From nobody@FreeBSD.org  Wed Mar  5 13:01:06 2014
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by hub.freebsd.org (Postfix) with ESMTPS id 01E278F
	for <freebsd-gnats-submit@FreeBSD.org>; Wed,  5 Mar 2014 13:01:06 +0000 (UTC)
Received: from cgiserv.freebsd.org (cgiserv.freebsd.org [IPv6:2001:1900:2254:206a::50:4])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mx1.freebsd.org (Postfix) with ESMTPS id E1E12758
	for <freebsd-gnats-submit@FreeBSD.org>; Wed,  5 Mar 2014 13:01:05 +0000 (UTC)
Received: from cgiserv.freebsd.org ([127.0.1.6])
	by cgiserv.freebsd.org (8.14.8/8.14.8) with ESMTP id s25D155D056257
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 5 Mar 2014 13:01:05 GMT
	(envelope-from nobody@cgiserv.freebsd.org)
Received: (from nobody@localhost)
	by cgiserv.freebsd.org (8.14.8/8.14.8/Submit) id s25D15AK056256;
	Wed, 5 Mar 2014 13:01:05 GMT
	(envelope-from nobody)
Message-Id: <201403051301.s25D15AK056256@cgiserv.freebsd.org>
Date: Wed, 