to install. + Once the inventory of the components in the computer is + complete, check if it matches the hardware + requirements of the &os; release to install.
- Backup Your Data + Make a Backup - If the computer you will be installing &os; on contains - valuable data, then ensure you have it backed up, and that you have - tested the backups before installing &os;. The &os; - installation routine will prompt you before writing any - data to your disk, but once that process has started it cannot be + If the computer contains + valuable data, ensure it is backed up, and that the backup + has been + tested before installing &os;. The &os; + installer will prompt before writing any + data to disk, but once that process has started, it cannot be undone. Decide Where to Install &os; - If you want &os; to use your entire hard disk, then there is nothing - more to concern yourself with at this point — you can skip this + If &os; is to be installed on the entire hard disk, + skip this section. - However, if you need &os; to co-exist with other operating - systems then you need to have a rough understanding of how data is - laid out on the disk, and how this affects you. + However, if &os; will co-exist with other operating + systems, a rough understanding of how data is + laid out on the disk is useful. Disk Layouts for &os;/&arch.i386; - A PC disk can be divided into discrete chunks. These chunks are - called partitions. Since - &os; internally also has partitions, the naming - can become confusing very quickly, therefore these - disk chunks are referred to as disk slices or simply slices - in &os; itself. For example, the &os; utility - fdisk which operates on the PC disk partitions, + A PC disk can be divided into discrete chunks known as + partitions. Since + &os; also has partitions, naming + can quickly become confusing. Therefore, these + disk chunks are referred to as slices + in &os;. For example, the &os; version of + &man.fdisk.8; refers to slices instead of partitions. By design, the PC only supports four partitions per disk. These partitions are called primary partitions. To work around this @@ -335,74 +343,71 @@ a number used to identify the type of data on the partition. &os; partitions have the partition ID of 165. - In general, each operating system that you use will identify - partitions in a particular way. For example, &ms-dos;, and its - descendants, like &windows;, assign each primary and logical partition a + In general, each operating system will identify + partitions in a particular way. For example, + &windows;, assigns each primary and logical partition a drive letter, starting with C:. - &os; must be installed into a primary partition. &os; can - keep all its data, including any files that you create, on this one - partition. However, if you have multiple disks, then you can create a - &os; partition on all, or some, of them. When you install &os;, - you must have one partition available. This might be a blank - partition that you have prepared, or it might be an existing partition - that contains data that you no longer care about. - - If you are already using all the partitions on all your disks, then - you will have to free one of them for &os; using the tools - provided by the other operating systems you use (e.g., - fdisk on &ms-dos; or &windows;). - - If you have a spare partition then you can use that. However, you - may need to shrink one or more of your existing partitions - first. + &os; must be installed into a primary partition. If + there are multiple disks, a &os; + partition can be created + on all, or some, of them. When &os; is installed, at least + one partition must be available. This might be a blank + partition or it might be an existing partition whose + data can be overwritten. + + If all the partitions on all the disks are in use, + free one of them for &os; using the tools + provided by an existing operating system, such as &windows; + fdisk. + + If there is a spare partition, use that. If it is too + small, + shrink one or more existing partitions to create more + available space. A minimal installation of &os; takes as little as 100 MB of disk space. However, that is a very minimal install, - leaving almost no space for your own files. A more realistic minimum + leaving almost no space for files. A more realistic minimum is 250 MB without a graphical environment, and 350 MB or - more if you - want a graphical user interface. If you intend to install a lot of - third-party software as well, then you will need more space. - - You can use a commercial tool such as &partitionmagic;, - or a free tool such as GParted, - to resize your partitions and make space for - &os;. Both - &partitionmagic; and - GParted are known to work on - NTFS. GParted - is available on a number of Live CD Linux distributions, such as - SystemRescueCD. - - Problems have been reported resizing µsoft; Vista - partitions. Having a Vista installation CDROM handy when - attempting such an operation is recommended. As with all - such disk maintenance tasks, a current set of backups is - also strongly advised. + more for + a graphical user interface. If other + third-party software will be installed, + even more space is needed. + + Use a tool such as GParted + to resize the partitions and make space for + &os;. When resizing µsoft; partitions, having a + &windows; installation disc handy is recommended. As with all + disk maintenance tasks, a current set of backups is also + strongly advised. - Incorrect use of these tools can delete the data on your disk. - Be sure that you have recent, working backups before using - them. + Incorrect use of a shrinking tool can delete the data + on the disk. + Always have a recent, working backup before using this + type of tool. Using an Existing Partition Unchanged - Suppose that you have a computer with a single 4 GB disk + Consider a computer with a single 4 GB disk that - already has a version of &windows; installed, and you have split the - disk into two drive letters, C: and + already has a version of &windows; installed, where the + disk has been split into two drive letters, + C: and D:, each of which is 2 GB in size. - You have 1 GB of data on C:, and + There is 1 GB of data on C:, + and 0.5 GB of data on D:. - This means that your disk has two partitions on it, one per - drive letter. You can copy all your existing data from + This disk has two partitions, one per + drive letter. Copy all existing data from D: to C:, which will free up the second partition, ready for &os;. @@ -410,25 +415,28 @@ Shrinking an Existing Partition - Suppose that you have a computer with a single 4 GB disk - that already has a version of &windows; installed. When you installed - &windows; you created one large partition, giving you a - C: drive that is 4 GB in size. You are - currently using 1.5 GB of space, and want &os; to have 2 GB + Consider a computer with a single 4 GB disk + that already has a version of &windows; installed. When + &windows; was installed, it created one large partition, + a + C: drive that is 4 GB in size. + Currently, 1.5 GB of space is used, and &os; should + have 2 GB of space. - In order to install &os; you will need to either: + In order to install &os;, either: - Backup your &windows; data, and then reinstall &windows;, + Backup the &windows; data and then reinstall + &windows;, asking for a 2 GB partition at install time. - Use one of the tools such as &partitionmagic;, - described above, to shrink your &windows; - partition. + Use a tool + to shrink the &windows; + partition. @@ -437,21 +445,24 @@ - Collect Your Network Configuration Details + Collect the Network Configuration Details - If you intend to connect to a network as part of your &os; - installation (for example, if you will be installing from an FTP + Before + installing from an FTP site or an - NFS server), then you need to know your network configuration. You - will be prompted for this information during the installation so that - &os; can connect to the network to complete the install. + NFS server, make note of the network + configuration. The + installer + will prompt for this information so that + it can connect to the network to complete the + installation. Connecting to an Ethernet Network or Cable/DSL Modem - If you connect to an Ethernet network, or you have an Internet - connection using an Ethernet adapter via cable or DSL, then you will - need the following information: + If using an Ethernet network or an Internet + connection using an Ethernet adapter via cable or DSL, the + following information is needed: @@ -475,32 +486,35 @@ - If you do not know this information, then ask your system - administrator or service provider. They may say that this - information is assigned automatically, using - DHCP. If so, make a note of this. + If this information is unknown, ask the system + administrator or service provider. Make note if this + information is assigned automatically using + DHCP. Connecting Using a Modem - If you dial up to an ISP using a regular modem then you can - still install &os; over the Internet, it will just take a very + If using a dialup modem, + &os; can still be installed over the Internet, it will just + take a very long time. You will need to know: - The phone number to dial for your ISP + The phone number to dial the Internet Service + Provider (ISP) - The COM: port your modem is connected to + The COM: port the modem is connected to - The username and password for your ISP account + The username and password for the + ISP account @@ -508,28 +522,30 @@ Check for &os; Errata - Although the &os; project strives to ensure that each release + Although the &os; Project strives to ensure that each + release of &os; is as stable as possible, bugs do occasionally creep into - the process. On very rare occasions those bugs affect the + the process. On rare occasions those bugs affect the installation process. As these problems are discovered and fixed, they are noted in the &os; Errata, - which is found on the &os; web site. You - should check the errata before installing to make sure that there are - no late-breaking problems which you should be aware of. + which is found on the &os; website. + Check the errata before installing to make sure that there are + no late-breaking problems to be aware of. - Information about all the releases, including the errata for each + Information about all releases, including the errata for + each release, can be found on the release information section of the &os; web site. + url="&url.base;/index.html">&os; website. Obtain the &os; Installation Files - The &os; installation process can install &os; from files + The &os; installer can install &os; from files located in any of the following places: @@ -548,11 +564,7 @@ - A SCSI or QIC tape - - - - Floppy disks + Floppy disks (&os;/&arch.pc98; only) @@ -560,8 +572,8 @@ Network - An FTP site, going through a firewall, or using an HTTP proxy, - as necessary + An FTP site through a firewall or using an HTTP + proxy @@ -573,14 +585,14 @@ - If you have purchased &os; on CD or DVD then you already have - everything you need, and should proceed to the next section - (). + If installing from a purchased &os; CD/DVD, + skip ahead to + . - If you have not obtained the &os; installation files you should + To obtain the &os; installation files, skip ahead to which explains how - to prepare to install &os; from any of the above. After reading - that section, you should come back here, and read on to + to prepare the installation media. After reading + that section, come back here and read on to . @@ -588,18 +600,19 @@ Prepare the Boot Media The &os; installation process is started by booting the - computer into the &os; installer—it is not a program you run + computer into the &os; installer. It is not a program that + can be run within another operating system. The computer normally boots using the operating system installed on the hard disk, but it can also be configured to boot from a CDROM or from a USB disk. - If you have &os; on CDROM or DVD (either one you purchased - or you prepared yourself), and your computer allows you to boot from - the CDROM or DVD (typically a BIOS option called Boot - Order or similar), then you can skip this section. The - &os; CDROM and DVD images are bootable and can be used to install + If installing from a CD/DVD to a + computer whose BIOS supports booting from + the CD/DVD, skip this section. The + &os; CD/DVD images are bootable and can be used to + install &os; without any other special preparation. @@ -611,36 +624,38 @@ Acquire the Memory Stick Image Memory stick images for - &os; 8.X and earlier can be downloaded from + &os; 8.X can be downloaded + from the ISO-IMAGES/ directory at ftp://ftp.FreeBSD.org/pub/FreeBSD/releases/arch/ISO-IMAGES/version/&os;-version-RELEASE-arch-memstick.img. Replace arch and version with the - architecture and the version number which you want to - install, respectively. For example, the memory stick + architecture and the version number to + install. For example, the memory stick images for &os;/&arch.i386; &rel2.current;-RELEASE are available from . A different directory path is used for - &os; 9.0-RELEASE and later versions. Details of - download and installation of &os; 9.0-RELEASE and - later is covered in . + &os; 9.0-RELEASE and later versions. How to + download and install + &os; 9.X + is covered in . The memory stick image has a .img extension. The ISO-IMAGES/ directory - contains a number of different images, and the one you - will need to use will depend on the version of &os; you - are installing, and in some cases, the hardware you are - installing to. + contains a number of different images and the one to + use depends on the version of &os; and the + type of media supported by the hardware being installed + to. Before proceeding, back up the - data you currently have on your USB stick, as this + data on the USB stick, as this procedure will erase it. @@ -653,29 +668,32 @@ The example below - lists /dev/da0 as the - target device where the image will be written. Be very careful - that you have the correct device as the output target, or you - may destroy your existing data. + uses /dev/da0 + as the + target device where the image will be written. Be + very careful + to use the correct device as the output target, as + the data on that device will be destroyed. Writing the Image with &man.dd.1; The .img file - is not a regular file you copy to the + is not a regular file that can + just be copied to the memory stick. It is an image of the complete contents of the - disk. This means that you cannot simply - copy files from one disk to another. Instead, you must use - &man.dd.1; to write the image directly to the disk: + disk. This means that + &man.dd.1; must be used to write the image directly to + the disk: &prompt.root; dd if=&os;-&rel2.current;-RELEASE-&arch.i386;-memstick.img of=/dev/da0 bs=64k If an Operation not permitted error is displayed, make certain that the target device - is not in use, mounted, or being automounted by some - well-intentioned utility program. Then try + is not in use, mounted, or being automounted by + another program. Then try again. @@ -684,8 +702,10 @@ Using &windows; To Write the Image - Make sure you use the correct drive letter as the output - target, or you may overwrite and destroy existing data. + Make sure to use the correct drive letter as the + output + target, as this command will overwrite and destroy + any existing data on the specified device. @@ -740,29 +760,32 @@ kern*. - Your FTP program must use binary mode - to download these disk images. Some web browsers have been - known to use text (or - ASCII) mode, which will be apparent if you - cannot boot from the disks. + The FTP program must use binary + mode + to download these disk images. Some web browsers + use text or + ASCII mode, which will be apparent + if + the disks are not bootable. Prepare the Floppy Disks - Prepare one floppy disk per image file you had to - download. It is imperative that these disks are free from - defects. The easiest way to test this is to format the disks - for yourself. Do not trust pre-formatted floppies. The format + Prepare one floppy disk per downloaded image file. + It is imperative that these disks are free from + defects. The easiest way to test this is to reformat the + disks. + Do not trust pre-formatted floppies. The format utility in &windows; will not tell about the presence of bad blocks, it simply marks them as bad - and ignores them. It is advised that you use brand new - floppies if choosing this installation route. + and ignores them. It is advised to use brand new + floppies. - If you try to install &os; and the installation - program crashes, freezes, or otherwise misbehaves, one of + If the installer + crashes, freezes, or otherwise misbehaves, one of the first things to suspect is the floppies. Write the floppy image files to new disks and try again. @@ -773,47 +796,44 @@ Write the Image Files to the Floppy Disks The .flp files are - not regular files you copy to the disk. + not regular files that can be copied + to the disk. They are images of the complete contents of the - disk. This means that you cannot simply - copy files from one disk to another. - Instead, you must use specific tools to write the + disk. + Specific tools must be used to write the images directly to the disk. DOS - If you are creating the floppies on a computer running - &ms-dos; / &windows;, then we provide a tool to do - this called fdimage. - - If you are using the floppies from the CDROM, and your - CDROM is the E: drive, then you would - run this: + &os; provides a tool called + rawrite for creating the floppies on a + computer running + &windows;. This tool can be downloaded from + ftp://ftp.FreeBSD.org/pub/FreeBSD/releases/pc98/ + version-RELEASE/tools/ + on the &os; FTP site. Download this tool, insert a + floppy, then specify the filename to write to the floppy + drive: - E:\> tools\fdimage floppies\boot.flp A: + C:\> rawrite boot.flp A: Repeat this command for each .flp file, replacing the floppy disk each time, being sure to label - the disks with the name of the file that you copied to them. - Adjust the command line as necessary, depending on where you have - placed the .flp files. If you do not have - the CDROM, then fdimage can be downloaded from - the tools - directory on the &os; FTP site. - - If you are writing the floppies on a &unix; system (such as - another &os; system) you can use the &man.dd.1; command to - write the image files directly to disk. On &os;, you would + the disks with the name of the file. + Adjust the command line as necessary, depending on where + the .flp files are located. + + When writing the floppies on a &unix;-like system, + such as + another &os; system, use &man.dd.1; to + write the image files directly to disk. On &os;, run: &prompt.root; dd if=boot.flp of=/dev/fd0 On &os;, /dev/fd0 refers to the - first floppy disk (the A: drive). - /dev/fd1 would be the - B: drive, and so on. Other &unix; + first floppy disk. Other &unix; variants might have different names for the floppy disk - devices, and you will need to check the documentation for the + device, so check the documentation for the system as necessary. @@ -826,8 +846,9 @@ Starting the Installation - By default, the installation will not make any changes to your - disk(s) until you see the following message: + By default, the installer will not make any changes to + the + disk(s) until after the following message: Last Chance: Are you SURE you want continue the installation? @@ -836,10 +857,12 @@ STRONGLY ENCOURAGE YOU TO MAKE PROPER BA We can take no responsibility for lost disk contents! - The install can be exited at any time prior to the final - warning without changing the contents of the hard drive. If you are - concerned that you have configured something incorrectly you can just - turn the computer off before this point, and no damage will be + The install can be exited at any time prior to this final + warning without changing the contents of the hard drive. If + there is a + concern that something is configured incorrectly, + turn the computer off before this point, and no damage + will be done. @@ -851,10 +874,6 @@ We can take no responsibility for lost d - Start with your computer turned off. - - - Turn on the computer. As it starts it should display an option to enter the system set up menu, or BIOS, commonly reached by keys like F2, F10, @@ -863,9 +882,10 @@ We can take no responsibility for lost d Alt S . Use whichever keystroke is indicated on screen. In - some cases your computer may display a graphic while it starts. + some cases the computer may display a graphic while it + starts. Typically, pressing Esc will dismiss the graphic - and allow you to see the necessary messages. + and display the boot messages. @@ -875,11 +895,10 @@ We can take no responsibility for lost d Floppy, CDROM, First Hard Disk, and so on. - If you are booting from the CDROM then make sure that - the CDROM is selected. If you are booting from a USB disk or - a floppy disk then - make sure that is selected instead. In case of doubt, you - should consult the manual that came with your computer, and/or its + If booting from the CD/DVD, make sure that + the CDROM drive is selected. If booting from a USB disk, + make sure that it is selected instead. When in doubt, + consult the manual that came with the computer or its motherboard. Make the change, then save and exit. The computer should now @@ -887,12 +906,13 @@ We can take no responsibility for lost d - If you prepared a bootable USB stick, as described in - , then plug in your USB + If using a prepared a bootable USB + stick, as described in + , plug in the USB stick before turning on the computer. - If you are booting from CDROM, then you will need to turn on - the computer, and insert the CDROM at the first + If booting from CD/DVD, turn on + the computer, and insert the CD/DVD at the first opportunity. @@ -904,32 +924,33 @@ We can take no responsibility for lost d installer. - If your computer starts up as normal and loads your existing + If the computer starts up as normal and loads the + existing operating system, then either: The disks were not inserted early enough in the boot - process. Leave them in, and try restarting your + process. Leave them in, and try restarting the computer. - The BIOS changes earlier did not work correctly. You - should redo that step until you get the right option. + The BIOS changes did not work correctly. + Redo that step until the right option is + selected. - Your particular BIOS does not support booting from + That particular BIOS does not support booting from the desired media. *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-projects@FreeBSD.ORG Tue May 7 10:02:49 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 4EC442E1; Tue, 7 May 2013 10:02:49 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 4137DD30; Tue, 7 May 2013 10:02:49 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r47A2nbW041707; Tue, 7 May 2013 10:02:49 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r47A2nBT041706; Tue, 7 May 2013 10:02:49 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305071002.r47A2nBT041706@svn.freebsd.org> From: Gabor Kovesdan Date: Tue, 7 May 2013 10:02:49 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41558 - projects/xml-tools/share/mk X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 10:02:49 -0000 Author: gabor Date: Tue May 7 10:02:48 2013 New Revision: 41558 URL: http://svnweb.freebsd.org/changeset/doc/41558 Log: - Work around overflowing images Modified: projects/xml-tools/share/mk/doc.docbook.mk Modified: projects/xml-tools/share/mk/doc.docbook.mk ============================================================================== --- projects/xml-tools/share/mk/doc.docbook.mk Tue May 7 06:28:47 2013 (r41557) +++ projects/xml-tools/share/mk/doc.docbook.mk Tue May 7 10:02:48 2013 (r41558) @@ -453,6 +453,9 @@ ${DOC}.tex: ${SRCS} ${LOCAL_IMAGES_EPS} ${DOC}.parsed.xml ${JADE} -V tex-backend ${PRINTOPTS} \ ${JADEOPTS} -t tex -o ${.TARGET} ${XMLDECL} ${DOC}.parsed.xml + ${SED} -i '' -e 's|{1}\\def\\ScaleY%|{0.5}\\def\\ScaleY%|g' \ + -e 's|{1}\\def\\EntitySystemId%|{0.5}\\def\\EntitySystemId%|g' \ + ${.TARGET} .if !target(${DOC}.dvi) ${DOC}.dvi: ${DOC}.tex ${LOCAL_IMAGES_EPS} From owner-svn-doc-projects@FreeBSD.ORG Tue May 7 10:20:26 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 66588646; Tue, 7 May 2013 10:20:26 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 56D15DED; Tue, 7 May 2013 10:20:26 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r47AKQBu047136; Tue, 7 May 2013 10:20:26 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r47AKKSx047093; Tue, 7 May 2013 10:20:20 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305071020.r47AKKSx047093@svn.freebsd.org> From: Gabor Kovesdan Date: Tue, 7 May 2013 10:20:20 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41559 - in projects/xml-tools: de_DE.ISO8859-1/share/xml en_US.ISO8859-1/articles en_US.ISO8859-1/articles/committers-guide en_US.ISO8859-1/articles/cvsup-advanced en_US.ISO8859-1/arti... X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 10:20:26 -0000 Author: gabor Date: Tue May 7 10:20:20 2013 New Revision: 41559 URL: http://svnweb.freebsd.org/changeset/doc/41559 Log: - MFH Deleted: projects/xml-tools/en_US.ISO8859-1/articles/cvsup-advanced/ projects/xml-tools/fr_FR.ISO8859-1/articles/cvsup-advanced/ projects/xml-tools/ru_RU.KOI8-R/articles/cvsup-advanced/ Modified: projects/xml-tools/de_DE.ISO8859-1/share/xml/news.xml projects/xml-tools/en_US.ISO8859-1/articles/Makefile projects/xml-tools/en_US.ISO8859-1/articles/committers-guide/article.xml projects/xml-tools/en_US.ISO8859-1/articles/p4-primer/article.xml projects/xml-tools/en_US.ISO8859-1/articles/portbuild/article.xml projects/xml-tools/en_US.ISO8859-1/books/developers-handbook/testing/chapter.xml projects/xml-tools/en_US.ISO8859-1/books/faq/book.xml projects/xml-tools/en_US.ISO8859-1/books/handbook/geom/chapter.xml projects/xml-tools/en_US.ISO8859-1/books/handbook/mirrors/chapter.xml projects/xml-tools/en_US.ISO8859-1/books/handbook/printing/chapter.xml projects/xml-tools/en_US.ISO8859-1/books/porters-handbook/book.xml projects/xml-tools/en_US.ISO8859-1/htdocs/cgi/man.cgi projects/xml-tools/en_US.ISO8859-1/htdocs/cgi/monthly.cgi projects/xml-tools/en_US.ISO8859-1/htdocs/community/mailinglists.xml projects/xml-tools/en_US.ISO8859-1/htdocs/java/index.xml projects/xml-tools/en_US.ISO8859-1/htdocs/java/news.xml projects/xml-tools/en_US.ISO8859-1/htdocs/news/2012-compromise.xml projects/xml-tools/en_US.ISO8859-1/htdocs/releases/index.xml projects/xml-tools/en_US.ISO8859-1/htdocs/security/reporting.xml projects/xml-tools/en_US.ISO8859-1/share/xml/mailing-lists.ent projects/xml-tools/fr_FR.ISO8859-1/articles/Makefile projects/xml-tools/ja_JP.eucJP/htdocs/releases/index.xml projects/xml-tools/ja_JP.eucJP/htdocs/security/reporting.xml (contents, props changed) projects/xml-tools/ja_JP.eucJP/share/xml/news.xml projects/xml-tools/mn_MN.UTF-8/books/handbook/geom/chapter.xml projects/xml-tools/ru_RU.KOI8-R/articles/Makefile projects/xml-tools/share/pgpkeys/itetcu.key projects/xml-tools/share/xml/events2013.xml Directory Properties: projects/xml-tools/ (props changed) projects/xml-tools/de_DE.ISO8859-1/ (props changed) projects/xml-tools/en_US.ISO8859-1/ (props changed) projects/xml-tools/fr_FR.ISO8859-1/ (props changed) projects/xml-tools/ja_JP.eucJP/ (props changed) projects/xml-tools/mn_MN.UTF-8/ (props changed) projects/xml-tools/ru_RU.KOI8-R/ (props changed) projects/xml-tools/share/ (props changed) Modified: projects/xml-tools/de_DE.ISO8859-1/share/xml/news.xml ============================================================================== --- projects/xml-tools/de_DE.ISO8859-1/share/xml/news.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/de_DE.ISO8859-1/share/xml/news.xml Tue May 7 10:20:20 2013 (r41559) @@ -4,7 +4,7 @@ \n$contents"; + $contents = "\n$contents"; if (!$errors) { Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/community/mailinglists.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/community/mailinglists.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/community/mailinglists.xml Tue May 7 10:20:20 2013 (r41559) @@ -58,9 +58,9 @@ or WWW.
  • Hungarian -- bsd@hu.FreeBSD.org, Administration - or Search.
  • + href="mailto:bsd@lista.bsd.hu">bsd@lista.bsd.hu, Administration + or Search.
  • Indonesian -- id-freebsd-subscribe@egroups.com
  • Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/java/index.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/java/index.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/java/index.xml Tue May 7 10:20:20 2013 (r41559) @@ -31,7 +31,7 @@

    Further information about downloading the unsupported binaries is available from the - FreeBSD + FreeBSD Foundation &java; Downloads page.

    News

    Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/java/news.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/java/news.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/java/news.xml Tue May 7 10:20:20 2013 (r41559) @@ -280,7 +280,7 @@ 1.6 and JRE 1.6. For more details, see the Foundation newsletter and the download + href="http://www.freebsdfoundation.org/java">download page.

    @@ -473,7 +473,7 @@ 1.5 and JRE 1.5. For more details, see the press release and download + href="http://www.freebsdfoundation.org/java">download page.

    Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/news/2012-compromise.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/news/2012-compromise.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/news/2012-compromise.xml Tue May 7 10:20:20 2013 (r41559) @@ -62,6 +62,7 @@ +

    Update: April 30th, 2013

    + +

    Port managers and cluster administrators have completed the + restoration of binary package building in the last few weeks. + This has brought us back the continuous updates for the old-style + binary packages on the 8.x and 9.x -STABLE branches. Note that, + as beneficial consequences, Release Candidate builds for the 8.4 + release cycle can now include binary packages on the install + media, and the Project was able to add the missing binary packages + retroactively for 9.1-RELEASE on i386 and amd64 platforms.

    + +

    Port managers are currently working on introducing new-style (as + known as pkgng) binary packages in the coming months, + please check the + &os; ports announcements list for further gradual status + updates.

    + +

    This is planned to be the last status update to this page. An + official announcement will be sent to the + &os; announcements mailing list with the further details + soon.

    +

    Update: March 23rd, 2013

    Port managers have successfully restored some of the Project's @@ -85,12 +110,6 @@ preparations required for providing binary packages for the upcoming 8.4 and further releases.

    -

    Unless there are any other major changes, this is planned to be - the last status update to this page. An email will be sent to - the - FreeBSD announcements mailing list when the package build - infrastructure is online and packages are once again available.

    -

    Update: March 3rd, 2013

    Redports underwent a full security audit, and as a result could Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/releases/index.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/releases/index.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/releases/index.xml Tue May 7 10:20:20 2013 (r41559) @@ -97,7 +97,7 @@

    Complete historical information about the release date, the classification type, and the effective End-Of-Life (EOL) for these releases may be found on the Unsupported + href="&base;/security/unsupported.html">Unsupported Releases section of the FreeBSD Security Information page.

    Modified: projects/xml-tools/en_US.ISO8859-1/htdocs/security/reporting.xml ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/htdocs/security/reporting.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/htdocs/security/reporting.xml Tue May 7 10:20:20 2013 (r41559) @@ -20,8 +20,8 @@
  • How and where to report a FreeBSD security issue
  • Information about the FreeBSD Security Officer
  • Information handling policies
  • -
  • Supported FreeBSD Releases
  • -
  • Unsupported FreeBSD Releases
  • +
  • Supported FreeBSD Releases
  • +
  • Unsupported FreeBSD Releases
  • Modified: projects/xml-tools/en_US.ISO8859-1/share/xml/mailing-lists.ent ============================================================================== --- projects/xml-tools/en_US.ISO8859-1/share/xml/mailing-lists.ent Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/en_US.ISO8859-1/share/xml/mailing-lists.ent Tue May 7 10:20:20 2013 (r41559) @@ -86,10 +86,6 @@ CTM announcements"> ctm-announce"> - -CTM distribution of CVS files"> -ctm-cvs-cur"> - CTM 4-STABLE src branch distribution mailing list"> ctm-src-4"> Modified: projects/xml-tools/fr_FR.ISO8859-1/articles/Makefile ============================================================================== --- projects/xml-tools/fr_FR.ISO8859-1/articles/Makefile Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/fr_FR.ISO8859-1/articles/Makefile Tue May 7 10:20:20 2013 (r41559) @@ -11,7 +11,6 @@ SUBDIR+= committers-guide SUBDIR+= contributing SUBDIR+= contributing-ports SUBDIR+= contributors -SUBDIR+= cvsup-advanced SUBDIR+= explaining-bsd SUBDIR+= filtering-bridges SUBDIR+= fonts Modified: projects/xml-tools/ja_JP.eucJP/htdocs/releases/index.xml ============================================================================== --- projects/xml-tools/ja_JP.eucJP/htdocs/releases/index.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/ja_JP.eucJP/htdocs/releases/index.xml Tue May 7 10:20:20 2013 (r41559) @@ -5,7 +5,7 @@ ]> - + @@ -97,7 +97,7 @@

    ¤³¤ì¤Þ¤Ç¤Î¥ê¥ê¡¼¥¹¤Î¥ê¥ê¡¼¥¹Æü¡¢Ê¬Îà¡¢Êݼ齪λÆü (End-Of-Life (EOL)) ¤Î´°Á´¤Ê¾ðÊó¤Ï¡¢FreeBSD ¥»¥­¥å¥ê¥Æ¥£¾ðÊó ¤Î - ¥µ¥Ý¡¼¥È¤¬½ªÎ»¤·¤¿¥ê¥ê¡¼¥¹ + ¥µ¥Ý¡¼¥È¤¬½ªÎ»¤·¤¿¥ê¥ê¡¼¥¹ ¤Ë¤Þ¤È¤á¤é¤ì¤Æ¤¤¤Þ¤¹¡£

      Modified: projects/xml-tools/ja_JP.eucJP/htdocs/security/reporting.xml ============================================================================== Binary file (source and/or target). No diff available. Modified: projects/xml-tools/ja_JP.eucJP/share/xml/news.xml ============================================================================== --- projects/xml-tools/ja_JP.eucJP/share/xml/news.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/ja_JP.eucJP/share/xml/news.xml Tue May 7 10:20:20 2013 (r41559) @@ -20,7 +20,7 @@ the contents of will be preferred over <p>. $FreeBSD$ - Original revision: r41495 + Original revision: r41524 --> <news> <cvs:keyword xmlns:cvs="http://www.FreeBSD.org/XML/CVS"> @@ -34,6 +34,23 @@ <name>4</name> <day> + <name>29</name> + + <event> + <title>¿· &os; Foundation ¥Æ¥¯¥Ë¥«¥ë¥¹¥¿¥Ã¥Õ: Edward + Tomasz Napierała + +

      The &os; Foundation ¤Ï¡¢ + Edward Tomasz Napierała ¤¬Æó¿ÍÌܤΥƥ¯¥Ë¥«¥ë¥¹¥¿¥Ã¥Õ¤Ë²Ã¤ï¤Ã¤¿¤³¤È¤ò¤ªÃΤ餻¤·¤Þ¤¹¡£ + ¤³¤ì¤Ï¡¢2013 ǯ¤Ë Foundation + ¤¬·Ñ³¤·¤Æ¹Ô¤Ã¤Æ¤¤¤ë¥¹¥¿¥Ã¥Õ¤Ø¤ÎÅê»ñ¤Ë¤è¤ë¤â¤Î¤Ç¤¹¡£

      + +

      ³¤­¤òÆɤà

      + + + + 24 Modified: projects/xml-tools/mn_MN.UTF-8/books/handbook/geom/chapter.xml ============================================================================== --- projects/xml-tools/mn_MN.UTF-8/books/handbook/geom/chapter.xml Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/mn_MN.UTF-8/books/handbook/geom/chapter.xml Tue May 7 10:20:20 2013 (r41559) @@ -2,7 +2,7 @@ @@ -44,10 +44,10 @@ role="Redundant Array of Inexpensive Disks">RAID Ñ…Ñнагч Ñ…ÑÑ€ÑгÑлүүдийг багтаадаг. Ð­Ð½Ñ Ð±Ò¯Ð»Ñг нь I/O, доор нь байгаа дÑд ÑиÑтем, ÑÑвÑл кодыг GEOM Ñ…ÑрхÑн зохицуулж ÑÑвÑл Ñ…Ñнадаг талаар гүнзгий - Ñ…ÑлÑлцÑхгүй. ЭнÑÑ…Ò¯Ò¯ мÑдÑÑлÑл нь &man.geom.4; гарын авлагын Ñ…ÑƒÑƒÐ´Ð°Ñ Ð±Ð¾Ð»Ð¾Ð½ - төрөл бүрийн SEE ALSO баримтуудын туÑламжтай хангагддаг. Ð‘Ð°Ñ ÑÐ½Ñ Ð±Ò¯Ð»Ñг нь - RAID тохиргоонуудын дÑлгÑÑ€Ñнгүй заавар биш юм. - Зөвхөн GEOM-дÑмжигдÑÑн RAID ангиллуудын талаар + Ñ…ÑлÑлцÑхгүй. ЭнÑÑ…Ò¯Ò¯ мÑдÑÑлÑл нь &man.geom.4; болон + төрөл бүрийн SEE ALSO баримтуудын туÑламжтай хангагддаг. Ð‘Ð°Ñ ÑÐ½Ñ Ð±Ò¯Ð»Ñг нь + RAID тохиргоонуудын дÑлгÑÑ€Ñнгүй заавар биш бөгөөд + зөвхөн GEOM-дÑмжигдÑÑн RAID ангиллуудын талаар Ñ…ÑлÑлцÑÑ… болно. Ð­Ð½Ñ Ð±Ò¯Ð»Ð³Ð¸Ð¹Ð³ уншÑаны дараа, та дараах зүйлÑийг мÑдÑÑ… болно: @@ -77,13 +77,13 @@ - &os; диÑк төхөөрөмжүүдийг Ñ…ÑрхÑн үздÑг талаар ойлгох - (). + &os; диÑк төхөөрөмжүүдийг + Ñ…ÑрхÑн үздÑг талаар ойлгох. - Ð¨Ð¸Ð½Ñ &os; цөм Ñ…ÑрхÑн тохируулж Ñуулгах талаар мÑдÑÑ… - (). + Ð¨Ð¸Ð½Ñ &os; цөм + Ñ…ÑрхÑн тохируулж Ñуулгах талаар мÑдÑÑ…. @@ -132,7 +132,7 @@ Судал Ò¯Ò¯ÑгÑÑ… - Судал Ò¯Ò¯ÑгÑÑ… нь Ñ…Ñд Ñ…ÑдÑн диÑкнүүдийг нÑг ÑзлÑхүүн болгодог арга юм. + Судал Ò¯Ò¯ÑгÑÑ… нь Ñ…Ñд Ñ…ÑдÑн диÑкнүүдийг нÑгтгÑж нÑг ÑзлÑхүүн болгодог. Олон тохиолдолд ÑÐ½Ñ Ð½ÑŒ тоног төхөөрөмжийн Ñ…Ñнагчуудыг ашиглан хийгддÑг. GEOM дÑд ÑиÑтем нь диÑк Ñудал Ò¯Ò¯ÑгÑÑ… гÑж Ð±Ð°Ñ Ð½ÑрлÑгддÑг RAID0-д зориулÑан програмыг хангаж өгдөг. @@ -211,9 +211,8 @@ Done. Ð­Ð½Ñ Ñудал Ò¯Ò¯ÑгÑÑÑн файлын ÑиÑтемдÑÑ Ð°Ñ‡Ð°Ð°Ð»Ð°Ñ… үед автоматаар холболт хийхийн тулд ÑзлÑхүүний мÑдÑÑллийг /etc/fstab файлд - хийгÑÑÑ€Ñй. For this purpose, a permanent mount - point, named stripe, is - created: + хийгÑÑÑ€Ñй. Ð­Ð½Ñ Ð¶Ð¸ÑˆÑÑн дÑÑÑ€ stripe + гÑÑÑн байнгын холбох цÑгийг Ò¯Ò¯ÑгÑж байна: &prompt.root; mkdir /stripe &prompt.root; echo "/dev/stripe/st0a /stripe ufs rw 2 2" \ @@ -388,7 +387,7 @@ Done. &prompt.root; newfs -U /dev/mirror/gm0s1e &prompt.root; newfs -U /dev/mirror/gm0s1f - Эх диÑк (ada0) дÑÑрх файлын + Эх диÑк ada0 дÑÑрх файлын ÑиÑтемийг толин туÑгал руу &man.dump.8; ба &man.restore.8; тушаалыг ашиглан хуулж болно. @@ -508,7 +507,7 @@ Done. заÑварлах Ñ…ÑÑ€ÑгтÑй. Уг процедурыг дараа тайлбарлах болно. Ðль ч тохиолдолд анхдагч диÑк дÑÑрх хуваалтын - Ñ…Ò¯ÑнÑгтүүдийг ÑÑ…Ñлж хуулах Ñ…ÑÑ€ÑгтÑй. Үүнийг &man.gpart.8; + Ñ…Ò¯ÑнÑгтүүдийг ÑÑ…Ñлж хуулах Ñ…ÑÑ€ÑгтÑй бөгөөд &man.gpart.8; backup ба restore дÑд тушаалуудыг ашиглан гүйцÑтгÑнÑ. @@ -533,9 +532,9 @@ BSD 8 6 freebsd-ufs 130023424 838860800 7 freebsd-ufs 968884224 984640881 - Ð¥ÑÑ€Ñв &man.gpart.8; show тушаалын - гаралтад бүтÑн диÑк ашиглагдаж байгаа бол ÑдгÑÑÑ€ хуваалтын - Ñ…Ò¯ÑнÑгтүүд дÑÑрх багтаамжийг нÑг Ñектороор багаÑгах Ñ…ÑÑ€ÑгтÑй. + Ð¥ÑÑ€Ñв gpart show тушаал диÑкний төгÑгөлд + зай байхгүй байгааг харуулж байгаа бол зүÑмÑл болон Ñүүлийн хуваалтыг + нÑг Ñектороор багаÑгах Ñ…ÑÑ€ÑгтÑй. ЗүÑмÑл болон Ñүүлийн хуваалтын зайг нÑгÑÑÑ€ багаÑган хоёр файлыг заÑварлах Ñ…ÑÑ€ÑгтÑй. ЭдгÑÑÑ€ нь жагÑаалт бүрийн Ñүүлийн тоонууд юм. @@ -557,12 +556,12 @@ BSD 8 байгаа бол ÑдгÑÑÑ€ хоёр файлыг заÑварлалгүйгÑÑÑ€ ашиглаж болно. Одоо хуваалтын Ñ…Ò¯ÑнÑгтийг - mirror/gm0 руу ÑÑргÑÑнÑ. + mirror/gm0 руу ÑÑргÑÑнÑ: &prompt.root; gpart restore mirror/gm0 < table.ada0 &prompt.root; gpart restore mirror/gm0s1 < table.ada0s1 - &man.gpart.8; show тушаалаар + gpart show тушаалаар хуваалтын Ñ…Ò¯ÑнÑгтийг шалгана. Ð­Ð½Ñ Ð¶Ð¸ÑˆÑÑ Ð½ÑŒ gm0s1a-г /, gm0s1d-г /var, @@ -717,9 +716,9 @@ mirror/gm0 COMPLETE ada1 (ACTIVE) BIOS тохиргоог шинÑÑÑ€ толин туÑгал болгоÑон диÑкнүүдийн аль нÑгнÑÑÑ Ð°Ñ‡Ð°Ð°Ð»Ð°Ñ…Ð°Ð°Ñ€ болгож тохируулах - Ñ…ÑÑ€ÑгтÑй байж магадгүй юм. Ðль ч диÑкийг ачаалахад - ашиглаж болно. Толин туÑгалын нÑг Ñ…ÑÑÑг ÑƒÑ‡Ñ€Ð°Ð°Ñ Ñ‚ÑдгÑÑÑ€ нь - ижил өгөгдөлтÑй байдаг. + Ñ…ÑÑ€ÑгтÑй байж магадгүй юм. Толин туÑгалын нÑг Ñ…ÑÑÑг ÑƒÑ‡Ñ€Ð°Ð°Ñ Ñ‚ÑдгÑÑÑ€ нь + ижил өгөгдөлтÑй байдаг бөгөөд аль ч диÑкийг ачаалахад + ашиглаж болно. @@ -753,7 +752,7 @@ mountroot> geom_mirror модулийг /boot/loader.conf-Ñ‚ оруулж дуудахаа мартÑан бол ÑÐ½Ñ Ð°Ñуудал гарна. Үүнийг заÑахын тулд - &os;-9 ÑÑвÑл түүнÑÑÑ Ñ…Ð¾Ð¹ÑˆÑ…Ð¸ хувилбарын CD ÑÑвÑл USB диÑкнÑÑÑ + &os; 9.0 ÑÑвÑл түүнÑÑÑ Ñ…Ð¾Ð¹ÑˆÑ…Ð¸ хувилбарын CD ÑÑвÑл USB диÑкнÑÑÑ Ð°Ñ‡Ð°Ð°Ð»Ð°Ð°Ð´ Ñхний аÑуулт дÑÑÑ€ Shell-г Ñонгох Ñ…ÑÑ€ÑгтÑй. Дараа нь толин туÑгалын модулийг дуудаж толин туÑгал төхөөрөмжийг холбох Ñ…ÑÑ€ÑгтÑй: @@ -771,7 +770,7 @@ mountroot> error 19 гаргаж байгаа буÑад аÑуудлуудыг заÑварлахад илүү хүч зарах - шаардлагатай. ÐÑууж лавлах дÑлгÑц дÑÑÑ€ + шаардлагатай. Ðчаалах үеийн аÑууж лавлах дÑлгÑц дÑÑÑ€ ufs:/dev/ada0s1a гÑж оруулж өгнө. СиÑтем Ñ…ÑдийгÑÑÑ€ ada0-Ñ Ð°Ñ‡Ð°Ð°Ð»Ð°Ñ… Ñ‘Ñтой боловч бүрхүүл Ñонгох аÑууж лавлах дÑлгÑц @@ -793,13 +792,10 @@ mountroot> ДиÑк ажиллахаа болиход ÑÑргÑÑÑ… - Толин туÑгалын гайхамшигтай тал бол аль нÑг диÑк ажиллахаа + Толин туÑгалын ашигтай тал бол аль нÑг диÑк ажиллахаа байхад толин туÑгал дÑÑрх өгөгдөл алдагддаггүй Ñвдал - юм. - - ada0 нь дÑÑрх жишÑÑн дÑÑÑ€ толин туÑгал - Ò¯Ò¯ÑгÑж байгаа диÑкнүүдийн нÑг юм. Ð¥ÑÑ€Ñв ada0 - ажиллахаа боливол нөгөө ажиллаж байгаа диÑк болох ada1-Ñ + юм. ДÑÑрх жишÑÑн дÑÑÑ€ ada0 ажиллахаа + болиход ажиллаж байгаа диÑк болох ada1-Ñ Ó©Ð³Ó©Ð³Ð´Ð»Ó©Ó© өгөн толин туÑгал ажиллаÑан Ñ…ÑвÑÑÑ€ байх болно. Ðжиллахаа больÑон диÑкийг Ñолихын тулд компьютерыг @@ -962,10 +958,6 @@ Done. ДÑлгÑц дÑÑгүүр олон тоо урÑах бөгөөд Ñ…ÑÑÑг хугацааны дараа процеÑÑ Ð´ÑƒÑƒÑах болно. ЭзлÑхүүн Ò¯Ò¯Ñч холбох боломжтой болно. - - - - Сүүлийн алхам бол файлын ÑиÑтемийг холбох Ñвдал юм: &prompt.root; mount /dev/raid3/gr0p1 /multimedia/ @@ -1004,7 +996,7 @@ Done. GEOM Хаалга СүлжÑÑний Төхөөрөмжүүд GEOM нь хаалга Ñ…ÑÑ€ÑгÑлүүдийг ашиглан диÑкнүүд, CD-ROM-ууд, - файлууд гÑÑ… мÑÑ‚ төхөөрөмжүүдийг алÑÐ°Ð°Ñ Ð°ÑˆÐ¸Ð³Ð»Ð°Ñ…Ñ‹Ð³ дÑмждÑг. + файлуудыг алÑÐ°Ð°Ñ Ð°ÑˆÐ¸Ð³Ð»Ð°Ñ…Ñ‹Ð³ дÑмждÑг. Ð­Ð½Ñ Ð½ÑŒ NFS-Ñ‚Ñй адил юм. ЭкÑпортын файл ÑÑ…Ñлж Ò¯Ò¯ÑгÑÑ… шаардлагатай. Ð­Ð½Ñ Ñ„Ð°Ð¹Ð» нь @@ -1025,14 +1017,14 @@ Done. &prompt.root; ggated - Ð¥ÑÑ€ÑглÑÑ… Ð¼Ð°ÑˆÐ¸Ð½Ð°Ð°Ñ ÑƒÐ³ ÑкÑпортлогдÑон төхөөрөмжид холболт хийхдÑÑ + Ð¥ÑÑ€ÑглÑÑ… Ð¼Ð°ÑˆÐ¸Ð½Ð°Ð°Ñ ÑƒÐ³ ÑкÑпортлогдÑон төхөөрөмжид mount хийхдÑÑ Ð´Ð°Ñ€Ð°Ð°Ñ… тушаалыг өгнө Ò¯Ò¯: &prompt.root; ggatec create -o rw 192.168.1.1 /dev/da0s4d ggate0 &prompt.root; mount /dev/ggate0 /mnt - ЭндÑÑÑ ÑхлÑн төхөөрөмжид /mnt + Одоо төхөөрөмжид /mnt холболтын цÑгийг ашиглан хандаж болно. @@ -1060,12 +1052,12 @@ ggate0 нÑмÑгдÑÑн бол Ñах вÑ? ФлÑш төхөөрөмжид da0 гÑÑÑн төхөөрөмжийн нÑÑ€ өгөгдөж хуучин байÑан da0 нь da1 болж өөрчлөгдөх болов уу. Ð­Ð½Ñ Ð½ÑŒ Ñ…ÑÑ€Ñв - файлын ÑиÑтемүүд /etc/fstab-д жагÑаагдÑан + файлын ÑиÑтемүүд /etc/fstab-д орÑон бол Ñ‚ÑдгÑÑрийг холбоход аÑуудал гаргах бөгөөд бүр ÑиÑтемийг ачаалахгүй байдалд хүргÑж болох юм. - Ð­Ð½Ñ Ð°Ñуудлын нÑг шийдÑл нь SCSI карт руу нÑмÑгдÑÑн - ÑˆÐ¸Ð½Ñ Ñ‚Ó©Ñ…Ó©Ó©Ñ€Ó©Ð¼Ð¶Ð¸Ð´ төхөөрөмжийн ашиглагдаагүй дугаарууд өгөгдөхөөр болгож + ÐÑг шийдÑл нь SCSI карт руу нÑмÑгдÑÑн + ÑˆÐ¸Ð½Ñ Ñ‚Ó©Ñ…Ó©Ó©Ñ€Ó©Ð¼Ð¶Ð¸Ð´ төхөөрөмжийн ашиглагдаагүй дугаарууд өгч SCSI төхөөрөмжүүдийг гинжин цуваа болгох Ñвдал юм. ГÑхдÑÑ Ð°Ð½Ñ…Ð´Ð°Ð³Ñ‡ SCSI диÑкийг Ñольж болзошгүй USB төхөөрөмжүүдийн хувьд Ñах вÑ? Яагаад гÑвÑл USB @@ -1076,8 +1068,8 @@ ggate0 /etc/fstab файлд Ñ…ÑзÑÑ Ñ‡ жагÑаахгүй байх тийм шийдÑл байж болох юм. - Илүү Ñайн шийдÑл байдаг. glabel Ñ…ÑÑ€ÑгÑÑл ашиглан - админиÑтратор ÑÑвÑл Ñ…ÑÑ€ÑглÑгч Ó©Ó©Ñ€Ñдийн диÑкний төхөөрөмжүүдийг хаÑглаж ÑдгÑÑÑ€ + Илүү Ñайн шийдÑл нь glabel Ñ…ÑÑ€ÑгÑÑл ашиглан + диÑкний төхөөрөмжүүдийг хаÑглаж ÑдгÑÑÑ€ хаÑг/шошгонуудыг /etc/fstab файлд ашиглаж болох юм. glabel нь өгөгдÑөн үзүүлÑгчийн Ñүүлийн Ñекторт хаÑг/шошгыг хадгалдаг болохоор хаÑг/шошго нь дахин ачаалахад Ñ…ÑвÑÑÑ€ байх @@ -1086,9 +1078,9 @@ ggate0 юм. - ХаÑг/шошгыг байнгын болгохыг Ñнд дурдÑангүй. glabel - Ñ…ÑÑ€ÑгÑÑл нь түр зуурын болон байнгын хаÑг/шошгыг Ò¯Ò¯ÑгÑÑ…Ñд ашиглагдаж болно. - Зөвхөн байнгын хаÑг/шошго нь дахин ачаалахад Ñ…ÑвÑÑÑ€ үлдÑÑ… болно. ХаÑг/шошгонуудын + glabel + Ñ…ÑÑ€ÑгÑÑл нь түр зуурын болон байнгын хаÑг/шошгыг Ò¯Ò¯ÑгÑж чадна. + ХаÑг/шошгонуудын Ñлгаануудын тухай дÑлгÑÑ€Ñнгүй мÑдÑÑллийг &man.glabel.8; гарын авлагын хуудаÑÐ½Ð°Ð°Ñ Ò¯Ð·Ð½Ñ Ò¯Ò¯. @@ -1096,22 +1088,21 @@ ggate0 ХаÑг/шошгоны төрлүүд болон жишÑÑнүүд - Ерөнхий ба файлын ÑиÑтемийн гÑÑÑн хоёр төрлийн хаÑг/шошго байдаг. - ХаÑг, шошгонууд нь байнгын ÑÑвÑл түр зуурын байж болно. Байнгын хаÑгийг + Байнгын хаÑг нь ердийн ба файлын ÑиÑтемийн гÑÑÑн хоёр төрлийн байдаг. + Файлын ÑиÑтемийн байнгын хаÑгийг &man.tunefs.8; ÑÑвÑл &man.newfs.8; тушаалаар Ò¯Ò¯ÑгÑж болно. ЭдгÑÑÑ€ - хаÑг/шошгонуудад Ñ‚ÑдгÑÑрийн файлын ÑиÑтемийн төрөл дÑÑÑ€ ÑуурилÑан нÑÑ€ - бүхий туÑгай Ñан /dev - Ñан дотор Ò¯Ò¯ÑгÑгддÑг. ЖишÑÑ Ð½ÑŒ UFS2 файлын ÑиÑтемийн + хаÑг/шошгонуудын төрлүүд /dev Ñангийн + дÑд Ñанд Ò¯Ò¯ÑгÑгддÑг бөгөөд файлын ÑиÑтемийн төрлийн дагуу нÑртÑй байна. + ЖишÑÑ Ð½ÑŒ UFS2 файлын ÑиÑтемийн хаÑг/шошгонууд /dev/ufs Ñанд - Ò¯Ò¯ÑгÑгддÑг. Байнгын хаÑгийг Ð±Ð°Ñ glabel label тушаалаар + Ò¯Ò¯ÑгÑгддÑг. Ердийн хаÑгийг glabel label тушаалаар Ò¯Ò¯ÑгÑж болдог. ЭдгÑÑÑ€ нь файлын ÑиÑтемтÑй хамааралгүй бөгөөд /dev/label Ñанд Ò¯Ò¯ÑгÑгдÑÑ… болно. Түр зуурын хаÑг/шошго нь дараагийн удаа ачаалахад арилдаг. ЭдгÑÑÑ€ хаÑг/шошгонууд нь /dev/label Ñанд Ò¯Ò¯ÑгÑгдÑÑ… - бөгөөд туршилтад Ñайн тохирÑон байдаг. Түр зуурын хаÑгийг glabel create - тушаалаар Ò¯Ò¯ÑгÑж болно. ДÑлгÑÑ€Ñнгүй мÑдÑÑллийг &man.glabel.8;-ийн гарын авлагын - хуудаÑÐ½Ð°Ð°Ñ ÑƒÐ½ÑˆÐ¸Ð½Ð° уу. + бөгөөд туршилтад тохирÑон байдаг. Түр зуурын хаÑгийг glabel create + тушаалаар Ò¯Ò¯ÑгÑж болно. @@ -1123,9 +1114,7 @@ ggate0 Ð¥ÑÑ€Ñв файлын ÑиÑтем дүүрÑн бол ÑÐ½Ñ Ð½ÑŒ өгөгдлийн ÑвдрÑлд хүргÑж - болох юм; гÑхдÑÑ Ñ…ÑÑ€Ñв файлын ÑиÑтем дүүрÑн бол гол зорилго нь - хуучирÑан файлуудыг уÑтгаж хаÑг/шошгонуудыг нÑмÑхгүй байх - Ñвдал юм. + болох юм. ХаÑг/шошго одоо /dev/ufs Ñанд @@ -1139,7 +1128,7 @@ ggate0 холбох Ñ‘Ñгүй. - Одоо файлын ÑиÑтемийг ердийнхөөрөө холбож болно: + Одоо файлын ÑиÑтемийг холбож болно: &prompt.root; mount /home @@ -1151,7 +1140,7 @@ ggate0 Файлын ÑиÑтем нь newfs тушаалд өгөгдÑөн тугны туÑламжтайгаар анхдагч хаÑг/шошготой - Ò¯Ò¯ÑгÑгдÑж Ð±Ð°Ñ Ð±Ð¾Ð»Ð½Ð¾. ДÑлгÑÑ€Ñнгүй мÑдÑÑллийг &man.newfs.8; гарын авлагын хуудаÑÐ½Ð°Ð°Ñ + Ò¯Ò¯ÑгÑгдÑж Ð±Ð°Ñ Ð±Ð¾Ð»Ð½Ð¾. ДÑлгÑÑ€Ñнгүй мÑдÑÑллийг &man.newfs.8;-Ñ Ò¯Ð·Ð½Ñ Ò¯Ò¯. Доор дурдÑан тушаалыг хаÑг/шошгыг уÑтгахдаа ашиглаж болно: @@ -1172,7 +1161,7 @@ ggate0 Ð‘Ð°Ñ /, /var, /usr ба - /tmp файлын ÑиÑтемүүд + /tmp болон swap хуваалттай &os;-ийн Ñтандарт хуваалтын Ñ…ÑлбÑрийг ашиглаж байгаа болно. @@ -1263,17 +1252,17 @@ ufsid/486b6fc16926168e N/A ad4s1fJournaling - &os; 7.0 хувилбар гарÑнаар удаан Ñ…Ò¯ÑÑн хүлÑÑÑÑн - journals буюу Ñ‚ÑмдÑглÑлийн боломж бүрдÑÑн билÑÑ. - ЭнÑÑ…Ò¯Ò¯ шийдÑл нь Ó©Ó©Ñ€Ó©Ó© GEOM дÑд ÑиÑтемийн + &os; 7.0 Ñ…ÑƒÐ²Ð¸Ð»Ð±Ð°Ñ€Ð°Ð°Ñ ÑхлÑÑд UFS journals буюу + Ñ‚ÑмдÑглÑлийн боломж бүрдÑÑн билÑÑ. + ЭнÑÑ…Ò¯Ò¯ шийдÑл нь GEOM дÑд ÑиÑтемийн туÑламжтайгаар хийгдÑÑн бөгөөд &man.gjournal.8; Ñ…ÑÑ€ÑгÑлийн туÑламжтай Ñ…Ñлбар тохируулж болдог. - Journaling буюу Ñ‚ÑмдÑглÑл гÑж юу вÑ? ТÑмдÑглÑÑ… чадвар - нь файлын ÑиÑтемийн шилжүүлгүүдийн бүртгÑлийг хадгалдаг, Ó©Ó©Ñ€Ó©Ó©Ñ€ - Ñ…ÑлбÑл мета өгөгдөл болон файлын бичилтүүд диÑкÑнд зөвөөр хийгдÑÑ…ÑÑÑ - өмнө диÑкний бүрÑн гүйцÑд бичих үйлдлийг бүтÑÑдÑг өөрчлөлтүүдийн - бүртгÑлийг хадгалдаг. Файлын ÑиÑтемийн бүрÑн Ð±ÑƒÑ Ð±Ð°Ð¹Ð´Ð»Ð°Ð°Ñ + Journaling буюу Ñ‚ÑмдÑглÑÑ… чадвар нь мета өгөгдөл болон + файлын бичилтүүд диÑкÑнд зөвөөр хийгдÑÑ…ÑÑÑ Ó©Ð¼Ð½Ó© диÑкний + бүрÑн гүйцÑд бичих үйлдлийг бүтÑÑдÑг өөрчлөлтүүдийн + бүртгÑл зÑÑ€Ñг файлын ÑиÑтемийн шилжүүлгүүдийн бүртгÑлийг + хадгалдаг. Файлын ÑиÑтемийн бүрÑн Ð±ÑƒÑ Ð±Ð°Ð¹Ð´Ð»Ð°Ð°Ñ Ñ…Ð°Ð¼Ð³Ð°Ð°Ð»Ð°Ñ…Ñ‹Ð½ тулд файлын ÑиÑтемийн шилжүүлгүүдийг дахин гүйцÑтгÑхийн тулд ÑнÑÑ…Ò¯Ò¯ шилжүүлгүүдийн бүртгÑлийг дараа нь дахин ажиллуулж болдог. @@ -1287,8 +1276,8 @@ ufsid/486b6fc16926168e N/A ad4s1fÓ¨Ó©Ñ€ буÑад файлын ÑиÑтемийн Ñ‚ÑмдÑглÑлийн шийдлүүдÑÑÑ Ñлгаатай нь gjournal арга нь блок дÑÑÑ€ тулгуурлаÑан бөгөөд - файлын ÑиÑтемийн Ñ…ÑÑÑг болж хийгдÑÑгүй, зөвхөн GEOM - өргөтгөлийн хүрÑÑнд хийгдÑÑн. + файлын ÑиÑтемийн Ñ…ÑÑÑг болж хийгдÑÑгүй. Ð­Ð½Ñ Ð½ÑŒ GEOM + өргөтгөл юм. gjournal-д зориулÑан дÑмжлÑгийг идÑвхжүүлÑхийн тулд &os; цөм нь 7.0 болон түүнÑÑÑ Ñ…Ð¾Ð¹ÑˆÑ…Ð¸ ÑиÑтемүүд дÑÑÑ€ анхдагчаар байдаг доор дурдÑан @@ -1308,10 +1297,10 @@ ufsid/486b6fc16926168e N/A ad4s1foptions GEOM_JOURNAL - da4 нь ÑˆÐ¸Ð½Ñ SCSI диÑк - гÑж тооцвол чөлөөтÑй файлын ÑиÑтем дÑÑÑ€ Ñ‚ÑмдÑглÑл Ò¯Ò¯ÑгÑхийн тулд + ЧөлөөтÑй файлын ÑиÑтем дÑÑÑ€ Ñ‚ÑмдÑглÑл Ò¯Ò¯ÑгÑхийн тулд одоо доор дурдÑан алхмуудыг ашиглан хийж - болно: + болно. Ð­Ð½Ñ Ð¶Ð¸ÑˆÑÑн дÑÑÑ€ da4 нь ÑˆÐ¸Ð½Ñ SCSI диÑк + байна: &prompt.root; gjournal load &prompt.root; gjournal label /dev/da4 @@ -1323,8 +1312,8 @@ ufsid/486b6fc16926168e N/A ad4s1f&prompt.root; newfs -O 2 -J /dev/da4.journal - Өмнө ажиллуулÑан тушаал UFS2 - файлын ÑиÑтемийг Ñ‚ÑмдÑгдÑл идÑвхжÑÑн төхөөрөмж дÑÑÑ€ Ò¯Ò¯ÑгÑÑ… + Ð­Ð½Ñ Ñ‚ÑƒÑˆÐ°Ð°Ð» UFS2 + файлын ÑиÑтемийг Ñ‚ÑмдÑглÑл идÑвхжÑÑн төхөөрөмж дÑÑÑ€ Ò¯Ò¯ÑгÑÑ… болно. Төхөөрөмжийг Ñ…Ò¯ÑÑÑн цÑгтÑÑ Ð´Ð¾Ð¾Ñ€ дурдÑан тушаалаар @@ -1339,13 +1328,13 @@ ufsid/486b6fc16926168e N/A ad4s1fad4s1.journal болон ad4s2.journal Ò¯Ò¯ÑгÑÑ… болно. - Хурдан ажиллагаатай байхын тулд Ñ‚ÑмдÑглÑлийг Ó©Ó©Ñ€ диÑк дÑÑÑ€ байлгах нь - зүйтÑй байдаг. Ð­Ð½Ñ Ñ‚Ð¾Ñ…Ð¸Ð¾Ð»Ð´Ð¾Ð»Ð´ Ñ‚ÑмдÑглÑл хангагч ÑÑвÑл + Хурдан ажиллагаатай байхын тулд Ñ‚ÑмдÑглÑлийг Ó©Ó©Ñ€ диÑк дÑÑÑ€ + байлгаж болно. Ð­Ð½Ñ Ñ‚Ð¾Ñ…Ð¸Ð¾Ð»Ð´Ð¾Ð»Ð´ Ñ‚ÑмдÑглÑл хангагч ÑÑвÑл хадгалалтын төхөөрөмж нь Ñ‚ÑмдÑглÑлийг идÑвхжүүлÑхийн тулд уг төхөөрөмжийнхөө дараа жагÑаагдах Ñ‘Ñтой. tunefs тушаал ашиглан тухайн байгаа файлын ÑиÑтем дÑÑÑ€ Ñ‚ÑмдÑглÑлийг - идÑвхжүүлж болдог; гÑхдÑÑ Ñ„Ð°Ð¹Ð»Ñ‹Ð½ ÑиÑтемийг өөрчлөхөөÑÓ©Ó© өмнө - нөөц үргÑлж хийж байх Ñ…ÑÑ€ÑгтÑй. ИхÑнх тохиолдолд + идÑвхжүүлж болдог. ГÑхдÑÑ Ñ„Ð°Ð¹Ð»Ñ‹Ð½ ÑиÑтемийг өөрчлөхөөÑÓ©Ó© өмнө + нөөц үргÑлж хийж байх Ñ…ÑÑ€ÑгтÑй. ИхÑнх тохиолдолд gjournal нь Ñг Ñ‚ÑмдÑглÑлийг Ò¯Ò¯ÑгÑж чадаагүй бол амжилтгүй болох бөгөөд гÑхдÑÑ ÑÐ½Ñ Ð½ÑŒ tunefs-ийг буруугаар ашиглаÑÐ½Ð°Ð°Ñ Ð±Ð¾Ð»Ð¾Ð¾Ð´ Modified: projects/xml-tools/ru_RU.KOI8-R/articles/Makefile ============================================================================== --- projects/xml-tools/ru_RU.KOI8-R/articles/Makefile Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/ru_RU.KOI8-R/articles/Makefile Tue May 7 10:20:20 2013 (r41559) @@ -15,7 +15,6 @@ SUBDIR+= contributing SUBDIR+= cups SUBDIR+= custom-gcc SUBDIR+= cvs-freebsd -SUBDIR+= cvsup-advanced SUBDIR+= explaining-bsd SUBDIR+= fbsd-from-scratch #SUBDIR+= filtering-bridges Modified: projects/xml-tools/share/pgpkeys/itetcu.key ============================================================================== --- projects/xml-tools/share/pgpkeys/itetcu.key Tue May 7 10:02:48 2013 (r41558) +++ projects/xml-tools/share/pgpkeys/itetcu.key Tue May 7 10:20:20 2013 (r41559) @@ -1,74 +1,63 @@ -sub 4096R/54B3FFA0 2012-11-19 [expires: 2014-11-19] +pub 4096R/29597D20 2013-05-02 + Key fingerprint = AB6F 39B6 605D E6B7 0D54 ED3D BCA2 129A 2959 7D20 +uid Ion-Mihai Tetcu (FreeBSD Committer key) +sub 4096R/EC9E17E3 2013-05-02 ]]> Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 2F2157EB; Tue, 7 May 2013 14:33:39 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 08B8CC18; Tue, 7 May 2013 14:33:39 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r47EXcbg037288; Tue, 7 May 2013 14:33:38 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r47EXcqA037286; Tue, 7 May 2013 14:33:38 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305071433.r47EXcqA037286@svn.freebsd.org> From: Gabor Kovesdan Date: Tue, 7 May 2013 14:33:38 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41561 - in projects/xml-tools/share: mk xml X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 14:33:39 -0000 Author: gabor Date: Tue May 7 14:33:38 2013 New Revision: 41561 URL: http://svnweb.freebsd.org/changeset/doc/41561 Log: - Use absolute URLs in printed formats Modified: projects/xml-tools/share/mk/doc.docbook.mk projects/xml-tools/share/xml/urls.ent Modified: projects/xml-tools/share/mk/doc.docbook.mk ============================================================================== --- projects/xml-tools/share/mk/doc.docbook.mk Tue May 7 13:05:59 2013 (r41560) +++ projects/xml-tools/share/mk/doc.docbook.mk Tue May 7 14:33:38 2013 (r41561) @@ -204,7 +204,7 @@ LOCAL_CSS_SHEET= ${.OBJDIR}/${CSS_SHEET: LOCAL_CSS_SHEET= ${CSS_SHEET:T} .endif -CLEANFILES+= ${DOC}.parsed.xml +CLEANFILES+= ${DOC}.parsed.xml ${DOC}.parsed.print.xml .for _curformat in ${FORMATS} _cf=${_curformat} @@ -360,6 +360,8 @@ ${DOC}.parsed.xml: ${SRCS} ${RM} ${.TARGET}.tmp .else ${MV} ${.TARGET}.tmp ${.TARGET} + ${SED} 's|@@URL_RELPREFIX@@|http://www.FreeBSD.org|g' < ${.TARGET} > ${DOC}.parsed.print.xml + ${SED} -i '' 's|@@URL_RELPREFIX@@|../../../..|g' ${.TARGET} .endif # XHTML ------------------------------------------------------------- @@ -452,7 +454,7 @@ ${DOC}.tex: ${SRCS} ${LOCAL_IMAGES_EPS} ${LOCAL_IMAGES_TXT} ${LOCAL_IMAGES_EN} \ ${DOC}.parsed.xml ${JADE} -V tex-backend ${PRINTOPTS} \ - ${JADEOPTS} -t tex -o ${.TARGET} ${XMLDECL} ${DOC}.parsed.xml + ${JADEOPTS} -t tex -o ${.TARGET} ${XMLDECL} ${DOC}.parsed.print.xml ${SED} -i '' -e 's|{1}\\def\\ScaleY%|{0.5}\\def\\ScaleY%|g' \ -e 's|{1}\\def\\EntitySystemId%|{0.5}\\def\\EntitySystemId%|g' \ ${.TARGET} @@ -489,8 +491,8 @@ ${DOC}.pdf: .endif .elif ${RENDERENGINE} == "fop" -${DOC}.fo: ${DOC}.xml ${LOCAL_IMAGES_LIB} ${LOCAL_IMAGES_PNG} - ${XSLTPROC} ${XSLTPROCOPTS} ${XSLFO} ${DOC}.parsed.xml > ${.TARGET} +${DOC}.fo: ${DOC}.xml ${LOCAL_IMAGES_LIB} ${LOCAL_IMAGES_PNG} ${DOC}.parsed.xml + ${XSLTPROC} ${XSLTPROCOPTS} ${XSLFO} ${DOC}.parsed.print.xml > ${.TARGET} ${DOC}.pdf: ${DOC}.fo ${LOCAL_IMAGES_LIB} ${LOCAL_IMAGES_PNG} ${FOP} ${FOPOPTS} ${DOC}.fo ${.TARGET} Modified: projects/xml-tools/share/xml/urls.ent ============================================================================== --- projects/xml-tools/share/xml/urls.ent Tue May 7 13:05:59 2013 (r41560) +++ projects/xml-tools/share/xml/urls.ent Tue May 7 14:33:38 2013 (r41561) @@ -6,10 +6,7 @@ - -]]> - + From owner-svn-doc-projects@FreeBSD.ORG Tue May 7 18:39:51 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 6AD49E11; Tue, 7 May 2013 18:39:51 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 5D31BAC4; Tue, 7 May 2013 18:39:51 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r47IdpE2022191; Tue, 7 May 2013 18:39:51 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r47Idp6K022190; Tue, 7 May 2013 18:39:51 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305071839.r47Idp6K022190@svn.freebsd.org> From: Gabor Kovesdan Date: Tue, 7 May 2013 18:39:51 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41562 - projects/xml-tools/ja_JP.eucJP/articles/fbsd-from-scratch X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 18:39:51 -0000 Author: gabor Date: Tue May 7 18:39:50 2013 New Revision: 41562 URL: http://svnweb.freebsd.org/changeset/doc/41562 Log: - Fix build Modified: projects/xml-tools/ja_JP.eucJP/articles/fbsd-from-scratch/article.xml Modified: projects/xml-tools/ja_JP.eucJP/articles/fbsd-from-scratch/article.xml ============================================================================== --- projects/xml-tools/ja_JP.eucJP/articles/fbsd-from-scratch/article.xml Tue May 7 14:33:38 2013 (r41561) +++ projects/xml-tools/ja_JP.eucJP/articles/fbsd-from-scratch/article.xml Tue May 7 18:39:50 2013 (r41562) @@ -431,7 +431,7 @@ Do you wish to delete what is left of /v - + ¥À¥¦¥ó¥í¡¼¥É: + ¥À¥¦¥ó¥í¡¼¥É: - + ¥À¥¦¥ó¥í¡¼¥É: - + ¥À¥¦¥ó¥í¡¼¥É: - + ¥À¥¦¥ó¥í¡¼¥É: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id F1112F32; Wed, 8 May 2013 09:27:58 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id E45D0E4; Wed, 8 May 2013 09:27:58 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r489Rwc7033781; Wed, 8 May 2013 09:27:58 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r489Rw7M033780; Wed, 8 May 2013 09:27:58 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305080927.r489Rw7M033780@svn.freebsd.org> From: Gabor Kovesdan Date: Wed, 8 May 2013 09:27:58 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41564 - projects/xml-tools/share/xsl X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2013 09:27:59 -0000 Author: gabor Date: Wed May 8 09:27:58 2013 New Revision: 41564 URL: http://svnweb.freebsd.org/changeset/doc/41564 Log: - Fix rendering of the last modified text. - We have our own complete CSS file so do not generate one with XSLT Modified: projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Modified: projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl ============================================================================== --- projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Wed May 8 01:35:31 2013 (r41563) +++ projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Wed May 8 09:27:58 2013 (r41564) @@ -25,6 +25,7 @@ + @@ -272,14 +273,13 @@ - Last modified on + - - + . From owner-svn-doc-projects@FreeBSD.ORG Wed May 8 12:10:30 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 4E0CBF80; Wed, 8 May 2013 12:10:30 +0000 (UTC) (envelope-from gabor@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 4050AA9B; Wed, 8 May 2013 12:10:30 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r48CAUgX091896; Wed, 8 May 2013 12:10:30 GMT (envelope-from gabor@svn.freebsd.org) Received: (from gabor@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r48CAUZL091895; Wed, 8 May 2013 12:10:30 GMT (envelope-from gabor@svn.freebsd.org) Message-Id: <201305081210.r48CAUZL091895@svn.freebsd.org> From: Gabor Kovesdan Date: Wed, 8 May 2013 12:10:30 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41565 - projects/xml-tools/share/xsl X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2013 12:10:30 -0000 Author: gabor Date: Wed May 8 12:10:29 2013 New Revision: 41565 URL: http://svnweb.freebsd.org/changeset/doc/41565 Log: - Add a missing space. Modified: projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Modified: projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl ============================================================================== --- projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Wed May 8 09:27:58 2013 (r41564) +++ projects/xml-tools/share/xsl/freebsd-xhtml-common.xsl Wed May 8 12:10:29 2013 (r41565) @@ -279,6 +279,7 @@ + . From owner-svn-doc-projects@FreeBSD.ORG Wed May 8 21:39:52 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 818E2B70; Wed, 8 May 2013 21:39:52 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 73339ECA; Wed, 8 May 2013 21:39:52 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r48Ldq8t095497; Wed, 8 May 2013 21:39:52 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r48LdqAJ095496; Wed, 8 May 2013 21:39:52 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305082139.r48LdqAJ095496@svn.freebsd.org> From: Dru Lavigne Date: Wed, 8 May 2013 21:39:52 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41571 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 May 2013 21:39:52 -0000 Author: dru Date: Wed May 8 21:39:52 2013 New Revision: 41571 URL: http://svnweb.freebsd.org/changeset/doc/41571 Log: This patch addresses the following: - you - replace command/app tags with entities - fix xref tags - fix some acronyms Approved by: gjb (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Wed May 8 17:55:10 2013 (r41570) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Wed May 8 21:39:52 2013 (r41571) @@ -57,7 +57,7 @@ - What a shell is, and how to change your default login + What a shell is, and how to change the default login environment. @@ -87,10 +87,10 @@ &os; can be used in various ways. One of them is typing commands to a text terminal. A lot of the flexibility and power - of a &unix; operating system is readily available at your hands + of a &unix; operating system is readily available when using &os; this way. This section describes what terminals and consoles are, and - how you can use them in &os;. + how to use them in &os;. The Console @@ -144,8 +144,9 @@ login: login: - Type the username that was configured during system installation and + Type the username that was configured during system + installation, as described in , and press Enter. Then enter the password associated with the username and press Enter. The password is not echoed for security @@ -165,8 +166,8 @@ login: &os; can be configured to provide many virtual consoles for inputting commands. Each virtual console has its own login prompt and output channel, and &os; takes care of - properly redirecting keyboard input and monitor output as you - switch between virtual consoles. + properly redirecting keyboard input and monitor output as + switching occurs between virtual consoles. Special key combinations have been reserved by &os; for switching consoles. @@ -228,7 +229,7 @@ ttyv8 "/usr/X11R6/bin/xdm -nodaemon" Single User Mode Console A detailed description of single user mode - can be found here. + can be found in . There is only one console when &os; is in single user mode as no other virtual consoles are available in this mode. The settings for single user mode are found in this section of @@ -249,8 +250,9 @@ console none without prompting for a password. Be careful when changing this setting to - insecure. If you ever - forget the root password, booting into + insecure. If + the root password is forgotten, booting + into single user mode is still possible, but may be difficult for someone who is not comfortable with the &os; booting process. @@ -375,7 +377,7 @@ console none - ls + &man.ls.1; directories @@ -418,7 +420,7 @@ total 530 directory has a slightly different meaning than that of files. When a directory is marked executable, it means it is possible to change into that directory using - cd. This also means that it is + &man.cd.1;. This also means that it is possible to access the files within that directory, subject to the permissions on the files themselves. @@ -662,7 +664,7 @@ total 530 Note that a s is now part of the permission set designated for the file owner, replacing the executable bit. This allows utilities which need elevated - permissions, such as passwd. + permissions, such as &man.passwd.1;. The nosuid &man.mount.8; option will @@ -673,10 +675,10 @@ total 530 To view this in real time, open two terminals. On - one, start the passwd process as a normal + one, type passwd as a normal user. While it waits for a new password, check the process table and look at the user information for - passwd: + &man.passwd.1;: In terminal A: @@ -690,8 +692,8 @@ Old Password: trhodes 5232 0.0 0.2 3420 1608 0 R+ 2:10AM 0:00.00 grep passwd root 5211 0.0 0.2 3620 1724 2 I+ 2:09AM 0:00.01 passwd - As stated above, the passwd is run - by a normal user, but is using the effective + Although &man.passwd.1; is run + as a normal user, it is using the effective UID of root. The setgid permission performs the @@ -702,7 +704,7 @@ root 5211 0.0 0.2 3620 1724 2 user who started the process. To set the setgid permission on a - file, provide chmod with a leading two + file, provide &man.chmod.1; with a leading two (2): &prompt.root; chmod 2755 sgidexample.sh @@ -848,8 +850,7 @@ root 5211 0.0 0.2 3620 1724 2 /etc/namedb/ - named configuration files. - Refer to &man.named.8; for details. + &man.named.8; configuration files. @@ -863,8 +864,7 @@ root 5211 0.0 0.2 3620 1724 2 /etc/ppp/ - ppp configuration files as - described in &man.ppp.8;. + &man.ppp.8; configuration files. @@ -1071,7 +1071,7 @@ root 5211 0.0 0.2 3620 1724 2 Files are stored in directories. A directory may contain no files, or it may contain many hundreds of files. A directory - can also contain other directories, allowing you to build up a + can also contain other directories, allowing a hierarchy of directories within one another in order to organize data. @@ -1087,7 +1087,7 @@ root 5211 0.0 0.2 3620 1724 2 different from &windows; which uses \ to separate file and directory names. &os; does not use drive letters, or other drive names in - the path. For example, you would not type + the path. For example, one would not type c:/foo/bar/readme.txt on &os;. Directories and files are stored in a file system. Each @@ -1097,11 +1097,11 @@ root 5211 0.0 0.2 3620 1724 2 directories. One file system is designated the root file system or /. Every other file system is mounted under - the root file system. No matter how many disks you have on your + the root file system. No matter how many disks are on the &os; system, every directory appears to be part of the same disk. - Suppose you have three file systems, called + Consider three file systems, called A, B, and C. Each file system has one root directory, which contains two other directories, called @@ -1109,9 +1109,9 @@ root 5211 0.0 0.2 3620 1724 2 B1, B2 and C1, C2). - Call A the root file system. If you used - ls to view the contents of this directory you - would see two subdirectories, A1 and + Call A the root file system. If + &man.ls.1; is used to view the contents of this directory, + it will show two subdirectories, A1 and A2. The directory tree looks like this: @@ -1248,9 +1248,9 @@ root 5211 0.0 0.2 3620 1724 2 This is similar, although not identical, to a &ms-dos; join. - Typically you create file systems when installing &os; - and decide where to mount them, and then never change them - unless you add a new disk. + Typically file systems are created when installing &os; + and never change + unless a new disk is added. It is entirely possible to have one large root file system, and not need to create any others. There are some drawbacks to @@ -1283,8 +1283,9 @@ root 5211 0.0 0.2 3620 1724 2 - &os;'s file systems are very robust should you lose - power. However, a power loss at a critical point could + &os;'s file systems are robust if + power is lost. However, a power loss at a critical point + could still damage the structure of the file system. By splitting data over multiple file systems it is more likely that the system will still come up, making it easier to restore from @@ -1361,8 +1362,9 @@ root 5211 0.0 0.2 3620 1724 2 Normally the same size as the enclosing slice. This allows utilities that need to work on the entire slice, such as a bad block scanner, to work on the - c partition. You would not normally - create a file system on this partition. + c partition. A file system would not + normally be + created on this partition. @@ -1390,7 +1392,7 @@ root 5211 0.0 0.2 3620 1724 2 s, starting at 1. So da0s1 is the first slice on the first SCSI drive. There can only be four physical slices on - a disk, but you can have logical slices inside physical slices + a disk, but there can be logical slices inside physical slices of the appropriate type. These extended slices are numbered starting at 5, so ad0s5 is the first extended slice on the first IDE disk. These devices @@ -1410,7 +1412,7 @@ root 5211 0.0 0.2 3620 1724 2 Finally, each disk on the system is identified. A disk name starts with a code that indicates the type of disk, and then a number, indicating which disk it is. Unlike slices, disk - numbering starts at 0. Common codes that you will see are + numbering starts at 0. Common codes are listed in . When referring to a partition, include the disk name, @@ -1586,8 +1588,9 @@ root 5211 0.0 0.2 3620 1724 2 Another common reason to contain certain directory trees on other file systems is if they are to be housed on separate - physical disks, or are separate virtual disks, such as - Network File System mounts, + physical disks, or are separate virtual disks, such as Network + File System mounts, described in + , or CDROM drives. @@ -1598,7 +1601,7 @@ root 5211 0.0 0.2 3620 1724 2 mounted with fstab - During the boot process, + During the boot process (), file systems listed in /etc/fstab are automatically mounted except for the entries containing . This file contains entries in the @@ -1681,7 +1684,7 @@ root 5211 0.0 0.2 3620 1724 2 - The <command>mount</command> Command + Using &man.mount.8; file systems @@ -1808,14 +1811,14 @@ root 5211 0.0 0.2 3620 1724 2 - The <command>umount</command> Command + Using &man.umount.8; file systems unmounting - To unmount a filesystem use &man.umount.8;. This command + To unmount a file system use &man.umount.8;. This command takes one parameter which can be a mountpoint, device name, or . @@ -1843,7 +1846,7 @@ root 5211 0.0 0.2 3620 1724 2 Each process is uniquely identified by a number called a process ID - (PID). Similar to files, each process + (PID). Similar to files, each process has one owner and group, and the owner and group permissions are used to determine which files and devices the process can open. Most processes also have a parent process that started them. @@ -1851,17 +1854,18 @@ root 5211 0.0 0.2 3620 1724 2 the shell is a process which has the shell as its parent process. The exception is a special process called &man.init.8; which is always the first process to start at boot - time and which always has a PID of 1. + time and which always has a PID of 1. To see the processes on the system, use &man.ps.1; and &man.top.1;. To display a static list of the currently running - processes, their PIDs, how much memory they are using, and the - command they were started with, use ps. To + processes, their PIDs, how much memory they + are using, and the + command they were started with, use &man.ps.1;. To display all the running processes and update the display every - few seconds so that you can interactively see what the computer - is doing, use top. + few seconds in order to interactively see what the computer + is doing, use &man.top.1;. - By default, ps only shows the commands + By default, &man.ps.1; only shows the commands that are running and owned by the user. For example: &prompt.user; ps @@ -1883,8 +1887,10 @@ root 5211 0.0 0.2 3620 1724 2 The output from &man.ps.1; is organized into a number of columns. The PID column displays the process - ID. PIDs are assigned starting at 1, go up to 99999, then wrap - around back to the beginning. However, a PID is not reassigned + ID. PIDs are assigned starting at 1, go up + to 99999, then wrap + around back to the beginning. However, a PID + is not reassigned if it is already in use. The TT column shows the tty the program is running on and STAT shows the program's state. TIME is the @@ -1926,7 +1932,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 ... The output is split into two sections. The header (the - first five lines) shows the PID of the last process to run, the + first five lines) shows the PID of the last + process to run, the system load averages (which are a measure of how busy the system is), the system uptime (time since the last reboot) and the current time. The other figures in the header relate to how @@ -1935,7 +1942,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 spending in different CPU states. Below the header is a series of columns containing similar - information to the output from &man.ps.1;, such as the PID, + information to the output from &man.ps.1;, such as the + PID, username, amount of CPU time, and the command that started the process. By default, &man.top.1; also displays the amount of memory space taken by the process. This is split into two @@ -1973,13 +1981,13 @@ Swap: 256M Total, 38M Used, 217M Free, 1 daemons with a trailing d. BIND is the Berkeley Internet Name Domain, but the actual program that executes is - named. The Apache + &man.named.8;. The Apache web server program is httpd and the - line printer spooling daemon is lpd. This is + line printer spooling daemon is &man.lpd.8;. This is only a naming convention. For example, the main mail daemon for the Sendmail application is - sendmail, and not - maild. + &man.sendmail.8;, and not + maild. One way to communicate with a daemon, or any running process, is to send a signal using @@ -2041,14 +2049,16 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Sending a Signal to a Process This example shows how to send a signal to &man.inetd.8;. - The inetd configuration file is + The &man.inetd.8; configuration file is /etc/inetd.conf, and - inetd will re-read this configuration file + &man.inetd.8; will re-read this configuration file when it is sent a SIGHUP. - Find the PID of the process you want to send the signal - to using &man.pgrep.1;. In this example, the PID for + Find the PID of the process to send + the signal + to using &man.pgrep.1;. In this example, the + PID for &man.inetd.8; is 198: &prompt.user; pgrep -l inetd @@ -2066,12 +2076,14 @@ Swap: 256M Total, 38M Used, 217M Free, 1 &prompt.root; /bin/kill -s HUP 198 Like most &unix; commands, &man.kill.1; will not print - any output if it is successful. If you send a signal to a - process that you do not own, you will instead see + any output if it is successful. If a signal is sent to a + process not owned by that user, the message kill: PID: Operation - not permitted. Mistyping the PID will either + not permitted will be displayed. Mistyping + the PID will either send the signal to the wrong process, which could have - negative results, or will send the signal to a PID that is + negative results, or will send the signal to a + PID that is not currently in use, resulting in the error kill: PID: No such process. @@ -2098,7 +2110,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Killing a random process on the system can be a bad idea. - In particular, &man.init.8;, PID 1, is special. Running + In particular, &man.init.8;, PID 1, is + special. Running /bin/kill -s KILL 1 is a quick, and unrecommended, way to shutdown the system. Always double check the arguments to @@ -2118,14 +2131,15 @@ Swap: 256M Total, 38M Used, 217M Free, 1 them. Many shells provide built in functions to help with everyday tasks such as file management, file globbing, command line editing, command macros, and environment variables. &os; - comes with several shells, including sh, the - Bourne Shell, and tcsh, the improved C-shell. + comes with several shells, including the + Bourne shell (&man.sh.1;) and the extended C shell + (&man.tcsh.1;). Other shells are available from the &os; Ports Collection, such as zsh and bash. The shell that is used is really a matter of taste. A C programmer might feel more comfortable with a C-like shell such - as tcsh. A Linux user might prefer + as &man.tcsh.1;. A &linux; user might prefer bash. Each shell has unique properties that may or may not work with a user's preferred working environment, which is why there is a choice of which shell to use. @@ -2182,7 +2196,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 DISPLAY - Network name of the Xorg + Network name of the + &xorg; display to connect to, if available. @@ -2237,13 +2252,13 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Bourne shells How to set an environment variable differs between shells. - In tcsh and csh, use + In &man.tcsh.1; and &man.csh.1;, use setenv to set environment variables. In - sh and bash, use + &man.sh.1; and bash, use export to set the current environment variables. This example sets the default EDITOR to /usr/local/bin/emacs for the - tcsh shell: + &man.tcsh.1; shell: &prompt.user; setenv EDITOR /usr/local/bin/emacs @@ -2264,8 +2279,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 represents any number of characters in a filename. Meta-characters can be used to perform filename globbing. For example, echo * is equivalent to - ls because the shell takes all the files that - match * and echo lists + &man.ls.1; because the shell takes all the files that + match * and &man.echo.1; lists them on the command line. To prevent the shell from interpreting a special character, @@ -2282,7 +2297,7 @@ Swap: 256M Total, 38M Used, 217M Free, 1 to use chsh. Running this command will open the editor that is configured in the EDITOR environment variable, which by default - is set to vi. Change + is set to &man.vi.1;. Change the Shell: line to the full path of the new shell. @@ -2295,15 +2310,16 @@ Swap: 256M Total, 38M Used, 217M Free, 1 The new shell must be present in /etc/shells. If the shell was - installed from the &os; Ports - Collection, it should be automatically added to + installed from the &os; Ports + Collection as described in , it + should be automatically added to this file. If it is missing, add it using this command, replacing the path with the path of the shell: &prompt.root; echo /usr/local/bin/bash >> /etc/shells - Then rerun chsh. + Then rerun &man.chsh.1;. @@ -2324,10 +2340,10 @@ Swap: 256M Total, 38M Used, 217M Free, 1 editors - ee + &man.ee.1; - A simple editor to learn is ee, + A simple editor to learn is &man.ee.1;, which stands for easy editor. To start this editor, type ee filename where filename is the name of the file to @@ -2337,18 +2353,18 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Ctrl, so ^e expands to Ctrle. - To leave ee, press + To leave &man.ee.1;, press Esc, then choose the leave editor option from the main menu. The editor will - prompt you to save any changes if the file has been + prompt to save any changes if the file has been modified. - vi + &man.vi.1; editors - vi + &man.vi.1; emacs @@ -2358,8 +2374,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 emacs - &os; also comes with more powerful text editors such as - vi as part of the base system. + &os; also comes with more powerful text editors, such as + &man.vi.1;, as part of the base system. Other editors, like editors/emacs and editors/vim, are part of the @@ -2372,8 +2388,7 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Many applications which modify files or require typed input will automatically open a text editor. To alter the default editor used, set the EDITOR environment - variable as described in the shells section. + variable as described in . @@ -2529,7 +2544,7 @@ Swap: 256M Total, 38M Used, 217M Free, 1 cross compilers and plugging in different formats. Those who wanted to build cross compilers targeting &os; were out of luck since the older sources that &os; had for - as and ld + &man.as.1; and &man.ld.1; were not up to the task. The new GNU tools chain (binutils) supports cross compiling, ELF, shared libraries, and C++ @@ -2568,8 +2583,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 &prompt.user; man command where command is the name of - the command you wish to learn about. For example, to learn - more about ls, type: + the command to learn about. For example, to learn + more about &man.ls.1;, type: &prompt.user; man ls @@ -2616,21 +2631,21 @@ Swap: 256M Total, 38M Used, 217M Free, 1 In some cases, the same topic may appear in more than one section of the online manual. For example, there is a - chmod user command and a + &man.chmod.1; user command and a chmod() system call. To tell - man which section to display, specify the + &man.man.1; which section to display, specify the section number: &prompt.user; man 1 chmod This will display the manual page for the user command - chmod. References to a particular section + &man.chmod.1;. References to a particular section of the online manual are traditionally placed in parenthesis in written documentation, so &man.chmod.1; refers to the - chmod user command and &man.chmod.2; refers + user command and &man.chmod.2; refers to the system call. - If you do not know the command name, use man + If the command name is unknown, use man -k to search for keywords in the command descriptions: @@ -2665,7 +2680,7 @@ Swap: 256M Total, 38M Used, 217M Free, 1 by the Free Software Foundation (FSF). In addition to manual pages, these programs may include hypertext documents called info files. These can be viewed using - info or, if editors/emacs is installed, the info mode of emacs. From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 16:23:02 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 9E5E3B1F; Thu, 9 May 2013 16:23:02 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 7F7B7FF4; Thu, 9 May 2013 16:23:02 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49GN2Zb038935; Thu, 9 May 2013 16:23:02 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49GN2pV038934; Thu, 9 May 2013 16:23:02 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305091623.r49GN2pV038934@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 16:23:02 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41576 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 16:23:02 -0000 Author: dru Date: Thu May 9 16:23:02 2013 New Revision: 41576 URL: http://svnweb.freebsd.org/changeset/doc/41576 Log: This patch addresses the following: - fix command/app tags which should be entities - fix link tags - add acronym tags A subsequent patch will fix the white space. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Thu May 9 13:39:38 2013 (r41575) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Thu May 9 16:23:02 2013 (r41576) @@ -73,47 +73,60 @@ to the mechanism used to load the operating system, which has become shortened to booting. - BIOS + BIOS Basic Input/Output System - BIOS + BIOS - On x86 hardware the Basic Input/Output System (BIOS) is + On x86 hardware the Basic Input/Output System + (BIOS) is responsible for loading the operating system. To do this, the - BIOS looks on the hard disk for the Master Boot Record (MBR), - which must be located on a specific place on the disk. The BIOS - has enough knowledge to load and run the MBR, and assumes that - the MBR can then carry out the rest of the tasks involved in + BIOS looks on the hard disk for the Master + Boot Record (MBR), + which must be located on a specific place on the disk. The + BIOS + has enough knowledge to load and run the MBR, + and assumes that + the MBR can then carry out the rest of the + tasks involved in loading the operating system, possibly with the help of the - BIOS. + BIOS. - Master Boot Record (MBR) + Master Boot Record + MBR) Boot Manager Boot Loader - The code within the MBR is usually referred to as a + The code within the MBR is usually + referred to as a boot manager, especially when it interacts - with the user. In this case the boot manager usually has more + with the user. In this case, the boot manager usually has more code in the first track of the disk or - within some OS's file system. (A boot manager is sometimes also + within the file system of some operating systems. A boot + manager is sometimes also called a boot loader, but &os; uses that - term for a later stage of booting.) Popular boot managers - include boot0 (aka + term for a later stage of booting. Popular boot managers + include boot0, also called Boot Easy, the standard &os; boot - manager), Grub, + manager, Grub, GAG, and - LILO. (Only - boot0 fits within the MBR.) - - If only one operating system is installed, a standard PC MBR - will suffice. This MBR searches for the first bootable (active) + LILO. Only + boot0 fits within the + MBR. + + If only one operating system is installed, a standard PC + MBR + will suffice. This MBR searches for the + first bootable (active) slice on the disk, and then runs the code on that slice to load - the remainder of the operating system. By default, the MBR - installed by &man.fdisk.8; is such an MBR and is based on + the remainder of the operating system. By default, the + MBR + installed by &man.fdisk.8; is such an MBR and + is based on /boot/mbr. If multiple operating systems are present, a different boot @@ -122,7 +135,8 @@ boot managers are discussed in the next subsection. The remainder of the &os; bootstrap system is divided - into three stages. The first stage is run by the MBR, which + into three stages. The first stage is run by the + MBR, which knows just enough to get the computer into a specific state and run the second stage. The second stage can do a little bit more, before running the third stage. The third stage finishes @@ -133,7 +147,7 @@ loader. kernel - init + &man.init.8; The kernel is then started and it begins to probe for devices and initialize them for use. Once the kernel boot @@ -154,9 +168,10 @@ The Boot Manager Master Boot Record - (MBR) + (MBR) - The code in the MBR or boot manager is sometimes referred + The code in the MBR or boot manager is + sometimes referred to as stage zero of the boot process. This section discusses two boot managers: boot0 and @@ -166,12 +181,13 @@ The <application>boot0</application> Boot Manager: - The MBR installed by &os;'s installer or + The MBR installed by &os;'s installer + or &man.boot0cfg.8; is based on /boot/boot0. The size and capability of boot0 is restricted to 446 bytes due to the slice table and 0x55AA - identifier at the end of the MBR. If + identifier at the end of the MBR. If boot0 and multiple operating systems are installed, a message similar to this example will be displayed at boot time: @@ -187,18 +203,25 @@ Default: F2 Other operating systems, in particular &windows;, will - overwrite an existing MBR if they are installed after &os;. - If this happens, or you want to replace the existing MBR - with the &os; MBR, use the following command: + overwrite an existing MBR if they are + installed after &os;. + If this happens, or to replace the existing + MBR + with the &os; MBR, use the following + command: &prompt.root; fdisk -B -b /boot/boot0 device where device is the boot disk, - such as ad0 for the first IDE disk, - ad2 for the first IDE disk on a - second IDE controller, or da0 - for the first SCSI disk. To create a custom configuration of - the MBR, refer to &man.boot0cfg.8;. + such as ad0 for the first + IDE disk, + ad2 for the first + IDE disk on a + second IDE controller, or + da0 + for the first SCSI disk. To create a + custom configuration of + the MBR, refer to &man.boot0cfg.8;. The LILO Boot Manager: @@ -235,11 +258,11 @@ label=FreeBSD constraints, they have been split into two, but are always installed together. They are copied from the combined /boot/boot by the installer or - bsdlabel. + &man.bsdlabel.8;. They are located outside file systems, in the first track of the boot slice, starting with the first sector. This is - where boot0, or any other + where boot0 (), or any other boot manager, expects to find a program to run which will continue the boot process. The number of sectors used is easily determined from the size of @@ -256,7 +279,7 @@ label=FreeBSD can provide a simple interface to choose the kernel or loader to run. - loader is much more + However, &man.loader.8; is much more sophisticated and provides a boot configuration which is run by boot2. @@ -276,7 +299,8 @@ boot: where diskslice is the disk and slice to boot from, such as ad0s1 - for the first slice on the first IDE disk. + for the first slice on the first IDE + disk. Dangerously Dedicated Mode @@ -557,8 +581,8 @@ boot: first is the default legacy virtual console command line environment. After the system finishes booting, a console login prompt is presented. The second environment is the - graphical environment provided by - Xorg. Refer to that chapter for + graphical environment as described in + . Refer to that chapter for more information on how to install and configure a graphical display manager and a graphical login manager. @@ -574,8 +598,8 @@ boot: To use larger images, up to the maximum resolution of 1024 by 768 pixels, load the VESA - module during system boot. For a custom kernel, include the + module during system boot. For a custom kernel, as + described in , include the VESA kernel configuration option. Loading VESA support provides the ability to display a splash screen image that fills the @@ -710,10 +734,10 @@ bitmap_name="/boot/splash.b boot interaction - Once the kernel is loaded by either the default loader or by boot2 which bypasses the loader, - it examines its boot flags, if any, and adjusts its behavior as + Once the kernel is loaded by either the default loader + () or by boot2 (), which bypasses the loader, + it examines any boot flags and adjusts its behavior as necessary. @@ -807,8 +831,9 @@ bitmap_name="/boot/splash.b device hints. These device hints are used by device drivers for device configuration. - Device hints may also be specified at the Stage 3 boot loader prompt. + Device hints may also be specified at the Stage 3 boot + loader prompt, as demonstrated in . Variables can be added using set, removed with unset, and viewed show. Variables set in @@ -882,7 +907,7 @@ bitmap_name="/boot/splash.b Init: Process Control Initialization - init + &man.init.8; Once the kernel has finished booting, it passes control to @@ -897,8 +922,8 @@ bitmap_name="/boot/splash.b The automatic reboot sequence makes sure that the file systems available on the system are consistent. If they are not, and &man.fsck.8; cannot fix the inconsistencies of a UFS - file system, &man.init.8; drops the system into - single-user mode so + file system, &man.init.8; drops the system into single-user + mode () so that the system administrator can resolve the problem directly. @@ -909,14 +934,14 @@ bitmap_name="/boot/splash.b single-user mode console - This mode can be reached through the automatic reboot sequence, + This mode can be reached through the automatic reboot + sequence (), the user booting with , or by setting the boot_single variable in - loader. + &man.loader.8;. It can also be reached by calling &man.shutdown.8; from - multi-user mode without + multi-user mode () without including or . If the system console is set to @@ -952,8 +977,8 @@ console none multi-user mode If &man.init.8; finds the file systems to be in order, or - once the user has finished their commands in single-user mode, the + once the user has finished their commands in single-user + mode (), the system enters multi-user mode, in which it starts the resource configuration of the system. @@ -983,7 +1008,7 @@ console none Shutdown Sequence - shutdown + &man.shutdown.8; Upon controlled shutdown using &man.shutdown.8;, @@ -997,8 +1022,8 @@ console none that support power management, use shutdown -p now to turn the power off immediately. To reboot a &os; system, use shutdown -r now. One must - be root or a member of the - operator group in order to run + be root or a member of + operator in order to run &man.shutdown.8;. One can also use &man.halt.8; and &man.reboot.8;. Refer to their manual pages and to &man.shutdown.8; for more information. From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 16:48:04 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 778A299B; Thu, 9 May 2013 16:48:04 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 6668B3CB; Thu, 9 May 2013 16:48:04 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49Gm4Fv046811; Thu, 9 May 2013 16:48:04 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49Gm4VU046810; Thu, 9 May 2013 16:48:04 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305091648.r49Gm4VU046810@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 16:48:04 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41578 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 16:48:04 -0000 Author: dru Date: Thu May 9 16:48:04 2013 New Revision: 41578 URL: http://svnweb.freebsd.org/changeset/doc/41578 Log: This patch addresses the following: - we/our - rest of acronyms - xref - removed obsolete mpd config and reworded to match current port version - pppoe port is broken, remove first reference but leave second one which references its documentation as it isn't available on the port's website; that whole section may have to be pulled as obsolete - fix dial-up to dialup A subsequent patch will fix white space. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Thu May 9 16:28:04 2013 (r41577) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Thu May 9 16:48:04 2013 (r41578) @@ -17,7 +17,7 @@ - PPP and SLIP + <acronym>PPP</acronym> and <acronym>SLIP</acronym> Synopsis @@ -25,12 +25,9 @@ PPP - - SLIP - &os; has a number of ways to link one computer to another. - To establish a network or Internet connection through a dial-up + To establish a network or Internet connection through a dialup modem, or to allow others to do so through that modem, requires the use of PPP. This chapter details how to set up modem-based communication services. @@ -136,7 +133,7 @@ - The dial-up number(s) of the + The dialup number(s) of the ISP. @@ -156,9 +153,11 @@ password - A login name and password. (Either a - regular &unix; style login and password pair, or a PAP - or CHAP login and password pair). + Either a + regular &unix; style login and password pair, or a + PAP + or CHAP login and password + pair. @@ -166,9 +165,11 @@ nameserver - The IP address of one or more name servers. - Normally, the ISP will provide two - IP addresses. If it has not provided any IP addresses, + The IP address of one or more + name servers. + Normally, the ISP will provide the + addresses for two + DNS servers. If it has not, include enable dns in ppp.conf and &man.ppp.8; will set the name servers. This @@ -184,7 +185,8 @@ - The IP address of the ISP's + The IP address of the + ISP's gateway. The gateway is the machine to connect to and will be set up as the default route. When in doubt, make one up and the @@ -192,7 +194,7 @@ will set the correct value during connection setup. - This IP number is referred to as + This IP number is referred to as HISADDR by &man.ppp.8;. @@ -205,12 +207,13 @@ - static IP address + static IP address - If the ISP provides a static IP + If the ISP provides a static + IP address and hostname, enter it. Otherwise, let the peer - assign whatever IP address it sees fit. + assign the IP address. @@ -245,16 +248,18 @@ Configuring &man.ppp.8; requires a number of files to be edited, depending on the requirements and - whether the ISP allocates IP addresses + whether the ISP allocates + IP addresses statically or dynamically. - <acronym>PPP</acronym> and Static IP - Addresses + <acronym>PPP</acronym> and Static + <acronym>IP</acronym> Addresses PPP - with static IP addresses + with static IP + addresses Edit /etc/ppp/ppp.conf so that it @@ -445,7 +450,9 @@ connecting using a &unix; style login prompt, these values are referred to by the set login command using the \U and \P - variables. When connecting using PAP or CHAP, these + variables. When connecting using + PAP + or CHAP, these values are used at authentication time. @@ -456,10 +463,12 @@ PAP CHAP - When using PAP or CHAP, there will be no login + When using PAP or + CHAP, + there will be no login and this line should be commented out or removed. - See PAP and CHAP - authentication for further details. + See for further + details. The login string is of the same chat-like syntax as the dial string. In this example, the @@ -501,19 +510,19 @@ protocol: ppp Sets the interface addresses. The string x.x.x.x should be - replaced by the IP address the provider has + replaced by the IP address the + provider has allocated. The string y.y.y.y should be - replaced by the IP address of the + replaced by the IP address of the ISP's gateway. If the ISP has not provided a gateway address, use 10.0.0.2/0. When using a guessed address, make sure to create an entry in /etc/ppp/ppp.linkup as per the - instructions for PPP - and Dynamic IP addresses. If this line is + instructions in . + If this line is omitted, &man.ppp.8; cannot run in mode. @@ -540,7 +549,7 @@ protocol: ppp It is not necessary to add an entry to ppp.linkup when using a static - IP address with &man.ppp.8; in + IP address with &man.ppp.8; in mode as the routing table entries are already correct before a connection is established. However, an entry can be created to invoke programs after @@ -554,27 +563,32 @@ protocol: ppp - <acronym>PPP</acronym> and Dynamic IP - Addresses + <acronym>PPP</acronym> and Dynamic + <acronym>IP</acronym> Addresses PPP - with dynamic IP addresses + with dynamic IP + addresses IPCP - If the service provider does not assign static IP + If the service provider does not assign static + IP addresses, &man.ppp.8; can be configured to negotiate the local and remote addresses. This is done by - guessing an IP address and allowing - &man.ppp.8; to set it up correctly using the IP - Configuration Protocol (IPCP) after connecting. The + guessing an IP address + and allowing + &man.ppp.8; to set it up correctly using the + IP + Configuration Protocol (IPCP) after + connecting. The ppp.conf configuration is the same as - PPP - and Static IP Addresses, with the following + that described in , with + the following change: 17 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.255 0.0.0.0 @@ -591,7 +605,8 @@ protocol: ppp The number after the / character is the number of bits of the address that &man.ppp.8; will insist on. These - IP numbers can be replaced, but the above example + IP numbers can be replaced, but + the above example will always work. The last argument (0.0.0.0) @@ -627,11 +642,11 @@ protocol: ppp On establishing a connection, &man.ppp.8; will look for an entry in ppp.linkup according to the - following rules: First, try to match the same label - as we used in ppp.conf. If - that fails, look for an entry for the IP address of - our gateway. This entry is a four-octet IP style - label. If we still have not found an entry, look + following rules. First, try to match the same label + used in ppp.conf. If + that fails, look for an entry for the four-octet + IP address of + the gateway. If an entry is still not found, look for the MYADDR entry. @@ -644,8 +659,9 @@ protocol: ppp default route that points to HISADDR. HISADDR will be replaced with the - IP number of the gateway as negotiated by the - IPCP. + IP number of the gateway as + negotiated by + IPCP. @@ -666,9 +682,12 @@ protocol: ppp When configuring &man.ppp.8; to receive - incoming calls on a machine connected to a LAN, decide if - packets should be forwarded to the LAN. If so, allocate - the peer an IP number from the LAN's subnet and use + incoming calls on a machine connected to a + LAN, decide if + packets should be forwarded to the local network. + If so, allocate + the peer an IP number from the local + subnet and use enable proxy in /etc/ppp/ppp.conf. Also, confirm that /etc/rc.conf contains the @@ -678,17 +697,18 @@ protocol: ppp - Which getty? + Which &man.getty.8;? - Configuring &os; for - Dial-up Services provides a good description - on enabling dial-up services using &man.getty.8;. + provides a good description + on enabling dialup services using &man.getty.8;. An alternative to &man.getty.8; is mgetty (from - comms/mgetty+sendfax - port), a smarter version of &man.getty.8; - designed with dial-up lines in mind. + url="http://mgetty.greenie.net/">mgetty, a + smarter version of &man.getty.8; + designed with dialup lines in mind. It can be installed + from the comms/mgetty+sendfax package + or port. The advantages of using &man.getty.8; is that it actively talks to modems. @@ -696,13 +716,13 @@ protocol: ppp /etc/ttys, the modem will not answer the phone. - Later versions of &man.getty.8; (from - 0.99beta onwards) also support the automatic detection of + The &os; version of &man.getty.8; + supports the automatic detection of PPP streams, allowing clients scriptless access to the server. - Refer to Mgetty and - AutoPPP for more information on + Refer to + for more information on &man.getty.8;. @@ -717,8 +737,8 @@ protocol: ppp /etc/group. Then, give the account access to one or more sections - of the configuration file using the - allow command: + of the configuration file using + allow, as seen in this example: allow users fred mary @@ -728,7 +748,8 @@ protocol: ppp - <acronym>PPP</acronym> Shells for Dynamic-IP + <title><acronym>PPP</acronym> Shells for + Dynamic-<acronym>IP</acronym> Users @@ -781,16 +802,17 @@ exec /usr/sbin/ppp -direct $IDENT - <acronym>PPP</acronym> Shells for Static-IP + <title><acronym>PPP</acronym> Shells for + Static-<acronym>IP</acronym> Users PPP shells - Create the ppp-shell file as - above, and for each account with statically assigned - IPs create a symbolic link to + Create ppp-shell as described + above, and for each account with a statically assigned + IP, create a symbolic link to ppp-shell. Consider three dialup customers, @@ -810,10 +832,10 @@ exec /usr/sbin/ppp -direct $IDENT Setting Up <filename>ppp.conf</filename> for - Dynamic-IP Users + Dynamic-IP Users - The /etc/ppp/ppp.conf file - should contain something along the lines of: + Here is a sample + /etc/ppp/ppp.conf: default: set debug phase lcp chat @@ -835,13 +857,14 @@ ttyu1: for each session. For each dialup line enabled in /etc/ttys create an entry similar to the one for ttyu0: above. Each - line should get a unique IP address from the pool of - IP addresses for dynamic users. + line should get a unique IP address + from the pool of + IP addresses for dynamic users. Setting Up <filename>ppp.conf</filename> for - Static-IP Users + Static-IP Users Along with the contents of the sample /usr/share/examples/ppp/ppp.conf @@ -859,7 +882,8 @@ mary: The file /etc/ppp/ppp.linkup should also contain routing information for each static - IP user if required. The line below would add a route + IP user if required. The line below + would add a route for the 203.14.101.0/24 network via the client's PPP link. @@ -897,7 +921,8 @@ mary: automatically spawn off a &man.ppp.8; shell. However, since the default login/password sequence does not occur it is necessary to authenticate users using - either PAP or CHAP. + either PAP or + CHAP. This section assumes the user has successfully compiled, and installed the For each dialup line enabled in /etc/ttys, create a corresponding - entry in /etc/ppp/ppp.conf. This - will happily co-exist with the definitions we created - above. + entry in /etc/ppp/ppp.conf. pap: enable pap @@ -934,14 +957,15 @@ exec /usr/sbin/ppp -direct pap$IDENTEach user logging in with this method will need to have a username/password in - /etc/ppp/ppp.secret file, or - alternatively add the following option to authenticate - users via PAP from the /etc/passwd - file. + /etc/ppp/ppp.secret. + Alternatively, add the following option to authenticate + users via PAP from + /etc/passwd: enable passwdauth - To assign some users a static IP, specify the IP + To assign some users a static IP, + specify the IP address as the third argument in /etc/ppp/ppp.secret. See /usr/share/examples/ppp/ppp.secret.sample @@ -995,29 +1019,32 @@ set nbns 203.14.100.5 - PAP and CHAP Authentication + <acronym>PAP</acronym> and <acronym>CHAP</acronym> + Authentication PAP CHAP Some ISPs set their system up so that the authentication part of the connection is done - using either the PAP or CHAP authentication mechanism. If + using either the PAP or + CHAP + authentication mechanism. If this is the case, the ISP will not give a login: during connection, but will start talking PPP immediately. - PAP is less secure than CHAP, but security is not - normally an issue here as passwords, although being sent - as plain text with PAP, are being transmitted down a + While PAP is less secure than + CHAP, + security is not + normally an issue as the clear text passwords are + transmitted down a serial line only. There is not much room for crackers to eavesdrop. - Referring back to the PPP and - Static IP addresses or PPP and - Dynamic IP addresses sections, the following + Referring back to and , the following alterations must be made: 13 set authname MyUserName @@ -1029,7 +1056,8 @@ set nbns 203.14.100.5 Line 13: - This line specifies the PAP/CHAP user name. + This line specifies the + PAP/CHAP user name. Insert the correct value for MyUserName. @@ -1040,7 +1068,9 @@ set nbns 203.14.100.5 password - This line specifies the PAP/CHAP password. + This line specifies the + PAP/CHAP + password. Insert the correct value for MyPassword. An additional line can be added, such as: @@ -1052,7 +1082,10 @@ set nbns 203.14.100.5 16 accept CHAP to make it obvious that this is the intention, - but PAP and CHAP are both accepted by + but PAP and + CHAP + are both accepted + by default. @@ -1062,8 +1095,10 @@ set nbns 203.14.100.5 The ISP will not normally - require a login into the server when using PAP or - CHAP. Therefore, disable the set + require a login into the server when using + PAP or + CHAP. Therefore, disable the + set login string. @@ -1143,7 +1178,8 @@ nat port tcp 10.0.0.2:http httphostname="foo.example.com" - If the ISP has supplied a static IP + If the ISP has supplied a static + IP address and name, it is recommended to use this name as the host name. @@ -1167,7 +1203,7 @@ ifconfig_tun0= This script is executed at network configuration time, starting the &man.ppp.8; daemon in mode. If the machine functions as - a gateway for a LAN, consider using the + a gateway for a LAN, consider using the switch. Refer to the manual page for details. @@ -1188,8 +1224,8 @@ ifconfig_tun0= &man.ppp.8;. It is probably a good idea to ensure that the - sendmail_flags line does not include the - option, otherwise + sendmail_flags line does not include + ; otherwise, &man.sendmail.8; will attempt to do a network lookup every now and then, possibly causing the machine to dial out. Try this command instead: @@ -1205,7 +1241,7 @@ ifconfig_tun0= &prompt.root; /usr/sbin/sendmail -q - To automatically use the !bg command + To automatically use !bg in ppp.linkup: 1 provider: @@ -1264,7 +1300,8 @@ ifconfig_tun0= - When using a dynamic IP address, create an entry in + When using a dynamic IP address, + create an entry in /etc/ppp/ppp.linkup. @@ -1300,9 +1337,9 @@ ifconfig_tun0= - Create a profile in this users home directory that - runs ppp -direct direct-server or - similar. + Create a profile in this user's home directory that + runs ppp -direct + direct-server. @@ -1411,7 +1448,7 @@ ifconfig_tun0= ppp ON example> enable dns - Switch to terminal mode so that we can + Switch to terminal mode to manually control the modem. ppp ON example> term @@ -1429,9 +1466,10 @@ OK CONNECT - Confirmation of the connection, if we are going to have - any connection problems, unrelated to hardware, here is where - we will attempt to resolve them. + This message confirms the connection. If there are + any connection problems, unrelated to hardware, this is the + time to + attempt to resolve them. ISP Login:myusername @@ -1441,41 +1479,43 @@ OK ISP Pass:mypassword - This time we are prompted for a password, just - reply with the password that was provided by the + At this password prompt, + enter the password that was provided by the ISP. Just like logging into &os;, the password will not echo. Shell or PPP:ppp Depending on the ISP, this prompt - may never appear. Here we are being asked if we wish to - use a shell on the provider, or to start - &man.ppp.8;. In this example, we have chosen - to use &man.ppp.8; as we want an Internet + may never appear. If it does, it provides a choice to + use a shell on the provider or to start + &man.ppp.8;. This example chooses + to use &man.ppp.8; in order to create an Internet connection. Ppp ON example> - Notice that in this example the first - has been capitalized. This shows that we have successfully - connected to the ISP. + In this example, the first + has been capitalized. This indicates a successful + connection to the ISP. PPp ON example> - We have successfully authenticated with our - ISP and are waiting for the - assigned IP address. + This indicates successful authentication with the + ISP but the + IP address has not been assigned + yet. PPP ON example> - We have made an agreement on an IP - address and successfully completed our connection. + This indicates an IP + address has been assigned and the + connection has successfully completed. PPP ON example>add default HISADDR - Here we add our default route, we need to do this before - we can talk to the outside world as currently the only + This adds a default route which is needed for successful + communication. Until this is added, the only established connection is with the peer. If this fails due to existing routes, put a bang character (!) in front of the . @@ -1500,8 +1540,8 @@ OK For a direct line that cannot seem to make a connection, turn hardware flow CTS/RTS to off with . This can occur when - connected to some PPP capable - terminal servers as PPP hangs + connected to some PPP capable + terminal servers as &man.ppp.8; hangs when it tries to write data to the communication link and then waits for a Clear To Send (CTS) signal which may never come. When using this option, @@ -1518,11 +1558,11 @@ OK ISPs. This option may be needed for the Compuserve ISP. - PPP may not return to the + &man.ppp.8; may not return to the command mode, which is usually a negotiation error where the ISP is waiting for your side to start - negotiating. At this point, using the ~p - command will force &man.ppp.8; to start + negotiating. At this point, using ~p + will force &man.ppp.8; to start sending the configuration information. If a login prompt never appears, try using @@ -1530,7 +1570,7 @@ OK authentication instead of the &unix; style in the example above. To use PAP or CHAP, add the following options to - PPP before going into terminal + &man.ppp.8; before going into terminal mode: ppp ON example> set authname myusername @@ -1566,7 +1606,7 @@ nameserver y.y.y.yISP's DNS servers. To configure &man.syslog.3; to log - PPP connections, add: + &man.ppp.8; connections, add: !ppp *.* /var/log/ppp.log @@ -1684,9 +1724,9 @@ ppp_profile="name_of_service_provider"The profile name (service tag) will be used in the PPPoE configuration entry in - ppp.conf as the provider part of the - set device command (refer to &man.ppp.8; - for details). It should look like + ppp.conf as the provider part of + set device, as described in &man.ppp.8;. + It should look like this: set device PPPoE:xl1:ISP @@ -1696,30 +1736,23 @@ ppp_profile="name_of_service_provider"Do not forget to change ISP to the profile found above. - For additional information, see: - - - - For additional information, see Cheaper - Broadband with &os; on DSL by Renaud - Waldura. - - + Broadband with &os; on + DSL. <acronym>PPPoE</acronym> with a &tm.3com; - <trademark class="registered">HomeConnect</trademark> ADSL + <trademark class="registered">HomeConnect</trademark> + <acronym>ADSL</acronym> Modem Dual Link This modem does not follow RFC 2516 - (A Method for transmitting PPP - over Ethernet (PPPoE), written - by L. Mamakos, K. Lidl, J. Evarts, D. Carrel, D. Simone, and - R. Wheeler). Instead, different packet type codes have been + url="http://www.faqs.org/rfcs/rfc2516.html">RFC + 2516. + Instead, different packet type codes have been used for the Ethernet frames. Please complain to 3Com if you think it should comply with the PPPoE @@ -1739,8 +1772,9 @@ ppp_profile="name_of_service_provider"Unfortunately, because this is a system-wide setting, it is not possible to talk to a normal PPPoE client or server and a &tm.3com; - HomeConnect ADSL - Modem at the same time. + HomeConnect + ADSL + modem at the same time. @@ -1761,30 +1795,19 @@ ppp_profile="name_of_service_provider"The following describes how to set up PPP over ATM (PPPoA). PPPoA - is a popular choice among European DSL providers. + is a popular choice among European DSL + providers. Using <acronym>PPPoA</acronym> with the Alcatel &speedtouch; USB - PPPoA support for this device is - supplied as a port in &os; because the firmware is distributed - under Alcatel's - license agreement and can not be redistributed freely - with the base system of &os;. - - To install the software, simply use the Ports Collection. Install the - net/pppoa port and follow - the instructions provided with it. - Like many USB devices, the Alcatel &speedtouch; USB needs to download firmware from the host computer to operate properly. It is possible to automate this process in &os; so that this transfer takes place whenever the device is plugged into a USB port. The following information can be - added to the /etc/usbd.conf file to + added to /etc/usbd.conf to enable this automatic firmware transfer. This file must be edited as the root user. @@ -1816,103 +1839,35 @@ ppp_profile="adsl" - Using mpd + Using <application>mpd</application> mpd can be used to connect to a - variety of services, in particular PPTP services. - mpd can be installed from the Ports - Collection, net/mpd. Many - ADSL modems require that a PPTP tunnel is created between the - modem and computer, one such modem is the Alcatel &speedtouch; + variety of services, in particular passwd + services. + mpd can be installed from the + net/mpd5 package or port. + Many + ADSL modems require a + PPTP tunnel between the + modem and computer. One such modem is the Alcatel + &speedtouch; Home. - After installing the port, configure - mpd to suit the requirements and - provider settings. The port places a set of sample - configuration files which are well documented in /usr/local/etc/mpd/. A - complete guide to configure mpd - is available in HTML format once the port has been installed. - It is placed in /usr/local/share/doc/mpd/. - Here is a sample configuration for connecting to an ADSL - service with mpd. The configuration - is spread over two files, first the - mpd.conf: - - - This example of the mpd.conf file - only works with mpd 4.x. - - - default: - load adsl - -adsl: - new -i ng0 adsl adsl - set bundle authname username - set bundle password password - set bundle disable multilink - - set link no pap acfcomp protocomp - set link disable chap - set link accept chap - set link keep-alive 30 10 - - set ipcp no vjcomp - set ipcp ranges 0.0.0.0/0 0.0.0.0/0 - - set iface route default - set iface disable on-demand - set iface enable proxy-arp - set iface idle 0 - - open - - - - The username used to authenticate with the - ISP. - - - The password used to authenticate with the - ISP. - - - - The mpd.links file contains information - about the link, or links, to establish. This - mpd.links would accompany the above - example: - - adsl: - set link type pptp - set pptp mode active - set pptp enable originate outcall - set pptp self 10.0.0.1 - set pptp peer 10.0.0.138 - - - - The IP address of the &os; computer running - mpd. - - - The IP address of the ADSL modem. For the Alcatel - &speedtouch; Home this address defaults to 10.0.0.138. - - + The installation of the port places a set of well + commented, sample + configuration files in /usr/local/etc/mpd5/. Copy + mpd.conf.sample, removing the + .sample extension, and edit it to suit the + requirements and provider settings. A complete configuration + guide in HTML format is installed to /usr/local/share/doc/mpd5/. - It is possible to initialize the connection easily by - issuing the following command as + After saving the edits, + initialize the connection as root: - &prompt.root; mpd -b adsl + &prompt.root; service mpd5 start To see the status of the connection, use: @@ -1921,19 +1876,21 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN inet 216.136.204.117 --> 204.152.186.171 netmask 0xffffffff Using mpd is the recommended - way to connect to an ADSL service with &os;. + way to connect to an ADSL service with + &os;. - Using pptpclient + Using <application>pptpclient</application> It is also possible to use &os; to connect to other PPPoA services using net/pptpclient. To use net/pptpclient - to connect to a DSL service, install the port or package and + to connect to a DSL service, install the port + or package and edit /etc/ppp/ppp.conf as root. An example section of ppp.conf is given below. For further @@ -1951,7 +1908,8 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN - The username of the account with the DSL + The username of the account with the + DSL provider. @@ -1973,8 +1931,11 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN This will open a tunnel for a PPP - session to the DSL router. Ethernet DSL modems have a - preconfigured LAN IP address to connect to. In the case of + session to the DSL router. Ethernet + DSL modems have a + preconfigured LAN IP + address to connect to. *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 20:51:47 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 4F2CDF3; Thu, 9 May 2013 20:51:47 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 3F608131; Thu, 9 May 2013 20:51:47 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49Kpkgm035674; Thu, 9 May 2013 20:51:46 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49Kpk2U035673; Thu, 9 May 2013 20:51:46 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305092051.r49Kpk2U035673@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 20:51:46 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41582 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 20:51:47 -0000 Author: dru Date: Thu May 9 20:51:46 2013 New Revision: 41582 URL: http://svnweb.freebsd.org/changeset/doc/41582 Log: White space fix only. Translators can ignore. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Thu May 9 18:37:36 2013 (r41581) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/ppp-and-slip/chapter.xml Thu May 9 20:51:46 2013 (r41582) @@ -122,7 +122,7 @@ An account with an Internet Service Provider - (ISP) for connecting using + (ISP) for connecting using PPP. @@ -166,16 +166,14 @@ The IP address of one or more - name servers. - Normally, the ISP will provide the - addresses for two + name servers. Normally, the ISP + will provide the addresses for two DNS servers. If it has not, include enable dns in - ppp.conf and - &man.ppp.8; will set the name servers. This - feature requires the ISP's - PPP implementation to support DNS - negotiation. + ppp.conf and &man.ppp.8; will set + the name servers. This feature requires the + ISP's PPP + implementation to support DNS negotiation. @@ -186,17 +184,15 @@ The IP address of the - ISP's - gateway. The gateway is the machine to connect to - and will be set up as the default - route. When in doubt, make one up and the - ISP's PPP server - will set the correct value during connection - setup. + ISP's gateway. The gateway is the + machine to connect to and will be set up as the + default route. When in doubt, + make one up and the ISP's + PPP server will set the correct + value during connection setup. This IP number is referred to as - HISADDR by - &man.ppp.8;. + HISADDR by &man.ppp.8;. @@ -211,9 +207,9 @@ If the ISP provides a static - IP - address and hostname, enter it. Otherwise, let the peer - assign the IP address. + IP address and hostname, enter it. + Otherwise, let the peer assign the IP + address. @@ -242,15 +238,13 @@ Several files located in /etc/ppp are used to - configure &man.ppp.8;. - Examples can be found in /usr/share/examples/ppp/. - Configuring &man.ppp.8; requires a number of - files to be edited, depending on the requirements and - whether the ISP allocates - IP addresses - statically or dynamically. + Configuring &man.ppp.8; requires a number of files to + be edited, depending on the requirements and whether the + ISP allocates IP + addresses statically or dynamically. <acronym>PPP</acronym> and Static @@ -297,9 +291,8 @@ <listitem> <para>Identifies the default entry. Commands in this - entry are executed automatically when - &man.ppp.8; is - run.</para> + entry are executed automatically when &man.ppp.8; + is run.</para> </listitem> </varlistentry> @@ -337,9 +330,7 @@ <para>Identifies the device to which the modem is connected. <devicename>COM1</devicename> is <filename class="devicefile">/dev/cuau0</filename> - and - <devicename>COM2</devicename> is - <filename + and <devicename>COM2</devicename> is <filename class="devicefile">/dev/cuau1</filename>.</para> </listitem> </varlistentry> @@ -451,9 +442,9 @@ values are referred to by the <command>set login</command> command using the \U and \P variables. When connecting using - <acronym>PAP</acronym> - or <acronym>CHAP</acronym>, these - values are used at authentication time.</para> + <acronym>PAP</acronym> or + <acronym>CHAP</acronym>, these values are used at + authentication time.</para> </listitem> </varlistentry> @@ -464,8 +455,7 @@ <indexterm><primary>PAP</primary></indexterm> <indexterm><primary>CHAP</primary></indexterm> <para>When using <acronym>PAP</acronym> or - <acronym>CHAP</acronym>, - there will be no login + <acronym>CHAP</acronym>, there will be no login and this line should be commented out or removed. See <xref linkend="userppp-PAPnCHAP"/> for further details.</para> @@ -511,19 +501,17 @@ protocol: ppp</screen> <para>Sets the interface addresses. The string <replaceable>x.x.x.x</replaceable> should be replaced by the <acronym>IP</acronym> address the - provider has - allocated. The string + provider has allocated. The string <replaceable>y.y.y.y</replaceable> should be replaced by the <acronym>IP</acronym> address of the <acronym>ISP</acronym>'s gateway. If the ISP has not provided a gateway address, use <hostid - role="netmask">10.0.0.2/0</hostid>. When using a + role="netmask">10.0.0.2/0</hostid>. When using a <quote>guessed</quote> address, make sure to create an entry in <filename>/etc/ppp/ppp.linkup</filename> as per the instructions in <xref linkend="userppp-dynamicIP"/>. - If this line is - omitted, &man.ppp.8; cannot run in + If this line is omitted, &man.ppp.8; cannot run in <option>-auto</option> mode.</para> </listitem> </varlistentry> @@ -551,7 +539,7 @@ protocol: ppp</screen> <filename>ppp.linkup</filename> when using a static <acronym>IP</acronym> address with &man.ppp.8; in <option>-auto</option> mode as the routing table entries - are already correct before a connection is established. + are already correct before a connection is established. However, an entry can be created to invoke programs after connection. This is explained later with the sendmail example.</para> @@ -577,18 +565,16 @@ protocol: ppp</screen> </indexterm> <para>If the service provider does not assign static - <acronym>IP</acronym> - addresses, &man.ppp.8; can be configured to - negotiate the local and remote addresses. This is done by - <quote>guessing</quote> an <acronym>IP</acronym> address - and allowing - &man.ppp.8; to set it up correctly using the + <acronym>IP</acronym> addresses, &man.ppp.8; can be + configured to negotiate the local and remote addresses. + This is done by <quote>guessing</quote> an + <acronym>IP</acronym> address and allowing &man.ppp.8; + to set it up correctly using the <acronym>IP</acronym> Configuration Protocol (<acronym>IPCP</acronym>) after - connecting. The - <filename>ppp.conf</filename> configuration is the same as - that described in <xref linkend="userppp-staticIP"/>, with - the following + connecting. The <filename>ppp.conf</filename> + configuration is the same as that described in <xref + linkend="userppp-staticIP"/>, with the following change:</para> <programlisting>17 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.255 0.0.0.0</programlisting> @@ -606,8 +592,7 @@ protocol: ppp</screen> character is the number of bits of the address that &man.ppp.8; will insist on. These <acronym>IP</acronym> numbers can be replaced, but - the above example - will always work.</para> + the above example will always work.</para> <para>The last argument (<literal>0.0.0.0</literal>) tells <acronym>PPP</acronym> to start negotiations @@ -626,10 +611,9 @@ protocol: ppp</screen> create an entry in <filename>/etc/ppp/ppp.linkup</filename>. <filename>ppp.linkup</filename> is used after a connection - has been established. At this point, - &man.ppp.8; will have assigned the interface - addresses and it will now be possible to add the routing - table entries:</para> + has been established. At this point, &man.ppp.8; will + have assigned the interface addresses and it will now be + possible to add the routing table entries:</para> <programlisting>1 provider: 2 add default HISADDR</programlisting> @@ -639,15 +623,15 @@ protocol: ppp</screen> <term>Line 1:</term> <listitem> - <para>On establishing a connection, - &man.ppp.8; will look for an entry in - <filename>ppp.linkup</filename> according to the - following rules. First, try to match the same label - used in <filename>ppp.conf</filename>. If - that fails, look for an entry for the four-octet - <acronym>IP</acronym> address of - the gateway. If an entry is still not found, look - for the <literal>MYADDR</literal> entry.</para> + <para>On establishing a connection, &man.ppp.8; will + look for an entry in <filename>ppp.linkup</filename> + according to the following rules. First, try to + match the same label used in + <filename>ppp.conf</filename>. If that fails, look + for an entry for the four-octet + <acronym>IP</acronym> address of the gateway. If + an entry is still not found, look for the + <literal>MYADDR</literal> entry.</para> </listitem> </varlistentry> @@ -655,13 +639,11 @@ protocol: ppp</screen> <term>Line 2:</term> <listitem> - <para>This line tells &man.ppp.8; to add a - default route that points to - <literal>HISADDR</literal>. + <para>This line tells &man.ppp.8; to add a default + route that points to <literal>HISADDR</literal>. <literal>HISADDR</literal> will be replaced with the <acronym>IP</acronym> number of the gateway as - negotiated by - <acronym>IPCP</acronym>.</para> + negotiated by <acronym>IPCP</acronym>.</para> </listitem> </varlistentry> </variablelist> @@ -681,14 +663,12 @@ protocol: ppp</screen> <secondary>receiving incoming calls</secondary> </indexterm> - <para>When configuring &man.ppp.8; to receive - incoming calls on a machine connected to a - <acronym>LAN</acronym>, decide if - packets should be forwarded to the local network. - If so, allocate + <para>When configuring &man.ppp.8; to receive incoming + calls on a machine connected to a + <acronym>LAN</acronym>, decide if packets should be + forwarded to the local network. If so, allocate the peer an <acronym>IP</acronym> number from the local - subnet and use - <command>enable proxy</command> in + subnet and use <command>enable proxy</command> in <filename>/etc/ppp/ppp.conf</filename>. Also, confirm that <filename>/etc/rc.conf</filename> contains the following:</para> @@ -704,36 +684,32 @@ protocol: ppp</screen> <para>An alternative to &man.getty.8; is <ulink url="http://mgetty.greenie.net/">mgetty</ulink>, a - smarter version of &man.getty.8; - designed with dialup lines in mind. It can be installed - from the <filename + smarter version of &man.getty.8; designed with dialup + lines in mind. It can be installed from the <filename role="package">comms/mgetty+sendfax</filename> package or port.</para> - <para>The advantages of using &man.getty.8; is - that it actively <emphasis>talks</emphasis> to modems. - If the port is turned off in + <para>The advantages of using &man.getty.8; is that it + actively <emphasis>talks</emphasis> to modems. If the + port is turned off in <filename>/etc/ttys</filename>, the modem will not answer the phone.</para> - <para>The &os; version of &man.getty.8; - supports the automatic detection of - <acronym>PPP</acronym> streams, allowing clients - scriptless access to the server.</para> - - <para>Refer to <xref linkend="userppp-mgetty"/> - for more information on - &man.getty.8;.</para> + <para>The &os; version of &man.getty.8; supports the + automatic detection of <acronym>PPP</acronym> streams, + allowing clients scriptless access to the server.</para> + + <para>Refer to <xref linkend="userppp-mgetty"/> for more + information on &man.getty.8;.</para> </sect4> <sect4> <title><acronym>PPP</acronym> Permissions - Typically, &man.ppp.8; is - run as the root user. To give a - user permission to run &man.ppp.8; in server - mode, add their user account to the - network group in + Typically, &man.ppp.8; is run as the + root user. To give a user permission + to run &man.ppp.8; in server mode, add their user account + to the network group in /etc/group. Then, give the account access to one or more sections @@ -749,8 +725,7 @@ protocol: ppp <acronym>PPP</acronym> Shells for - Dynamic-<acronym>IP</acronym> - Users + Dynamic-IP Users PPP shells @@ -803,8 +778,7 @@ exec /usr/sbin/ppp -direct $IDENT <acronym>PPP</acronym> Shells for - Static-<acronym>IP</acronym> - Users + Static-IP Users PPP shells @@ -858,8 +832,8 @@ ttyu1: /etc/ttys create an entry similar to the one for ttyu0: above. Each line should get a unique IP address - from the pool of - IP addresses for dynamic users. + from the pool of IP addresses for + dynamic users. @@ -883,10 +857,9 @@ mary: The file /etc/ppp/ppp.linkup should also contain routing information for each static IP user if required. The line below - would add a route - for the 203.14.101.0/24 - network via the client's PPP - link. + would add a route for the 203.14.101.0/24 network via + the client's PPP link. fred: add 203.14.101.0 netmask 255.255.255.0 HISADDR @@ -916,13 +889,12 @@ mary: By default the comms/mgetty+sendfax port comes with the AUTO_PPP option enabled - allowing &man.getty.8; to detect the LCP - phase of PPP connections and - automatically spawn off a &man.ppp.8; shell. - However, since the default login/password sequence does - not occur it is necessary to authenticate users using - either PAP or - CHAP. + allowing &man.getty.8; to detect the LCP phase of + PPP connections and automatically + spawn off a &man.ppp.8; shell. However, since the default + login/password sequence does not occur it is necessary + to authenticate users using either PAP + or CHAP. This section assumes the user has successfully compiled, and installed the enable passwdauth To assign some users a static IP, - specify the IP - address as the third argument in - /etc/ppp/ppp.secret. See + specify the IP address as the third + argument in /etc/ppp/ppp.secret. + See /usr/share/examples/ppp/ppp.secret.sample for examples. @@ -1027,18 +999,15 @@ set nbns 203.14.100.5 Some ISPs set their system up so that the authentication part of the connection is done using either the PAP or - CHAP - authentication mechanism. If + CHAP authentication mechanism. If this is the case, the ISP will not give a login: during connection, but will start talking PPP immediately. While PAP is less secure than - CHAP, - security is not - normally an issue as the clear text passwords are - transmitted down a + CHAP, security is not normally an + issue as the clear text passwords are transmitted down a serial line only. There is not much room for crackers to eavesdrop. @@ -1057,8 +1026,8 @@ set nbns 203.14.100.5 This line specifies the - PAP/CHAP user name. - Insert the correct value for + PAP/CHAP user name. Insert the + correct value for MyUserName. @@ -1069,9 +1038,8 @@ set nbns 203.14.100.5 password This line specifies the - PAP/CHAP - password. - Insert the correct value for + PAP/CHAP password. Insert the + correct value for MyPassword. An additional line can be added, such as: @@ -1083,9 +1051,7 @@ set nbns 203.14.100.5 to make it obvious that this is the intention, but PAP and - CHAP - are both accepted - by + CHAP are both accepted by default. @@ -1098,8 +1064,7 @@ set nbns 203.14.100.5 require a login into the server when using PAP or CHAP. Therefore, disable the - set - login string. + set login string. @@ -1109,10 +1074,10 @@ set nbns 203.14.100.5 Changing the &man.ppp.8; Configuration on the Fly - It is possible to talk to &man.ppp.8; - while it is running in the background, but only - if a suitable diagnostic port has been set up. To do - this, add the following line to the configuration: + It is possible to talk to &man.ppp.8; while it is + running in the background, but only if a suitable + diagnostic port has been set up. To do this, add the + following line to the configuration: set server /var/run/ppp-tun%d DiagnosticPassword 0177 @@ -1169,8 +1134,8 @@ nat port tcp 10.0.0.2:http httpPPPconfiguration - Now that &man.ppp.8; is configured, there are - a few more things to edit in + Now that &man.ppp.8; is configured, there are a few + more things to edit in /etc/rc.conf. Working from the top down in this file, make sure the @@ -1179,9 +1144,8 @@ nat port tcp 10.0.0.2:http httphostname="foo.example.com" If the ISP has supplied a static - IP - address and name, it is recommended to use this name as the - host name. + IP address and name, it is recommended + to use this name as the host name. Look for the network_interfaces variable. To configure the system to dial the @@ -1218,31 +1182,30 @@ ifconfig_tun0= routed - It is important that the &man.routed.8; - daemon is not started, as &man.routed.8; tends - to delete the default routing table entries created by - &man.ppp.8;. + It is important that the &man.routed.8; daemon is not + started, as &man.routed.8; tends to delete the default + routing table entries created by &man.ppp.8;. It is probably a good idea to ensure that the sendmail_flags line does not include - ; otherwise, - &man.sendmail.8; will attempt to do a network - lookup every now and then, possibly causing the machine - to dial out. Try this command instead: + ; otherwise, &man.sendmail.8; will + attempt to do a network lookup every now and then, possibly + causing the machine to dial out. Try this command + instead: sendmail_flags="-bd" Sendmail - The downside is that &man.sendmail.8; must be - forced to re-examine the mail queue whenever the + The downside is that &man.sendmail.8; must be forced + to re-examine the mail queue whenever the PPP link is up by typing: &prompt.root; /usr/sbin/sendmail -q - To automatically use !bg - in ppp.linkup: + To automatically use !bg in + ppp.linkup: 1 provider: 2 delete ALL @@ -1264,8 +1227,8 @@ ifconfig_tun0= and then dial provider to start the PPP session, or, to configure - &man.ppp.8; to establish sessions automatically - when there is outbound traffic and there is no existing + &man.ppp.8; to establish sessions automatically when there + is outbound traffic and there is no existing start_if.tun0 script, type: &prompt.root; ppp -auto provider @@ -1324,8 +1287,7 @@ ifconfig_tun0= - Ensure that the - Ensure that the tunN device file is available in the /dev directory. @@ -1384,12 +1346,11 @@ ifconfig_tun0= using PPP over a modem connection. Some ISPs present the ssword prompt, and others will present - password; if the &man.ppp.8; - script is not written accordingly, the login attempt will - fail. The most common way to debug &man.ppp.8; - connections is by connecting manually. The following - information walks through a manual connection step by - step. + password; if the &man.ppp.8; script is not + written accordingly, the login attempt will fail. The most + common way to debug &man.ppp.8; connections is by connecting + manually. The following information walks through a manual + connection step by step. Check the Device Nodes @@ -1401,9 +1362,8 @@ ifconfig_tun0= The uart device is already included in the GENERIC kernel, so no - additional steps are necessary in this case. Just - check the &man.dmesg.8; output for the modem - device with: + additional steps are necessary in this case. Just check the + &man.dmesg.8; output for the modem device with: &prompt.root; dmesg | grep uart @@ -1420,19 +1380,18 @@ ifconfig_tun0= Connecting Manually Connecting to the Internet by manually controlling - &man.ppp.8; is quick, easy, and a great way to - debug a connection or just get information on how the + &man.ppp.8; is quick, easy, and a great way to debug a + connection or just get information on how the ISP treats &man.ppp.8; client connections. The following examples use example as the hostname of the - machine running &man.ppp.8;. To start - &man.ppp.8;: + machine running &man.ppp.8;. To start &man.ppp.8;: &prompt.root; ppp This sets the modem device to cuau1: - + ppp ON example> set device /dev/cuau1 This sets the connection speed to 115,200 @@ -1440,16 +1399,15 @@ ifconfig_tun0= ppp ON example> set speed 115200 - This tells &man.ppp.8; to configure the - resolver and add the nameserver lines to - /etc/resolv.conf. If - &man.ppp.8; cannot determine the hostname, it can - manually be set later. + This tells &man.ppp.8; to configure the resolver and add + the nameserver lines to + /etc/resolv.conf. If &man.ppp.8; cannot + determine the hostname, it can manually be set later. ppp ON example> enable dns - Switch to terminal mode to - manually control the modem. + Switch to terminal mode to manually + control the modem. ppp ON example> term @@ -1460,16 +1418,15 @@ type '~h' for help OK atdt123456789 - Use &man.at.1; to initialize the modem, - then type atdt and the number for the + Use &man.at.1; to initialize the modem, then type + atdt and the number for the ISP to begin the dial in process. CONNECT This message confirms the connection. If there are any connection problems, unrelated to hardware, this is the - time to - attempt to resolve them. + time to attempt to resolve them. ISP Login:myusername @@ -1479,25 +1436,23 @@ OK ISP Pass:mypassword - At this password prompt, - enter the password that was provided by the - ISP. Just like logging into - &os;, the password will not echo. + At this password prompt, enter the password that was + provided by the ISP. Just like logging + into &os;, the password will not echo. Shell or PPP:ppp Depending on the ISP, this prompt may never appear. If it does, it provides a choice to - use a shell on the provider or to start - &man.ppp.8;. This example chooses - to use &man.ppp.8; in order to create an Internet - connection. + use a shell on the provider or to start &man.ppp.8;. This + example chooses to use &man.ppp.8; in order to create an + Internet connection. Ppp ON example> - In this example, the first - has been capitalized. This indicates a successful - connection to the ISP. + In this example, the first has been + capitalized. This indicates a successful connection to the + ISP. PPp ON example> @@ -1508,15 +1463,14 @@ OK PPP ON example> - This indicates an IP - address has been assigned and the - connection has successfully completed. + This indicates an IP address has been + assigned and the connection has successfully completed. PPP ON example>add default HISADDR This adds a default route which is needed for successful - communication. Until this is added, the only - established connection is with the peer. If this fails due to + communication. Until this is added, the only established + connection is with the peer. If this fails due to existing routes, put a bang character (!) in front of the . Alternatively, set this before making the actual connection @@ -1529,8 +1483,8 @@ OK z. If PPP instead returns to ppp, the connection has been lost. An - uppercase P indicates a - connection to the ISP and a lowercase + uppercase P indicates a connection to the + ISP and a lowercase p indicates that the connection has been lost. &man.ppp.8; only has these 2 states. @@ -1541,12 +1495,12 @@ OK turn hardware flow CTS/RTS to off with . This can occur when connected to some PPP capable - terminal servers as &man.ppp.8; hangs - when it tries to write data to the communication link and - then waits for a Clear To Send (CTS) - signal which may never come. When using this option, - include , which may be required - to defeat hardware which is dependent on passing certain + terminal servers as &man.ppp.8; hangs when it tries to + write data to the communication link and then waits for a + Clear To Send (CTS) signal which may + never come. When using this option, include + , which may be required to + defeat hardware which is dependent on passing certain characters from end to end, such as XON/XOFF. See &man.ppp.8; for more information on how this option is used. @@ -1558,20 +1512,19 @@ OK ISPs. This option may be needed for the Compuserve ISP. - &man.ppp.8; may not return to the - command mode, which is usually a negotiation error where - the ISP is waiting for your side to start + &man.ppp.8; may not return to the command mode, which + is usually a negotiation error where the + ISP is waiting for your side to start negotiating. At this point, using ~p - will force &man.ppp.8; to start - sending the configuration information. + will force &man.ppp.8; to start sending the configuration + information. If a login prompt never appears, try using PAP or CHAP authentication instead of the &unix; style in the example above. To use PAP or CHAP, add the following options to - &man.ppp.8; before going into terminal - mode: + &man.ppp.8; before going into terminal mode: ppp ON example> set authname myusername @@ -1605,8 +1558,8 @@ nameserver y.y.y.yIP address of the ISP's DNS servers. - To configure &man.syslog.3; to log - &man.ppp.8; connections, add: + To configure &man.syslog.3; to log &man.ppp.8; + connections, add: !ppp *.* /var/log/ppp.log @@ -1726,34 +1679,33 @@ ppp_profile="name_of_service_provider"PPPoE configuration entry in ppp.conf as the provider part of set device, as described in &man.ppp.8;. - It should look like - this: + It should look like this: set device PPPoE:xl1:ISP Do not forget to change xl1 to the proper device for the Ethernet card. + Do not forget to change ISP to the profile found above. For additional information, see Cheaper - Broadband with &os; on - DSL. + url="http://renaud.waldura.com/doc/freebsd/pppoe/">Cheaper + Broadband with &os; on + DSL. <acronym>PPPoE</acronym> with a &tm.3com; <trademark class="registered">HomeConnect</trademark> - <acronym>ADSL</acronym> - Modem Dual Link + ADSL Modem Dual Link This modem does not follow RFC 2516. - Instead, different packet type codes have been - used for the Ethernet frames. Please complain to 3Com if you think it should comply with the PPPoE specification. @@ -1773,8 +1725,7 @@ ppp_profile="name_of_service_provider"PPPoE client or server and a &tm.3com; HomeConnect - ADSL - modem at the same time. + ADSL modem at the same time. @@ -1807,9 +1758,9 @@ ppp_profile="name_of_service_provider"/etc/usbd.conf to - enable this automatic firmware transfer. This file must be - edited as the root user. + added to /etc/usbd.conf to enable this + automatic firmware transfer. This file must be edited as + the root user. device "Alcatel SpeedTouch USB" devname "ugen[0-9]+" @@ -1823,9 +1774,8 @@ ppp_profile="name_of_service_provider"usbd_enable="YES" - It is also possible to set up - &man.ppp.8; to dial up at startup. To do - this add the following lines to + It is also possible to set up &man.ppp.8; to dial up at + startup. To do this add the following lines to /etc/rc.conf: ppp_enable="YES" @@ -1843,19 +1793,14 @@ ppp_profile="adsl" mpd can be used to connect to a variety of services, in particular passwd - services. - mpd can be installed from the - net/mpd5 package or port. - Many - ADSL modems require a - PPTP tunnel between the - modem and computer. One such modem is the Alcatel - &speedtouch; - Home. + services. mpd can be installed + from the net/mpd5 package + or port. Many ADSL modems require a + PPTP tunnel between the modem and computer. + One such modem is the Alcatel &speedtouch; Home. The installation of the port places a set of well - commented, sample - configuration files in /usr/local/etc/mpd5/. Copy mpd.conf.sample, removing the .sample extension, and edit it to suit the @@ -1863,8 +1808,7 @@ ppp_profile="adsl" guide in HTML format is installed to /usr/local/share/doc/mpd5/. - After saving the edits, - initialize the connection as + After saving the edits, initialize the connection as root: &prompt.root; service mpd5 start @@ -1909,8 +1853,7 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN The username of the account with the - DSL - provider. + DSL provider. @@ -1932,15 +1875,14 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN This will open a tunnel for a PPP session to the DSL router. Ethernet - DSL modems have a - preconfigured LAN IP - address to connect to. - In the case of - the Alcatel &speedtouch; Home, this address is 10.0.0.138. The router - documentation should indicate which address the device - uses. To open the tunnel and start a PPP - session execute the following command: + DSL modems have a preconfigured + LAN IP address to + connect to. In the case of the Alcatel &speedtouch; Home, + this address is 10.0.0.138. + The router documentation should indicate which address the + device uses. To open the tunnel and start a + PPP session execute the following + command: &prompt.root; pptp address adsl @@ -1953,10 +1895,10 @@ ng0: flags=88d1<UP,POINTOPOINT,RUNNIN A tun virtual tunnel device will be created for interaction between the - pptp and - &man.ppp.8; processes. Once the prompt is - returned, or the pptp process has - confirmed a connection, examine the tunnel: + pptp and &man.ppp.8; processes. + Once the prompt is returned, or the + pptp process has confirmed a + connection, examine the tunnel: &prompt.user; ifconfig tun0 tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500 @@ -1964,10 +1906,10 @@ tun0: flags=8051<UP,POINTOPOINT,RUNNI Opened by PID 918 If unable to connect, check the router configuration, - which is usually accessible via - &man.telnet.1; or a web browser. Examine - the output of pptp and the contents of - /var/log/ppp.log for clues. + which is usually accessible via &man.telnet.1; or a web + browser. Examine the output of pptp and + the contents of /var/log/ppp.log for + clues. From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 20:54:52 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 39F61157; Thu, 9 May 2013 20:54:52 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 2945F147; Thu, 9 May 2013 20:54:52 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49Ksq7P036208; Thu, 9 May 2013 20:54:52 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49Ksq3D036207; Thu, 9 May 2013 20:54:52 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305092054.r49Ksq3D036207@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 20:54:52 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41583 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 20:54:52 -0000 Author: dru Date: Thu May 9 20:54:51 2013 New Revision: 41583 URL: http://svnweb.freebsd.org/changeset/doc/41583 Log: White space fix only. Translators can ignore. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Thu May 9 20:51:46 2013 (r41582) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Thu May 9 20:54:51 2013 (r41583) @@ -16,9 +16,9 @@ The process of starting a computer and loading the operating system is referred to as the bootstrap process, - or simply booting. &os;'s boot process - provides a great deal of flexibility in customizing what happens - when the system starts, including the ability to select from + or simply booting. &os;'s boot process provides + a great deal of flexibility in customizing what happens when + the system starts, including the ability to select from different operating systems installed on the same computer, different versions of the same operating system, or a different installed kernel. @@ -81,18 +81,15 @@ On x86 hardware the Basic Input/Output System - (BIOS) is - responsible for loading the operating system. To do this, the - BIOS looks on the hard disk for the Master - Boot Record (MBR), - which must be located on a specific place on the disk. The - BIOS - has enough knowledge to load and run the MBR, - and assumes that - the MBR can then carry out the rest of the - tasks involved in - loading the operating system, possibly with the help of the - BIOS. + (BIOS) is responsible for loading the + operating system. To do this, the BIOS + looks on the hard disk for the Master Boot Record + (MBR), which must be located on a specific + place on the disk. The BIOS has enough + knowledge to load and run the MBR, and + assumes that the MBR can then carry out the + rest of the tasks involved in loading the operating system, + possibly with the help of the BIOS. Master Boot Record MBR) @@ -102,14 +99,13 @@ Boot Loader The code within the MBR is usually - referred to as a - boot manager, especially when it interacts - with the user. In this case, the boot manager usually has more - code in the first track of the disk or - within the file system of some operating systems. A boot - manager is sometimes also - called a boot loader, but &os; uses that - term for a later stage of booting. Popular boot managers + referred to as a boot manager, especially + when it interacts with the user. In this case, the boot + manager usually has more code in the first + track of the disk or within the file + system of some operating systems. A boot manager is sometimes + also called a boot loader, but &os; uses + that term for a later stage of booting. Popular boot managers include boot0, also called Boot Easy, the standard &os; boot manager, Grub, @@ -119,14 +115,12 @@ MBR. If only one operating system is installed, a standard PC - MBR - will suffice. This MBR searches for the - first bootable (active) + MBR will suffice. This + MBR searches for the first bootable (active) slice on the disk, and then runs the code on that slice to load the remainder of the operating system. By default, the - MBR - installed by &man.fdisk.8; is such an MBR and - is based on + MBR installed by &man.fdisk.8; is such an + MBR and is based on /boot/mbr. If multiple operating systems are present, a different boot @@ -136,15 +130,14 @@ The remainder of the &os; bootstrap system is divided into three stages. The first stage is run by the - MBR, which - knows just enough to get the computer into a specific state and - run the second stage. The second stage can do a little bit - more, before running the third stage. The third stage finishes - the task of loading the operating system. The work is split - into three stages because PC standards put limits on the size of - the programs that can be run at stages one and two. Chaining - the tasks together allows &os; to provide a more flexible - loader. + MBR, which knows just enough to get the + computer into a specific state and run the second stage. The + second stage can do a little bit more, before running the + third stage. The third stage finishes the task of loading the + operating system. The work is split into three stages because + PC standards put limits on the size of the programs that can + be run at stages one and two. Chaining the tasks together + allows &os; to provide a more flexible loader. kernel &man.init.8; @@ -171,9 +164,8 @@ (MBR) The code in the MBR or boot manager is - sometimes referred - to as stage zero of the boot process. - This section discusses two boot managers: + sometimes referred to as stage zero of + the boot process. This section discusses two boot managers: boot0 and LILO. @@ -182,8 +174,7 @@ Manager: The MBR installed by &os;'s installer - or - &man.boot0cfg.8; is based on + or &man.boot0cfg.8; is based on /boot/boot0. The size and capability of boot0 is restricted to 446 bytes due to the slice table and 0x55AA @@ -204,24 +195,21 @@ Default: F2 Other operating systems, in particular &windows;, will overwrite an existing MBR if they are - installed after &os;. - If this happens, or to replace the existing - MBR - with the &os; MBR, use the following - command: + installed after &os;. If this happens, or to replace the + existing MBR with the &os; + MBR, use the following command: &prompt.root; fdisk -B -b /boot/boot0 device where device is the boot disk, such as ad0 for the first - IDE disk, - ad2 for the first - IDE disk on a - second IDE controller, or + IDE disk, ad2 + for the first IDE disk on a second + IDE controller, or da0 for the first SCSI disk. To create a - custom configuration of - the MBR, refer to &man.boot0cfg.8;. + custom configuration of the MBR, refer to + &man.boot0cfg.8;. The LILO Boot Manager: @@ -279,9 +267,9 @@ label=FreeBSD can provide a simple interface to choose the kernel or loader to run. - However, &man.loader.8; is much more - sophisticated and provides a boot configuration which is run - by boot2. + However, &man.loader.8; is much more sophisticated and + provides a boot configuration which is run by + boot2. <filename>boot2</filename> Screenshot @@ -581,10 +569,10 @@ boot: first is the default legacy virtual console command line environment. After the system finishes booting, a console login prompt is presented. The second environment is the - graphical environment as described in - . Refer to that chapter for - more information on how to install and configure a graphical - display manager and a graphical login manager. + graphical environment as described in . + Refer to that chapter for more information on how to install + and configure a graphical display manager and a graphical + login manager. Splash Screen Function @@ -690,8 +678,8 @@ bitmap_name="/boot/splash.b or bluewave.pcx. - Other interesting - loader.conf options include: + Other interesting loader.conf + options include: @@ -736,8 +724,8 @@ bitmap_name="/boot/splash.b Once the kernel is loaded by either the default loader () or by boot2 (), which bypasses the loader, - it examines any boot flags and adjusts its behavior as + linkend="boot-boot1"/>), which bypasses the loader, it + examines any boot flags and adjusts its behavior as necessary. @@ -923,9 +911,8 @@ bitmap_name="/boot/splash.b systems available on the system are consistent. If they are not, and &man.fsck.8; cannot fix the inconsistencies of a UFS file system, &man.init.8; drops the system into single-user - mode () so - that the system administrator can resolve the problem - directly. + mode () so that the system + administrator can resolve the problem directly. @@ -935,10 +922,9 @@ bitmap_name="/boot/splash.b console This mode can be reached through the automatic reboot - sequence (), - the user booting with , or by setting - the boot_single variable in - &man.loader.8;. + sequence (), the user booting + with , or by setting the boot_ + single variable in &man.loader.8;. It can also be reached by calling &man.shutdown.8; from multi-user mode () without @@ -978,9 +964,9 @@ console none If &man.init.8; finds the file systems to be in order, or once the user has finished their commands in single-user - mode (), the - system enters multi-user mode, in which it starts the - resource configuration of the system. + mode (), the system enters + multi-user mode, in which it starts the resource configuration + of the system. Resource Configuration (rc) From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 20:56:49 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 535711BC; Thu, 9 May 2013 20:56:49 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 43D9015D; Thu, 9 May 2013 20:56:49 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49KunSo036667; Thu, 9 May 2013 20:56:49 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49KuncN036666; Thu, 9 May 2013 20:56:49 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305092056.r49KuncN036666@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 20:56:49 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41584 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 20:56:49 -0000 Author: dru Date: Thu May 9 20:56:48 2013 New Revision: 41584 URL: http://svnweb.freebsd.org/changeset/doc/41584 Log: White space fix only. Translators can ignore. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Thu May 9 20:54:51 2013 (r41583) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml Thu May 9 20:56:48 2013 (r41584) @@ -87,8 +87,8 @@ &os; can be used in various ways. One of them is typing commands to a text terminal. A lot of the flexibility and power - of a &unix; operating system is readily available - when using &os; this way. This section describes what + of a &unix; operating system is readily available when using + &os; this way. This section describes what terminals and consoles are, and how to use them in &os;. @@ -146,14 +146,14 @@ login: Type the username that was configured during system installation, as described in , and - press Enter. Then enter the password - associated with the username and press Enter. - The password is not echoed for security + linkend="bsdinstall-addusers"/>, and press + Enter. Then enter the password associated + with the username and press Enter. The + password is not echoed for security reasons. - Once the correct password is input, the message of - the day (MOTD) will be displayed followed + Once the correct password is input, the message of the + day (MOTD) will be displayed followed by a command prompt (a #, $, or % character). You are now logged into the &os; console and ready to try the @@ -229,10 +229,10 @@ ttyv8 "/usr/X11R6/bin/xdm -nodaemon" Single User Mode Console A detailed description of single user mode - can be found in . - There is only one console when &os; is in single user mode as - no other virtual consoles are available in this mode. The - settings for single user mode are found in this section of + can be found in . There is + only one console when &os; is in single user mode as no other + virtual consoles are available in this mode. The settings + for single user mode are found in this section of /etc/ttys: # name getty type status comments @@ -250,12 +250,11 @@ console none without prompting for a password. Be careful when changing this setting to - insecure. If - the root password is forgotten, booting - into - single user mode is still possible, but may be difficult for - someone who is not comfortable with the &os; booting - process. + insecure. If the + root password is forgotten, booting + into single user mode is still possible, but may be + difficult for someone who is not comfortable with the &os; + booting process. @@ -419,10 +418,10 @@ total 530 write, and execute permissions. The executable bit for a directory has a slightly different meaning than that of files. When a directory is marked executable, it means it is possible - to change into that directory using - &man.cd.1;. This also means that it is - possible to access the files within that directory, subject to - the permissions on the files themselves. + to change into that directory using &man.cd.1;. This also + means that it is possible to access the files within that + directory, subject to the permissions on the files + themselves. In order to perform a directory listing, the read permission must be set on the directory. In order to delete a file that @@ -583,10 +582,9 @@ total 530 In addition to file permissions, &os; supports the use of file flags. These flags add an additional - level of security and control over files, but not - directories. With file flags, even - root can be prevented from removing or - altering files. + level of security and control over files, but not directories. + With file flags, even root can be + prevented from removing or altering files. File flags are modified using &man.chflags.1;. For example, to enable the system undeletable flag on the file @@ -675,8 +673,8 @@ total 530 To view this in real time, open two terminals. On - one, type passwd as a normal - user. While it waits for a new password, check the process + one, type passwd as a normal user. + While it waits for a new password, check the process table and look at the user information for &man.passwd.1;: @@ -692,9 +690,9 @@ Old Password: trhodes 5232 0.0 0.2 3420 1608 0 R+ 2:10AM 0:00.00 grep passwd root 5211 0.0 0.2 3620 1724 2 I+ 2:09AM 0:00.01 passwd - Although &man.passwd.1; is run - as a normal user, it is using the effective - UID of root. + Although &man.passwd.1; is run as a normal user, it is + using the effective UID of + root. The setgid permission performs the same function as the setuid permission; @@ -704,8 +702,7 @@ root 5211 0.0 0.2 3620 1724 2 user who started the process. To set the setgid permission on a - file, provide &man.chmod.1; with a leading two - (2): + file, provide &man.chmod.1; with a leading two (2): &prompt.root; chmod 2755 sgidexample.sh @@ -960,26 +957,26 @@ root 5211 0.0 0.2 3620 1724 2 /usr/local/ Local executables and libraries. Also used as - the default destination for the &os; ports - framework. Within - /usr/local, the + the default destination for the &os; ports framework. + Within /usr/local, the general layout sketched out by &man.hier.7; for /usr should be used. Exceptions are the man directory, which is - directly under - /usr/local - rather than under - /usr/local/share, - and the ports documentation is in - share/doc/port. + directly under /usr/local + rather than under /usr/local/share, + and the ports documentation is in share/doc/port. /usr/obj/ Architecture-specific target tree produced by - building the - /usr/src + building the /usr/src tree. @@ -1044,8 +1041,8 @@ root 5211 0.0 0.2 3620 1724 2 /var/tmp/ Temporary files which are usually preserved - across a system reboot, unless - /var is a + across a system reboot, unless /var is a memory-based file system. @@ -1071,42 +1068,40 @@ root 5211 0.0 0.2 3620 1724 2 Files are stored in directories. A directory may contain no files, or it may contain many hundreds of files. A directory - can also contain other directories, allowing a - hierarchy of directories within one another in order to organize + can also contain other directories, allowing a hierarchy of + directories within one another in order to organize data. Files and directories are referenced by giving the file or directory name, followed by a forward slash, /, followed by any other directory names that - are necessary. For example, if the directory - foo contains a directory + are necessary. For example, if the directory foo contains a directory bar which contains the file readme.txt, the full name, or path, to the file is foo/bar/readme.txt. Note that this is - different from &windows; which uses - \ to separate file and directory - names. &os; does not use drive letters, or other drive names in - the path. For example, one would not type - c:/foo/bar/readme.txt on &os;. + different from &windows; which uses \ to + separate file and directory names. &os; does not use drive + letters, or other drive names in the path. For example, one + would not type c:/foo/bar/readme.txt on + &os;. Directories and files are stored in a file system. Each file system contains exactly one directory at the very top level, called the root directory for that - file system. This root directory can contain other - directories. One file system is designated the - root file system or /. - Every other file system is mounted under - the root file system. No matter how many disks are on the - &os; system, every directory appears to be part of the same - disk. - - Consider three file systems, called - A, B, and - C. Each file system has one root directory, - which contains two other directories, called - A1, A2 (and likewise - B1, B2 and + file system. This root directory can contain other directories. + One file system is designated the root file + system or /. Every other file + system is mounted under the root file + system. No matter how many disks are on the &os; system, every + directory appears to be part of the same disk. + + Consider three file systems, called A, + B, and C. Each file + system has one root directory, which contains two other + directories, called A1, A2 + (and likewise B1, B2 and C1, C2). Call A the root file system. If @@ -1130,11 +1125,11 @@ root 5211 0.0 0.2 3620 1724 2 A file system must be mounted on to a directory in another - file system. When mounting file system - B on to the directory A1, - the root directory of B replaces - A1, and the directories in - B appear accordingly: + file system. When mounting file system B + on to the directory A1, the root directory + of B replaces A1, and + the directories in B appear + accordingly: @@ -1156,10 +1151,9 @@ root 5211 0.0 0.2 3620 1724 2 Any files that are in the B1 or B2 directories can be reached with the path - /A1/B1 or - /A1/B2 as - necessary. Any files that were in - /A1 have + /A1/B1 or /A1/B2 as necessary. Any files + that were in /A1 have been temporarily hidden. They will reappear if B is unmounted from A. @@ -1187,9 +1181,8 @@ root 5211 0.0 0.2 3620 1724 2 and the paths would be - /A2/B1 and - /A2/B2 - respectively. + /A2/B1 and /A2/B2 respectively. File systems can be mounted on top of one another. Continuing the last example, the C file @@ -1264,9 +1257,9 @@ root 5211 0.0 0.2 3620 1724 2 mount options. For example, the root file system can be mounted read-only, making it impossible for users to inadvertently delete or edit a critical file. - Separating user-writable file systems, such as - /home, from other - file systems allows them to be mounted + Separating user-writable file systems, such as /home, from other file + systems allows them to be mounted nosuid. This option prevents the suid/guid bits on executables stored on the file system from taking effect, @@ -1283,10 +1276,9 @@ root 5211 0.0 0.2 3620 1724 2 - &os;'s file systems are robust if - power is lost. However, a power loss at a critical point - could - still damage the structure of the file system. By splitting + &os;'s file systems are robust if power is lost. + However, a power loss at a critical point could still + damage the structure of the file system. By splitting data over multiple file systems it is more likely that the system will still come up, making it easier to restore from backup as necessary. @@ -1379,10 +1371,10 @@ root 5211 0.0 0.2 3620 1724 2 Each partition-that-contains-a-file-system is stored in what - &os; calls a slice. Slice is - &os;'s term for what the common call partitions, and again, - this is because of &os;'s &unix; background. Slices are - numbered, starting at 1, through to 4. + &os; calls a slice. Slice is &os;'s + term for what the common call partitions, and again, this is + because of &os;'s &unix; background. Slices are numbered, + starting at 1, through to 4. slices partitions @@ -1403,17 +1395,18 @@ root 5211 0.0 0.2 3620 1724 2 partitions, which are represented as letters from a to h. This letter is appended to the device name, so - da0a is the a partition on - the first da drive, which is dangerously - dedicated. ad1s3e is - the fifth partition in the third slice of the second IDE disk - drive. + da0a is the + a partition on the first + da drive, which is dangerously + dedicated. ad1s3e + is the fifth partition in the third slice of the second IDE + disk drive. Finally, each disk on the system is identified. A disk name starts with a code that indicates the type of disk, and then a number, indicating which disk it is. Unlike slices, disk - numbering starts at 0. Common codes are - listed in . + numbering starts at 0. Common codes are listed in . When referring to a partition, include the disk name, s, the slice number, and then the partition @@ -1567,12 +1560,11 @@ root 5211 0.0 0.2 3620 1724 2 The file system is best visualized as a tree, rooted, as it were, at /. - /dev, - /usr, and the - other directories in the root directory are branches, which may - have their own branches, such as - /usr/local, and so - on. + /dev, /usr, and the other directories + in the root directory are branches, which may have their own + branches, such as /usr/local, and so on. root file system There are various reasons to house some of these @@ -1582,15 +1574,13 @@ root 5211 0.0 0.2 3620 1724 2 spool/, and various types of temporary files, and as such, may get filled up. Filling up the root file system is not a good idea, so splitting /var from - / is often - favorable. + class="directory">/var from / is often favorable. Another common reason to contain certain directory trees on other file systems is if they are to be housed on separate physical disks, or are separate virtual disks, such as Network - File System mounts, described in - , + File System mounts, described in , or CDROM drives. @@ -1641,8 +1631,8 @@ root 5211 0.0 0.2 3620 1724 2 options - Either for read-write - file systems, or for read-only file + Either for read-write file + systems, or for read-only file systems, followed by any other options that may be needed. A common option is for file systems not normally mounted during the boot @@ -1845,28 +1835,27 @@ root 5211 0.0 0.2 3620 1724 2 processes that are run by &os;. Each process is uniquely identified by a number called a - process ID - (PID). Similar to files, each process - has one owner and group, and the owner and group permissions are - used to determine which files and devices the process can open. - Most processes also have a parent process that started them. - For example, the shell is a process, and any command started in - the shell is a process which has the shell as its parent - process. The exception is a special process called - &man.init.8; which is always the first process to start at boot - time and which always has a PID of 1. + process ID (PID). + Similar to files, each process has one owner and group, and + the owner and group permissions are used to determine which + files and devices the process can open. Most processes also + have a parent process that started them. For example, the + shell is a process, and any command started in the shell is a + process which has the shell as its parent process. The + exception is a special process called &man.init.8; which is + always the first process to start at boot time and which always + has a PID of 1. To see the processes on the system, use &man.ps.1; and &man.top.1;. To display a static list of the currently running processes, their PIDs, how much memory they - are using, and the - command they were started with, use &man.ps.1;. To - display all the running processes and update the display every - few seconds in order to interactively see what the computer - is doing, use &man.top.1;. + are using, and the command they were started with, use + &man.ps.1;. To display all the running processes and update + the display every few seconds in order to interactively see + what the computer is doing, use &man.top.1;. - By default, &man.ps.1; only shows the commands - that are running and owned by the user. For example: + By default, &man.ps.1; only shows the commands that are + running and owned by the user. For example: &prompt.user; ps PID TT STAT TIME COMMAND @@ -1888,16 +1877,15 @@ root 5211 0.0 0.2 3620 1724 2 The output from &man.ps.1; is organized into a number of columns. The PID column displays the process ID. PIDs are assigned starting at 1, go up - to 99999, then wrap - around back to the beginning. However, a PID - is not reassigned - if it is already in use. The TT column shows - the tty the program is running on and STAT - shows the program's state. TIME is the - amount of time the program has been running on the CPU. This is - usually not the elapsed time since the program was started, as - most programs spend a lot of time waiting for things to happen - before they need to spend time on the CPU. Finally, + to 99999, then wrap around back to the beginning. However, a + PID is not reassigned if it is already in + use. The TT column shows the tty the program + is running on and STAT shows the program's + state. TIME is the amount of time the + program has been running on the CPU. This is usually not the + elapsed time since the program was started, as most programs + spend a lot of time waiting for things to happen before they + need to spend time on the CPU. Finally, COMMAND is the command that was used to start the program. @@ -1933,26 +1921,24 @@ Swap: 256M Total, 38M Used, 217M Free, 1 The output is split into two sections. The header (the first five lines) shows the PID of the last - process to run, the - system load averages (which are a measure of how busy the system - is), the system uptime (time since the last reboot) and the - current time. The other figures in the header relate to how - many processes are running (47 in this case), how much memory - and swap space has been used, and how much time the system is - spending in different CPU states. + process to run, the system load averages (which are a measure + of how busy the system is), the system uptime (time since the + last reboot) and the current time. The other figures in the + header relate to how many processes are running (47 in this + case), how much memory and swap space has been used, and how + much time the system is spending in different CPU states. Below the header is a series of columns containing similar information to the output from &man.ps.1;, such as the - PID, - username, amount of CPU time, and the command that started the - process. By default, &man.top.1; also displays the amount of - memory space taken by the process. This is split into two - columns: one for total size and one for resident size. Total - size is how much memory the application has needed and the - resident size is how much it is actually using at the moment. - In this example, mutt has - required almost 8 MB of RAM, but is currently only using - 5 MB. + PID, username, amount of CPU time, and the + command that started the process. By default, &man.top.1; also + displays the amount of memory space taken by the process. + This is split into two columns: one for total size and one for + resident size. Total size is how much memory the application + has needed and the resident size is how much it is actually + using at the moment. In this example, + mutt has required almost 8 MB + of RAM, but is currently only using 5 MB. &man.top.1; automatically updates the display every two seconds. A different interval can be specified with @@ -1980,13 +1966,12 @@ Swap: 256M Total, 38M Used, 217M Free, 1 There is a convention to name programs that normally run as daemons with a trailing d. BIND is the Berkeley Internet Name - Domain, but the actual program that executes is - &man.named.8;. The Apache - web server program is httpd and the - line printer spooling daemon is &man.lpd.8;. This is - only a naming convention. For example, the main mail daemon for - the Sendmail application is - &man.sendmail.8;, and not + Domain, but the actual program that executes is &man.named.8;. + The Apache web server program is + httpd and the line printer spooling daemon + is &man.lpd.8;. This is only a naming convention. For example, + the main mail daemon for the Sendmail + application is &man.sendmail.8;, and not maild. One way to communicate with a daemon, or any running @@ -2050,16 +2035,14 @@ Swap: 256M Total, 38M Used, 217M Free, 1 This example shows how to send a signal to &man.inetd.8;. The &man.inetd.8; configuration file is - /etc/inetd.conf, and - &man.inetd.8; will re-read this configuration file - when it is sent a SIGHUP. + /etc/inetd.conf, and &man.inetd.8; will + re-read this configuration file when it is sent a + SIGHUP. Find the PID of the process to send - the signal - to using &man.pgrep.1;. In this example, the - PID for - &man.inetd.8; is 198: + the signal to using &man.pgrep.1;. In this example, the + PID for &man.inetd.8; is 198: &prompt.user; pgrep -l inetd 198 inetd -wW @@ -2080,10 +2063,9 @@ Swap: 256M Total, 38M Used, 217M Free, 1 process not owned by that user, the message kill: PID: Operation not permitted will be displayed. Mistyping - the PID will either - send the signal to the wrong process, which could have - negative results, or will send the signal to a - PID that is + the PID will either send the signal to + the wrong process, which could have negative results, or + will send the signal to a PID that is not currently in use, resulting in the error kill: PID: No such process. @@ -2111,9 +2093,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Killing a random process on the system can be a bad idea. In particular, &man.init.8;, PID 1, is - special. Running - /bin/kill -s KILL 1 is a quick, and - unrecommended, way to shutdown the system. + special. Running /bin/kill -s KILL 1 is + a quick, and unrecommended, way to shutdown the system. Always double check the arguments to &man.kill.1; before pressing Return. @@ -2131,11 +2112,10 @@ Swap: 256M Total, 38M Used, 217M Free, 1 them. Many shells provide built in functions to help with everyday tasks such as file management, file globbing, command line editing, command macros, and environment variables. &os; - comes with several shells, including the - Bourne shell (&man.sh.1;) and the extended C shell - (&man.tcsh.1;). - Other shells are available from the &os; Ports Collection, such - as zsh and bash. + comes with several shells, including the Bourne shell + (&man.sh.1;) and the extended C shell (&man.tcsh.1;). Other + shells are available from the &os; Ports Collection, such as + zsh and bash. The shell that is used is really a matter of taste. A C programmer might feel more comfortable with a C-like shell such @@ -2275,13 +2255,12 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Shells treat special characters, known as meta-characters, as special representations of data. The most common - meta-character is *, which - represents any number of characters in a filename. - Meta-characters can be used to perform filename globbing. For - example, echo * is equivalent to - &man.ls.1; because the shell takes all the files that - match * and &man.echo.1; lists - them on the command line. + meta-character is *, which represents any + number of characters in a filename. Meta-characters can be + used to perform filename globbing. For example, echo + * is equivalent to &man.ls.1; because the shell + takes all the files that match * and + &man.echo.1; lists them on the command line. To prevent the shell from interpreting a special character, escape it from the shell by starting it with a backslash @@ -2297,9 +2276,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 to use chsh. Running this command will open the editor that is configured in the EDITOR environment variable, which by default - is set to &man.vi.1;. Change - the Shell: line to the full path of the - new shell. + is set to &man.vi.1;. Change the Shell: line + to the full path of the new shell. Alternately, use chsh -s which will set the specified shell without opening an editor. For example, @@ -2310,10 +2288,9 @@ Swap: 256M Total, 38M Used, 217M Free, 1 The new shell must be present in /etc/shells. If the shell was - installed from the &os; Ports - Collection as described in , it - should be automatically added to - this file. If it is missing, add it using this + installed from the &os; Ports Collection as described in + , it should be automatically added + to this file. If it is missing, add it using this command, replacing the path with the path of the shell: @@ -2343,9 +2320,9 @@ Swap: 256M Total, 38M Used, 217M Free, 1 &man.ee.1; - A simple editor to learn is &man.ee.1;, - which stands for easy editor. To start this editor, type - ee filename where + A simple editor to learn is &man.ee.1;, which stands for + easy editor. To start this editor, type ee + filename where filename is the name of the file to be edited. Once inside the editor, all of the commands for manipulating the editor's functions are listed at the top of the @@ -2353,10 +2330,9 @@ Swap: 256M Total, 38M Used, 217M Free, 1 Ctrl, so ^e expands to Ctrle. - To leave &man.ee.1;, press - Esc, then choose the leave - editor option from the main menu. The editor will - prompt to save any changes if the file has been + To leave &man.ee.1;, press Esc, then choose + the leave editor option from the main menu. + The editor will prompt to save any changes if the file has been modified. @@ -2375,9 +2351,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 &os; also comes with more powerful text editors, such as - &man.vi.1;, as part of the base system. - Other editors, like editors/emacs and + &man.vi.1;, as part of the base system. Other editors, like + editors/emacs and editors/vim, are part of the &os; Ports Collection. These editors offer more functionality at the expense of being a more complicated to learn. Learning a @@ -2407,8 +2382,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 keyboard. Most devices in a &os; must be accessed through special - files called device nodes, which are located in - /dev. + files called device nodes, which are located in /dev. Creating Device Nodes @@ -2482,8 +2457,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 the &man.a.out.5; format, a technology tried and proven through many generations of BSD releases, until the beginning of the 3.X branch. Though it was possible to build and run native - ELF binaries and kernels on a &os; - system for some time before that, &os; initially resisted the + ELF binaries and kernels on a &os; system + for some time before that, &os; initially resisted the push to switch to ELF as the default format. Why? When Linux made its painful transition to ELF, it was due to their inflexible @@ -2543,9 +2518,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 programs rewrote them and added simpler support for building cross compilers and plugging in different formats. Those who wanted to build cross compilers targeting &os; were out of luck - since the older sources that &os; had for - &man.as.1; and &man.ld.1; - were not up to the task. The new GNU tools chain + since the older sources that &os; had for &man.as.1; and + &man.ld.1; were not up to the task. The new GNU tools chain (binutils) supports cross compiling, ELF, shared libraries, and C++ extensions. In addition, many vendors release @@ -2583,8 +2557,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 &prompt.user; man command where command is the name of - the command to learn about. For example, to learn - more about &man.ls.1;, type: + the command to learn about. For example, to learn more about + &man.ls.1;, type: &prompt.user; man ls @@ -2632,18 +2606,16 @@ Swap: 256M Total, 38M Used, 217M Free, 1 In some cases, the same topic may appear in more than one section of the online manual. For example, there is a &man.chmod.1; user command and a - chmod() system call. To tell - &man.man.1; which section to display, specify the - section number: + chmod() system call. To tell &man.man.1; + which section to display, specify the section number: &prompt.user; man 1 chmod This will display the manual page for the user command - &man.chmod.1;. References to a particular section - of the online manual are traditionally placed in parenthesis - in written documentation, so &man.chmod.1; refers to the - user command and &man.chmod.2; refers - to the system call. + &man.chmod.1;. References to a particular section of the + online manual are traditionally placed in parenthesis in + written documentation, so &man.chmod.1; refers to the user + command and &man.chmod.2; refers to the system call. If the command name is unknown, use man -k to search for keywords in the command @@ -2655,8 +2627,8 @@ Swap: 256M Total, 38M Used, 217M Free, 1 keyword mail in their descriptions. This is equivalent to using &man.apropos.1;. - To determine what the commands in - /usr/bin do, + To determine what the commands in /usr/bin do, type: &prompt.user; cd /usr/bin From owner-svn-doc-projects@FreeBSD.ORG Thu May 9 20:59:53 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 533F339F; Thu, 9 May 2013 20:59:53 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 4467317F; Thu, 9 May 2013 20:59:53 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r49KxrWr037202; Thu, 9 May 2013 20:59:53 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r49KxrW3037201; Thu, 9 May 2013 20:59:53 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305092059.r49KxrW3037201@svn.freebsd.org> From: Dru Lavigne Date: Thu, 9 May 2013 20:59:53 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41585 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 May 2013 20:59:53 -0000 Author: dru Date: Thu May 9 20:59:52 2013 New Revision: 41585 URL: http://svnweb.freebsd.org/changeset/doc/41585 Log: This patch addresses the following: - fixes command/application tags with entities - fixes redundancy A subsequent patch will fix outstanding white space issues. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Thu May 9 20:56:48 2013 (r41584) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Thu May 9 20:59:52 2013 (r41585) @@ -249,7 +249,7 @@ requirements. --> audit_warn - A customizable shell - script used by auditd to generate + script used by &man.auditd.8; to generate warning messages in exceptional situations, such as when space for audit records is running low or when the audit trail file has been rotated. @@ -460,9 +460,8 @@ requirements. --> The <filename>audit_control</filename> File - The audit_control file specifies a - number of defaults for the audit subsystem. Viewing the - contents of this file, we see the following: + A number of defaults for the audit subsystem are + specified in audit_control: dir:/var/audit flags:lo @@ -471,7 +470,7 @@ naflags:lo policy:cnt filesz:0 - The option is used to set one or + The entry is used to set one or more directories where audit logs will be stored. If more than one directory entry appears, they will be used in order as they fill. It is common to configure audit so that audit @@ -484,17 +483,17 @@ filesz:0 example above, successful and failed login and logout events are audited for all users. - The option defines the minimum + The entry defines the minimum percentage of free space for the file system where the audit trail is stored. When this threshold is exceeded, a warning will be generated. The above example sets the minimum free space to twenty percent. - The option specifies audit + The specifies audit classes to be audited for non-attributed events, such as the login process and system daemons. - The option specifies a + The entry specifies a comma-separated list of policy flags controlling various aspects of audit behavior. The default cnt flag indicates that the system should @@ -504,7 +503,7 @@ filesz:0 to the &man.execve.2; system call to be audited as part of command execution. - The option specifies the maximum + The entry specifies the maximum size in bytes to allow an audit trail file to grow to before automatically terminating and rotating the trail file. The default, 0, disables automatic log rotation. If the @@ -516,9 +515,9 @@ filesz:0 The <filename>audit_user</filename> File - The audit_user file permits the - administrator to specify further audit requirements for - specific users. Each line configures auditing for a user + The administrator can specify further audit requirements + for specific users in audit_user. + Each line configures auditing for a user via two fields: the first is the alwaysaudit field, which specifies a set of events that should always be audited for the user, and @@ -527,14 +526,14 @@ filesz:0 the user. The following example audit_user - file audits login/logout events and successful command - execution for the root user, and audits - file creation and successful command execution for the - www user. If used with the example - audit_control file above, the + audits login/logout events and successful command + execution for root, and audits + file creation and successful command execution for + www. If used with the above example + audit_control, the lo entry for root is redundant, and login/logout events will also be audited for - the www user. + www. root:lo,+ex:no www:fc,+ex:no @@ -553,12 +552,13 @@ www:fc,+ex:no &man.praudit.1; command converts trail files to a simple text format; the &man.auditreduce.1; command may be used to reduce the audit trail file for analysis, archiving, or printing - purposes. auditreduce supports a variety - of selection parameters, including event type, event class, + purposes. A variety of selection + parameters are supported by &man.auditreduce.1;, + including event type, event class, user, date or time of the event, and the file path or object acted on. - For example, the praudit utility will + For example, &man.praudit.1; will dump the entire contents of a specified audit log in plain text: @@ -569,7 +569,7 @@ www:fc,+ex:no the audit log to dump. Audit trails consist of a series of audit records made up - of tokens, which praudit prints + of tokens, which &man.praudit.1; prints sequentially one per line. Each token is of a specific type, such as header holding an audit record header, or path holding a file path from a @@ -605,9 +605,10 @@ trailer,133 successful execution, and the trailer concludes the record. - praudit also supports - an XML output format, which can be selected using the - argument. + XML output format is also supported by + &man.praudit.1;, + and can be selected using + . @@ -619,10 +620,9 @@ trailer,133 &prompt.root; auditreduce -u trhodes /var/audit/AUDITFILE | praudit - This will select all audit records produced for the user - trhodes stored in the - AUDITFILE - file. + This will select all audit records produced for + trhodes stored in + AUDITFILE. @@ -674,7 +674,7 @@ trailer,133 SSH session, then a continuous stream of audit events will be generated at a high rate, as each event being printed will generate another event. It is advisable to run - praudit on an audit pipe device from + &man.praudit.1; on an audit pipe device from sessions without fine-grained I/O auditing in order to avoid this happening. @@ -685,10 +685,10 @@ trailer,133 Audit trails are written to only by the kernel, and managed only by the audit daemon, - auditd. Administrators should not + &man.auditd.8;. Administrators should not attempt to use &man.newsyslog.conf.5; or other tools to directly rotate audit logs. Instead, the - audit management tool may be used to shut + &man.audit.8; management tool may be used to shut down auditing, reconfigure the audit system, and perform log rotation. The following command causes the audit daemon to create a new audit log and signal the kernel to switch to @@ -699,7 +699,7 @@ trailer,133 &prompt.root; audit -n - If the auditd daemon is not + If &man.auditd.8; is not currently running, this command will fail and an error message will be produced. @@ -714,7 +714,7 @@ trailer,133 new /etc/crontab. Automatic rotation of the audit trail file based on file - size is possible via the option in + size is possible using in &man.audit.control.5;, and is described in the configuration files section of this chapter. From owner-svn-doc-projects@FreeBSD.ORG Fri May 10 11:55:41 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 56132F6D; Fri, 10 May 2013 11:55:41 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 47926341; Fri, 10 May 2013 11:55:41 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r4ABtfZG053743; Fri, 10 May 2013 11:55:41 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r4ABtfO6053742; Fri, 10 May 2013 11:55:41 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305101155.r4ABtfO6053742@svn.freebsd.org> From: Dru Lavigne Date: Fri, 10 May 2013 11:55:41 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41589 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 May 2013 11:55:41 -0000 Author: dru Date: Fri May 10 11:55:40 2013 New Revision: 41589 URL: http://svnweb.freebsd.org/changeset/doc/41589 Log: White space fix only. Translators can ignore. Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Fri May 10 11:40:22 2013 (r41588) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Fri May 10 11:55:40 2013 (r41589) @@ -60,8 +60,8 @@ requirements. --> - How to configure Event Auditing on &os; for users - and processes. + How to configure Event Auditing on &os; for users and + processes. @@ -85,8 +85,8 @@ requirements. --> - Have some familiarity with security and how it - pertains to &os; (). + Have some familiarity with security and how it pertains + to &os; (). @@ -104,9 +104,9 @@ requirements. --> Administrators should take into account disk space requirements associated with high volume audit configurations. For example, it may be desirable to dedicate a file system to - the /var/audit tree so that other file - systems are not affected if the audit file system becomes - full. + the /var/audit tree + so that other file systems are not affected if the audit file + system becomes full. @@ -133,9 +133,9 @@ requirements. --> class: Event classes are named sets of related events, and are used in selection expressions. - Commonly used classes of events include - file creation (fc), exec (ex) - and login_logout (lo). + Commonly used classes of events include file + creation (fc), exec (ex) and + login_logout (lo). @@ -199,8 +199,8 @@ requirements. --> options AUDIT Rebuild and reinstall - the kernel via the normal process explained in - . + the kernel via the normal process explained in . Once an audit-enabled kernel is built, installed, and the system has been rebooted, enable the audit daemon by adding the @@ -249,10 +249,10 @@ requirements. --> audit_warn - A customizable shell - script used by &man.auditd.8; to generate - warning messages in exceptional situations, such as when - space for audit records is running low or when the audit - trail file has been rotated. + script used by &man.auditd.8; to generate warning messages + in exceptional situations, such as when space for audit + records is running low or when the audit trail file has + been rotated. @@ -400,8 +400,8 @@ requirements. --> These audit event classes may be customized by modifying - the audit_class and - audit_event configuration files. + the audit_class and audit_ + event configuration files. Each audit class in the list is combined with a prefix indicating whether successful/failed operations are matched, @@ -451,11 +451,10 @@ requirements. --> Configuration Files In most cases, administrators will need to modify only two - files when configuring the audit system: - audit_control and - audit_user. The first controls - system-wide audit properties and policies; the second may be - used to fine-tune auditing by user. + files when configuring the audit system: audit_ + control and audit_user. + The first controls system-wide audit properties and policies; + the second may be used to fine-tune auditing by user. The <filename>audit_control</filename> File @@ -489,9 +488,9 @@ filesz:0 will be generated. The above example sets the minimum free space to twenty percent. - The specifies audit - classes to be audited for non-attributed events, such as the - login process and system daemons. + The specifies audit classes + to be audited for non-attributed events, such as the login + process and system daemons. The entry specifies a comma-separated list of policy flags controlling various @@ -517,13 +516,12 @@ filesz:0 The administrator can specify further audit requirements for specific users in audit_user. - Each line configures auditing for a user - via two fields: the first is the - alwaysaudit field, which specifies a set - of events that should always be audited for the user, and - the second is the neveraudit field, which - specifies a set of events that should never be audited for - the user. + Each line configures auditing for a user via two fields: + the first is the alwaysaudit field, + which specifies a set of events that should always be + audited for the user, and the second is the + neveraudit field, which specifies a set + of events that should never be audited for the user. The following example audit_user audits login/logout events and successful command @@ -552,15 +550,13 @@ www:fc,+ex:no &man.praudit.1; command converts trail files to a simple text format; the &man.auditreduce.1; command may be used to reduce the audit trail file for analysis, archiving, or printing - purposes. A variety of selection - parameters are supported by &man.auditreduce.1;, - including event type, event class, + purposes. A variety of selection parameters are supported by + &man.auditreduce.1;, including event type, event class, user, date or time of the event, and the file path or object acted on. - For example, &man.praudit.1; will - dump the entire contents of a specified audit log in plain - text: + For example, &man.praudit.1; will dump the entire + contents of a specified audit log in plain text: &prompt.root; praudit /var/audit/AUDITFILE @@ -569,11 +565,11 @@ www:fc,+ex:no the audit log to dump. Audit trails consist of a series of audit records made up - of tokens, which &man.praudit.1; prints - sequentially one per line. Each token is of a specific type, - such as header holding an audit record - header, or path holding a file path from a - name lookup. The following is an example of an + of tokens, which &man.praudit.1; prints sequentially one per + line. Each token is of a specific type, such as + header holding an audit record header, or + path holding a file path from a name + lookup. The following is an example of an execve event: header,133,10,execve(2),0,Mon Sep 25 15:58:03 2006, + 384 msec @@ -606,8 +602,7 @@ trailer,133 concludes the record. XML output format is also supported by - &man.praudit.1;, - and can be selected using + &man.praudit.1;, and can be selected using . @@ -629,10 +624,10 @@ trailer,133 Delegating Audit Review Rights Members of the audit group are - given permission to read audit trails in - /var/audit; by default, this group is - empty, so only the root user may read - audit trails. Users may be added to the + given permission to read audit trails in /var/audit; by default, this + group is empty, so only the root user + may read audit trails. Users may be added to the audit group in order to delegate audit review rights to the user. As the ability to track audit log contents provides significant insight into the behavior of @@ -674,9 +669,9 @@ trailer,133 SSH session, then a continuous stream of audit events will be generated at a high rate, as each event being printed will generate another event. It is advisable to run - &man.praudit.1; on an audit pipe device from - sessions without fine-grained I/O auditing in order to avoid - this happening. + &man.praudit.1; on an audit pipe device from sessions + without fine-grained I/O auditing in order to avoid this + happening. @@ -684,24 +679,23 @@ trailer,133 Rotating Audit Trail Files Audit trails are written to only by the kernel, and - managed only by the audit daemon, - &man.auditd.8;. Administrators should not - attempt to use &man.newsyslog.conf.5; or other tools to - directly rotate audit logs. Instead, the - &man.audit.8; management tool may be used to shut - down auditing, reconfigure the audit system, and perform log - rotation. The following command causes the audit daemon to - create a new audit log and signal the kernel to switch to - using the new log. The old log will be terminated and - renamed, at which point it may then be manipulated by the - administrator. + managed only by the audit daemon, &man.auditd.8;. + Administrators should not attempt to use + &man.newsyslog.conf.5; or other tools to directly rotate + audit logs. Instead, the &man.audit.8; management tool may + be used to shut down auditing, reconfigure the audit system, + and perform log rotation. The following command causes the + audit daemon to create a new audit log and signal the kernel + to switch to using the new log. The old log will be + terminated and renamed, at which point it may then be + manipulated by the administrator. &prompt.root; audit -n - If &man.auditd.8; is not - currently running, this command will fail and an error - message will be produced. + If &man.auditd.8; is not currently running, this + command will fail and an error message will be + produced. Adding the following line to @@ -710,8 +704,8 @@ trailer,133 0 */12 * * * root /usr/sbin/audit -n - The change will take effect once you have saved the - new /etc/crontab. + The change will take effect once you have saved the new + /etc/crontab. Automatic rotation of the audit trail file based on file size is possible using in From owner-svn-doc-projects@FreeBSD.ORG Fri May 10 12:13:42 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id E9FB15C6; Fri, 10 May 2013 12:13:42 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id DC42060F; Fri, 10 May 2013 12:13:42 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r4ACDg08060832; Fri, 10 May 2013 12:13:42 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r4ACDgGF060831; Fri, 10 May 2013 12:13:42 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305101213.r4ACDgGF060831@svn.freebsd.org> From: Dru Lavigne Date: Fri, 10 May 2013 12:13:42 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41590 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 May 2013 12:13:43 -0000 Author: dru Date: Fri May 10 12:13:42 2013 New Revision: 41590 URL: http://svnweb.freebsd.org/changeset/doc/41590 Log: Fix grammo. Submitted by: bjk Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Fri May 10 11:55:40 2013 (r41589) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/boot/chapter.xml Fri May 10 12:13:42 2013 (r41590) @@ -84,7 +84,7 @@ (BIOS) is responsible for loading the operating system. To do this, the BIOS looks on the hard disk for the Master Boot Record - (MBR), which must be located on a specific + (MBR), which must be located in a specific place on the disk. The BIOS has enough knowledge to load and run the MBR, and assumes that the MBR can then carry out the From owner-svn-doc-projects@FreeBSD.ORG Fri May 10 14:00:18 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 75569E73; Fri, 10 May 2013 14:00:18 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id 66CADB15; Fri, 10 May 2013 14:00:18 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r4AE0I6s097270; Fri, 10 May 2013 14:00:18 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r4AE0INV097269; Fri, 10 May 2013 14:00:18 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305101400.r4AE0INV097269@svn.freebsd.org> From: Dru Lavigne Date: Fri, 10 May 2013 14:00:18 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41591 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/advanced-networking X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 May 2013 14:00:18 -0000 Author: dru Date: Fri May 10 14:00:18 2013 New Revision: 41591 URL: http://svnweb.freebsd.org/changeset/doc/41591 Log: First pass through first 1/2 of a huge chapter. Subsequent patches to follow. This patch addresses the following: - &os;, e.g., you - most acronyms - grammar fixes and general tightening - fixes command/app tags which should be entities Approved by: bcr (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml Fri May 10 12:13:42 2013 (r41590) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.xml Fri May 10 14:00:18 2013 (r41591) @@ -11,7 +11,7 @@ Synopsis - This chapter will cover a number of advanced networking + This chapter covers a number of advanced networking topics. After reading this chapter, you will know: @@ -27,7 +27,7 @@ - How to make FreeBSD act as a bridge. + How to make &os; act as a bridge. @@ -36,8 +36,9 @@ - How to set up network PXE booting with an NFS root file - system. + How to set up network PXE booting + with an + NFS root filesystem. @@ -45,16 +46,17 @@ - How to set up IPv6 on a FreeBSD machine. + How to set up IPv6 on a &os; machine. - How to configure ATM. + How to configure ATM. - How to enable and utilize the features of CARP, the - Common Address Redundancy Protocol in &os; + How to enable and utilize the features of the + Common Address Redundancy Protocol + (CARP) in &os;. @@ -71,7 +73,7 @@ - Know how to configure and install a new FreeBSD kernel + Know how to configure and install a new &os; kernel (). @@ -105,22 +107,21 @@ one to the other. This is called routing. A route is a defined pair of addresses: a destination and a - gateway. The pair indicates that if you are + gateway. The pair indicates that when trying to get to this destination, communicate through this gateway. There are three types of destinations: individual hosts, subnets, and default. The default route is - used if none of the other routes apply. We will talk a little - bit more about default routes later on. There are also three + used if none of the other routes apply. There are also three types of gateways: individual hosts, interfaces (also called - links), and Ethernet hardware addresses (MAC - addresses). + links), and Ethernet hardware + (MAC) addresses. An Example - To illustrate different aspects of routing, we will use - the following example from netstat: + This example &man.netstat.1; output illustrates several + aspects of routing: &prompt.user; netstat -r Routing tables @@ -138,9 +139,9 @@ host2.example.com link#1 UC 224 link#1 UC 0 0 default route - The first two lines specify the default route (which we - will cover in the - next section) + The first two lines specify the default route, + described in more detail in + , and the localhost route. loopback device @@ -149,66 +150,65 @@ host2.example.com link#1 UC localhost is lo0, also known as the loopback device. This says to keep all traffic for this destination internal, rather than sending it - out over the LAN, since it will only end up back where it - started. + out over the network. Ethernet MAC address - The next thing that stands out are the addresses beginning - with 0:e0:. These are Ethernet - hardware addresses, which are also known as MAC addresses. - FreeBSD will automatically identify any hosts - (test0 in the example) on the local Ethernet - and add a route for that host, directly to it over the - Ethernet interface, ed0. There is - also a timeout (Expire column) associated - with this type of route, which is used if we fail to hear from - the host in a specific amount of time. When this happens, the + The addresses beginning + with 0:e0: are Ethernet + hardware addresses, also known as MAC + addresses. + &os; will automatically identify any hosts, + test0 in the example, on the local Ethernet + and add a route for that host over the + Ethernet interface, ed0. This type + of route has a timeout, seen in the Expire + column, which is used if + the host does not respond in a specific amount of time. When + this happens, the route to this host will be automatically deleted. These hosts - are identified using a mechanism known as RIP (Routing - Information Protocol), which figures out routes to local hosts + are identified using the Routing + Information Protocol (RIP), which + calculates routes to local hosts based upon a shortest path determination. subnet - FreeBSD will also add subnet routes for the local subnet - (10.20.30.255 is the broadcast + &os; will add subnet routes for the local subnet. + 10.20.30.255 is the broadcast address for the subnet - 10.20.30, and + 10.20.30 and example.com is the domain - name associated with that subnet). The designation + name associated with that subnet. The designation link#1 refers to the first Ethernet card in - the machine. You will notice no additional interface is - specified for those. + the machine. - Both of these groups (local network hosts and local - subnets) have their routes automatically configured by a - daemon called routed. If this is - not run, then only routes which are statically defined (i.e., - entered explicitly) will exist. - - The host1 line refers to our host, - which it knows by Ethernet address. Since we are the sending - host, FreeBSD knows to use the loopback interface - (lo0) rather than sending it out over + Local network hosts and local + subnets have their routes automatically configured by a + daemon called &man.routed.8;. If it is + not running, only routes which are statically defined + by the administrator will exist. + + The host1 line refers to the host + by its Ethernet address. Since it is the sending + host, &os; knows to use the loopback interface + (lo0) rather than the Ethernet interface. - The two host2 lines are an example of - what happens when we use an &man.ifconfig.8; alias (see the - section on Ethernet for reasons why we would do this). The + The two host2 lines represent aliases + which were created using &man.ifconfig.8;. The => symbol after the - lo0 interface says that not only are - we using the loopback (since this address also refers to the - local host), but specifically it is an alias. Such routes + lo0 interface says that an alias + has been set in addition to the loopback address. Such routes only show up on the host that supports the alias; all other - hosts on the local network will simply have a + hosts on the local network will have a link#1 line for such routes. The final line (destination subnet - 224) deals with multicasting, - which will be covered in another section. + 224) deals with + multicasting. Finally, various attributes of each route can be seen in the Flags column. Below is a short table @@ -247,7 +247,7 @@ host2.example.com link#1 UC C Clone: Generates a new route based upon this - route for machines we connect to. This type of route + route for machines to connect to. This type of route is normally used for local networks. @@ -276,25 +276,24 @@ host2.example.com link#1 UC When the local system needs to make a connection to a remote host, it checks the routing table to determine if a known path exists. If the remote host falls into a subnet - that we know how to reach (Cloned routes), then the system - checks to see if it can connect along that interface. + that it knows how to reach, the system + checks to see if it can connect using that interface. If all known paths fail, the system has one last option: the default route. This route is a special type of gateway route (usually the only one present in the system), and is always marked with a c in the flags field. For hosts on a local area network, this - gateway is set to whatever machine has a direct connection to - the outside world (whether via PPP link, DSL, cable modem, T1, - or another network interface). + gateway is set to the system which has a direct connection to + the Internet. - If you are configuring the default route for a machine + The default route for a machine which itself is functioning as the gateway to the outside - world, then the default route will be the gateway machine at - your Internet Service Provider's (ISP) site. + world, will be the gateway machine at + the Internet Service Provider (ISP). - Let us look at an example of default routes. This is a - common configuration: + This example is a + common configuration for a default route: @@ -308,13 +307,15 @@ host2.example.com link#1 UC The hosts Local1 and - Local2 are at your site. - Local1 is connected to an ISP via a dial up - PPP connection. This PPP server computer is connected through + Local2 are on the local network. + Local1 is connected to an + ISP using a + PPP connection. This + PPP server is connected through a local area network to another gateway computer through an - external interface to the ISPs Internet feed. + external interface to the ISP. - The default routes for each of your machines will + The default routes for each machine will be: @@ -343,25 +344,31 @@ host2.example.com link#1 UC - A common question is Why (or how) would we set - the T1-GW to be the default gateway for - Local1, rather than the ISP server it is + A common question is Why is + T1-GW configured as the default gateway for + Local1, rather than the + ISP server it is connected to?. - Remember, since the PPP interface is using an address on - the ISP's local network for your side of the connection, - routes for any other machines on the ISP's local network will - be automatically generated. Hence, you will already know how + Since the PPP interface is using an + address on + the ISP's local network for the local side + of the connection, + routes for any other machines on the ISP's + local network will + be automatically generated. The system already knows how to reach the T1-GW machine, so there is no - need for the intermediate step of sending traffic to the ISP + need for the intermediate step of sending traffic to the + ISP's server. It is common to use the address X.X.X.1 as the gateway address - for your local network. So (using the same example), if your - local class-C address space was - 10.20.30 and your ISP was using - 10.9.9 then the default routes + for the local network. So, if the + local class C address space is + 10.20.30 and the + ISP is using + 10.9.9, the default routes would be: @@ -387,19 +394,19 @@ host2.example.com link#1 UC The default route can be easily defined in - /etc/rc.conf. In our example, on - the Local2 machine, we added the following - line in /etc/rc.conf: + /etc/rc.conf. In this example, on + Local2, add the following + line to /etc/rc.conf: defaultrouter="10.20.30.1" - It is also possible to do it directly from the command - line with the &man.route.8; command: + It is also possible to add the route directly using + &man.route.8;: &prompt.root; route add default 10.20.30.1 For more information on manual manipulation of network - routing tables, consult the &man.route.8; manual page. + routing tables, refer to &man.route.8;. @@ -407,32 +414,28 @@ host2.example.com link#1 UC dual homed hosts - There is one other type of configuration that we should - cover, and that is a host that sits on two different networks. - Technically, any machine functioning as a gateway (in the - example above, using a PPP connection) counts as a dual-homed - host. But the term is really only used to refer to a machine - that sits on two local-area networks. - - In one case, the machine has two Ethernet cards, each - having an address on the separate subnets. Alternately, the - machine may only have one Ethernet card, and be using + A a dual-homed system + is a host which resides on two different networks. + + The dual-homed machine might have two Ethernet cards, each + having an address on a separate subnet. Alternately, the + machine can have one Ethernet card and uses &man.ifconfig.8; aliasing. The former is used if two - physically separate Ethernet networks are in use, the latter + physically separate Ethernet networks are in use and the + latter if there is one physical network segment, but two logically separate subnets. Either way, routing tables are set up so that each subnet knows that this machine is the defined gateway (inbound route) to the other subnet. This configuration, with the machine - acting as a router between the two subnets, is often used when - we need to implement packet filtering or firewall security in + acting as a router between the two subnets, is often used + to implement packet filtering or firewall security in either or both directions. - If you want this machine to actually forward packets - between the two interfaces, you need to tell FreeBSD to enable - this ability. See the next section for more details on how - to do this. + For this machine to forward packets + between the two interfaces, &os; must be configured as a + router, as demonstrated in the next section. @@ -440,10 +443,10 @@ host2.example.com link#1 UC router - A network router is simply a system that forwards packets + A network router is a system that forwards packets from one interface to another. Internet standards and good - engineering practice prevent the FreeBSD Project from enabling - this by default in FreeBSD. You can enable this feature by + engineering practice prevent the &os; Project from enabling + this by default in &os;. This feature can be enabled by changing the following variable to YES in &man.rc.conf.5;: @@ -451,23 +454,21 @@ host2.example.com link#1 UC This option will set the &man.sysctl.8; variable net.inet.ip.forwarding to - 1. If you should need to stop routing - temporarily, you can reset this to 0 - temporarily. + 1. To stop routing, + reset this to 0. BGP RIP OSPF - Your new router will need routes to know where to send the - traffic. If your network is simple enough you can use static - routes. FreeBSD also comes with the standard BSD routing - daemon &man.routed.8;, which speaks RIP (both version 1 and - version 2) and IRDP. Support for BGP v4, OSPF v2, and other + The new router will need routes to know where to send the + traffic. If the network is simple enough, static + routes can be used. &os; comes with the standard BSD routing + daemon &man.routed.8;, which speaks RIP + versions 1 and 2, and IRDP. Support for + BGPv4, OSPFv2, and other sophisticated routing protocols is available with the - net/zebra package. - Commercial products such as &gated; - are also available for more complex network routing - solutions. + net/zebra package or + port. @@ -486,7 +487,7 @@ host2.example.com link#1 UC Manual Configuration - Let us assume we have a network as follows: + Consider the following network: @@ -520,21 +521,18 @@ host2.example.com link#1 UC - In this scenario, RouterA is our &os; + In this scenario, RouterA is a &os; machine that is acting as a router to the rest of the Internet. It has a default route set to 10.0.0.1 which allows it to - connect with the outside world. We will assume that - RouterB is already configured properly and - knows how to get wherever it needs to go. (This is simple - in this picture. Just add a default route on - RouterB using + connect with the outside world. RouterB is + already configured properly as it + uses 192.168.1.1 as the - gateway.) + gateway. - If we look at the routing table for - RouterA we would see something like the - following: + The routing table on + RouterA looks something like this: &prompt.user; netstat -nr Routing tables @@ -546,12 +544,12 @@ default 10.0.0.1 UG 10.0.0.0/24 link#1 UC 0 0 xl0 192.168.1.0/24 link#2 UC 0 0 xl1 - With the current routing table RouterA - will not be able to reach our Internal Net 2. It does not + With the current routing table, RouterA + cannot reach Internal Net 2 as it does not have a route for - 192.168.2.0/24. One way to - alleviate this is to manually add the route. The following - command would add the Internal Net 2 network to + 192.168.2.0/24. The + following + command adds the Internal Net 2 network to RouterA's routing table using 192.168.1.2 as the next hop: @@ -566,10 +564,10 @@ default 10.0.0.1 UG Persistent Configuration - The above example is perfect for configuring a static - route on a running system. However, one problem is that the - routing information will not persist if you reboot your &os; - machine. Additional static routes can be + The above example configures a static + route on a running system. However, the + routing information will not persist if the &os; system + reboots. Persistent static routes can be entered in /etc/rc.conf: # Add Internal Net 2 as a static route @@ -577,28 +575,25 @@ static_routes="internalnet2" route_internalnet2="-net 192.168.2.0/24 192.168.1.2" The static_routes configuration - variable is a list of strings separated by a space. Each - string references to a route name. In our above example we - only have one string in static_routes. - This string is internalnet2. We - then add a configuration variable called + variable is a list of strings separated by a space, where + each + string references a route name. This example + only has one string in static_routes, + internalnet2. The variable route_internalnet2 - where we put all of the configuration parameters we would - give to the &man.route.8; command. For our example above we - would have used the command: + contains all of the configuration parameters + to &man.route.8;. This example is equivalent + to the command: &prompt.root; route add -net 192.168.2.0/24 192.168.1.2 - so we need "-net 192.168.2.0/24 - 192.168.1.2". - - As said above, we can have more than one string in - static_routes. This allows us to create - multiple static routes. The following lines shows an + Using more than one string in + static_routes creates + multiple static routes. The following shows an example of adding static routes for the 192.168.0.0/24 and - 192.168.1.0/24 networks on an - imaginary router: + 192.168.1.0/24 + networks: static_routes="net1 net2" route_net1="-net 192.168.0.0/24 192.168.0.1" @@ -609,36 +604,26 @@ route_net2="-net 192.168.1.0/24 192.168. Routing Propagation - routing propagation - We have already talked about how we define our routes to - the outside world, but not about how the outside world finds - us. - - We already know that routing tables can be set up so that - all traffic for a particular address space (in our examples, a - class-C subnet) can be sent to a particular host on that - network, which will forward the packets inbound. - - When you get an address space assigned to your site, your - service provider will set up their routing tables so that all - traffic for your subnet will be sent down your PPP link to - your site. But how do sites across the country know to send - to your ISP? + When an address space is assigned to a network, the + service provider configures their routing tables so that all + traffic for the network will be sent to the link for the + site. But how do external sites know to send their packets + to the network's ISP? - There is a system (much like the distributed DNS - information) that keeps track of all assigned address-spaces, + There is a system + that keeps track of all assigned address spaces and defines their point of connection to the Internet - Backbone. The Backbone are the main trunk - lines that carry Internet traffic across the country, and + backbone, or the main trunk + lines that carry Internet traffic across the country and around the world. Each backbone machine has a copy of a master set of tables, which direct traffic for a particular network to a specific backbone carrier, and from there down the chain of service providers until it reaches your network. - It is the task of your service provider to advertise to - the backbone sites that they are the point of connection (and - thus the path inward) for your site. This is known as route + It is the task of the service provider to advertise to + the backbone sites that they are the point of connection, and + thus the path inward, for a site. This is known as route propagation. @@ -646,23 +631,22 @@ route_net2="-net 192.168.1.0/24 192.168. Troubleshooting - traceroute + &man.traceroute.8; - Sometimes, there is a problem with routing propagation, - and some sites are unable to connect to you. Perhaps the most + Sometimes, there is a problem with routing propagation + and some sites are unable to connect. Perhaps the most useful command for trying to figure out where routing is - breaking down is the &man.traceroute.8; command. It is - equally useful if you cannot seem to make a connection to a - remote machine (i.e., &man.ping.8; fails). + breaking down is &man.traceroute.8;. It is + useful when &man.ping.8; fails. - The &man.traceroute.8; command is run with the name of the - remote host you are trying to connect to. It will show the + When using &man.traceroute.8;, include the name of the + remote host to connect to. The output will show the gateway hosts along the path of the attempt, eventually either reaching the target host, or terminating because of a lack of connection. - For more information, see the manual page for + For more information, refer to &man.traceroute.8;. @@ -676,19 +660,20 @@ route_net2="-net 192.168.1.0/24 192.168. kernel options MROUTING - FreeBSD supports both multicast applications and multicast - routing natively. Multicast applications do not require any - special configuration of FreeBSD; applications will generally + &os; natively supports both multicast applications and + multicast + routing. Multicast applications do not require any + special configuration of &os;; as applications will generally run out of the box. Multicast routing - requires that support be compiled into the kernel: + requires that support be compiled into a custom kernel: options MROUTING - In addition, the multicast routing daemon, &man.mrouted.8; + The multicast routing daemon, &man.mrouted.8;, must be configured to set up tunnels and DVMRP via /etc/mrouted.conf. More details on - multicast configuration may be found in the manual page for + multicast configuration may be found in &man.mrouted.8;. @@ -735,38 +720,46 @@ route_net2="-net 192.168.1.0/24 192.168. Most wireless networks are based on the &ieee; 802.11 standards. A basic wireless network consists of multiple stations communicating with radios that broadcast in either - the 2.4GHz or 5GHz band (though this varies according to the + the 2.4GHz or 5GHz band, though this varies according to the locale and is also changing to enable communication in the - 2.3GHz and 4.9GHz ranges). + 2.3GHz and 4.9GHz ranges. - 802.11 networks are organized in two ways: in - infrastructure mode one station acts as a - master with all the other stations associating to it; the - network is known as a BSS and the master station is termed an - access point (AP). In a BSS all communication passes through - the AP; even when one station wants to communicate with - another wireless station messages must go through the AP. In - the second form of network there is no master and stations - communicate directly. This form of network is termed an IBSS + 802.11 networks are organized in two ways. In + infrastructure mode, one station acts as + a + master with all the other stations associating to it, the + network is known as a BSS, and the master + station is termed an + access point (AP). In a + BSS, all communication passes through + the AP; even when one station wants to + communicate with + another wireless station, messages must go through the + AP. In + the second form of network, there is no master and stations + communicate directly. This form of network is termed an + IBSS and is commonly known as an ad-hoc network. 802.11 networks were first deployed in the 2.4GHz band using protocols defined by the &ieee; 802.11 and 802.11b standard. These specifications include the operating - frequencies, MAC layer characteristics including framing and - transmission rates (communication can be done at various - rates). Later the 802.11a standard defined operation in the - 5GHz band, including different signalling mechanisms and - higher transmission rates. Still later the 802.11g standard - was defined to enable use of 802.11a signalling and + frequencies and the MAC layer + characteristics, including framing and + transmission rates, as communication can occur at various + rates. Later, the 802.11a standard defined operation in the + 5GHz band, including different signaling mechanisms and + higher transmission rates. Still later, the 802.11g standard + defined the use of 802.11a signaling and transmission mechanisms in the 2.4GHz band in such a way as to be backwards compatible with 802.11b networks. - Separate from the underlying transmission techniques + Separate from the underlying transmission techniques, 802.11 networks have a variety of security mechanisms. The original 802.11 specifications defined a simple security - protocol called WEP. This protocol uses a fixed pre-shared key + protocol called WEP. This protocol uses a + fixed pre-shared key and the RC4 cryptographic cipher to encode data transmitted on a network. Stations must all agree on the fixed key in order to communicate. This scheme was shown to be easily broken and @@ -774,43 +767,57 @@ route_net2="-net 192.168.1.0/24 192.168. joining networks. Current security practice is given by the &ieee; 802.11i specification that defines new cryptographic ciphers and an additional protocol to authenticate stations to - an access point and exchange keys for doing data - communication. Further, cryptographic keys are periodically - refreshed and there are mechanisms for detecting intrusion - attempts (and for countering intrusion attempts). Another + an access point and exchange keys for data + communication. Cryptographic keys are periodically + refreshed and there are mechanisms for detecting + and countering intrusion attempts. Another security protocol specification commonly used in wireless - networks is termed WPA. This was a precursor to 802.11i - defined by an industry group as an interim measure while - waiting for 802.11i to be ratified. WPA specifies a subset of + networks is termed WPA, which was a + precursor to 802.11i. WPA + specifies a subset of the requirements found in 802.11i and is designed for - implementation on legacy hardware. Specifically WPA requires - only the TKIP cipher that is derived from the original WEP - cipher. 802.11i permits use of TKIP but also requires support - for a stronger cipher, AES-CCM, for encrypting data. (The AES - cipher was not required in WPA because it was deemed too + implementation on legacy hardware. Specifically, + WPA requires + only the TKIP cipher that is derived from + the original WEP + cipher. 802.11i permits use of TKIP but + also requires support + for a stronger cipher, AES-CCM, for encrypting data. The + AES + cipher was not required in WPA because it + was deemed too computationally costly to be implemented on legacy - hardware.) + hardware. - Other than the above protocol standards the other - important standard to be aware of is 802.11e. This defines - protocols for deploying multi-media applications such as - streaming video and voice over IP (VoIP) in an 802.11 network. + The other + standard to be aware of is 802.11e. It defines + protocols for deploying multimedia applications, such as + streaming video and voice over IP (VoIP), + in + an 802.11 network. Like 802.11i, 802.11e also has a precursor specification - termed WME (later renamed WMM) that has been defined by an + termed WME (later renamed + WMM) that has been defined by an industry group as a subset of 802.11e that can be deployed now - to enable multi-media applications while waiting for the final + to enable multimedia applications while waiting for the final ratification of 802.11e. The most important thing to know - about 802.11e and WME/WMM is that it enables prioritized - traffic use of a wireless network through Quality of Service - (QoS) protocols and enhanced media access protocols. Proper - implementation of these protocols enable high speed bursting + about 802.11e and + WME/WMM is that it + enables prioritized + traffic over a wireless network through Quality of Service + (QoS) protocols and enhanced media access + protocols. Proper + implementation of these protocols enables high speed bursting of data and prioritized traffic flow. &os; supports networks that operate - using 802.11a, 802.11b, and 802.11g. The WPA and 802.11i + using 802.11a, 802.11b, and 802.11g. The + WPA and 802.11i security protocols are likewise supported (in conjunction with - any of 11a, 11b, and 11g) and QoS and traffic prioritization - required by the WME/WMM protocols are supported for a limited + any of 11a, 11b, and 11g) and QoS and + traffic prioritization + required by the WME/WMM + protocols are supported for a limited set of wireless devices. @@ -820,63 +827,66 @@ route_net2="-net 192.168.1.0/24 192.168. Kernel Configuration - To use wireless networking, you need a wireless - networking card and to configure the kernel with the - appropriate wireless networking support. The latter is - separated into multiple modules so that you only need to - configure the software you are actually going to use. - - The first thing you need is a wireless device. The most - commonly used devices are those that use parts made by - Atheros. These devices are supported by the &man.ath.4; - driver and require the following line to be added to + To use wireless networking, a wireless + networking card is needed and the kernel needs to be + configured with the + appropriate wireless networking support. The kernel is + separated into multiple modules so that only the required + support needs to be + configured. + + The most + commonly used wireless devices are those that use parts made + by + Atheros. These devices are supported by &man.ath.4; + and require the following line to be added to /boot/loader.conf: if_ath_load="YES" The Atheros driver is split up into three separate - pieces: the proper driver (&man.ath.4;), the hardware + pieces: the driver (&man.ath.4;), the hardware support layer that handles chip-specific functions - (&man.ath.hal.4;), and an algorithm for selecting which of - several possible rates for transmitting frames - (ath_rate_sample here). When this support is loaded as - kernel modules, these dependencies are automatically handled - for you. If, instead of an Atheros device, you had another - device you would select the module for that device; - e.g.: + (&man.ath.hal.4;), and an algorithm for selecting the + rate for transmitting frames. + When this support is loaded as + kernel modules, any dependencies are automatically handled. + To load support for a different type of wireless device, + specify the module for that device. This example is for + devices based on the Intersil Prism parts (&man.wi.4;) + driver: if_wi_load="YES" - for devices based on the Intersil Prism parts - (&man.wi.4; driver). - - In the rest of this document, we will use an - &man.ath.4; device, the device name in the examples must - be changed according to your configuration. A list of + The examples in this section use an + &man.ath.4; device and the device name in the examples + must + be changed according to the configuration. A list of available wireless drivers and supported adapters can be - found in the &os; Hardware Notes. Copies of these notes - for various releases and architectures are available on + found in the &os; Hardware Notes, available on the Release - Information page of the &os; Web site. If a - native &os; driver for your wireless device does not - exist, it may be possible to directly use the &windows; + Information page of the &os; website. If a + native &os; driver for the wireless device does not + exist, it may be possible to use the &windows; driver with the help of the NDIS driver wrapper. - With that, you will need the modules that implement - cryptographic support for the security protocols you intend - to use. These are intended to be dynamically loaded on - demand by the &man.wlan.4; module but for now they must be + In addition, the modules that implement + cryptographic support for the security protocols + to use must be loaded. These are intended to be dynamically + loaded on + demand by the &man.wlan.4; module, but for now they must be manually configured. The following modules are available: - &man.wlan.wep.4;, &man.wlan.ccmp.4; and &man.wlan.tkip.4;. - Both &man.wlan.ccmp.4; and &man.wlan.tkip.4; drivers are - only needed if you intend to use the WPA and/or 802.11i - security protocols. If your network does not use - encryption, you will not need &man.wlan.wep.4; support. To + &man.wlan.wep.4;, &man.wlan.ccmp.4;, and &man.wlan.tkip.4;. + The &man.wlan.ccmp.4; and &man.wlan.tkip.4; drivers are + only needed when using the WPA or + 802.11i + security protocols. If the network does not use + encryption, &man.wlan.wep.4; support is not needed. To load these modules at boot time, add the following lines to /boot/loader.conf: @@ -884,17 +894,18 @@ route_net2="-net 192.168.1.0/24 192.168. wlan_ccmp_load="YES" wlan_tkip_load="YES" - With this information in the system bootstrap - configuration file (i.e., - /boot/loader.conf), you have to reboot - your &os; box. If you do not want to reboot your machine - for the moment, you can load the modules by hand using + Once this information has been added to + /boot/loader.conf, reboot + the &os; box. Alternately, + load the modules by hand using &man.kldload.8;. - If you do not want to use modules, it is possible to + For users who do not want to use modules, it is + possible to compile these drivers into the kernel by adding the - following lines to your kernel configuration file: + following lines to a custom kernel configuration + file: device wlan # 802.11 support device wlan_wep # 802.11 WEP support @@ -907,12 +918,13 @@ options AH_SUPPORT_AR5416 # enable AR541 device ath_rate_sample # SampleRate tx rate control for ath With this information in the kernel configuration - file, recompile the kernel and reboot your &os; + file, recompile the kernel and reboot the &os; machine. - When the system is up, we could find some information - about the wireless device in the boot messages, like + Information + about the wireless device should appear in the boot + messages, like this: ath0: <Atheros 5212> mem 0x88000000-0x8800ffff irq 11 at device 0.0 on cardbus1 @@ -924,11 +936,12 @@ ath0: AR2413 mac 7.9 RF2413 phy 4.5 Infrastructure Mode - The infrastructure mode or BSS mode is the mode that is + Infrastructure (BSS) mode is the + mode that is typically used. In this mode, a number of wireless access points are connected to a wired network. Each wireless - network has its own name, this name is called the SSID of the - network. Wireless clients connect to the wireless access + network has its own name, called the SSID. + Wireless clients connect to the wireless access points. @@ -937,12 +950,12 @@ ath0: AR2413 mac 7.9 RF2413 phy 4.5 How to Find Access Points - To scan for networks, use the - ifconfig command. This request may - take a few moments to complete as it requires that the - system switches to each available wireless frequency and - probes for available access points. Only the super-user - can initiate such a scan: + To scan for available networks, use + &man.ifconfig.8;. This request may + take a few moments to complete as it requires the + system to switch to each available wireless frequency and + probe for available access points. Only the superuser + can initiate a scan: &prompt.root; ifconfig wlan0 create wlandev ath0 &prompt.root; ifconfig wlan0 up scan @@ -951,15 +964,17 @@ dlinkap 00:13:46:49:41:76 11 freebsdap 00:11:95:c3:0d:ac 1 54M -83:96 100 EPS WPA - You must mark the interface - before you can scan. Subsequent scan requests do not - require you to mark the interface up again. *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-projects@FreeBSD.ORG Fri May 10 16:53:27 2013 Return-Path: Delivered-To: svn-doc-projects@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id DE0C5FEE; Fri, 10 May 2013 16:53:27 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) by mx1.freebsd.org (Postfix) with ESMTP id D07668F7; Fri, 10 May 2013 16:53:27 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.6/8.14.6) with ESMTP id r4AGrRWE061376; Fri, 10 May 2013 16:53:27 GMT (envelope-from dru@svn.freebsd.org) Received: (from dru@localhost) by svn.freebsd.org (8.14.6/8.14.5/Submit) id r4AGrRw6061375; Fri, 10 May 2013 16:53:27 GMT (envelope-from dru@svn.freebsd.org) Message-Id: <201305101653.r4AGrRw6061375@svn.freebsd.org> From: Dru Lavigne Date: Fri, 10 May 2013 16:53:27 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-projects@freebsd.org Subject: svn commit: r41592 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit X-SVN-Group: doc-projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-projects@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for doc projects trees List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 May 2013 16:53:27 -0000 Author: dru Date: Fri May 10 16:53:27 2013 New Revision: 41592 URL: http://svnweb.freebsd.org/changeset/doc/41592 Log: Fix grammo. Submitted by: bjk Approved by: gjb (mentor) Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml ============================================================================== --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Fri May 10 14:00:18 2013 (r41591) +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/audit/chapter.xml Fri May 10 16:53:27 2013 (r41592) @@ -488,7 +488,7 @@ filesz:0 will be generated. The above example sets the minimum free space to twenty percent. - The specifies audit classes + The entry specifies audit classes to be audited for non-attributed events, such as the login process and system daemons.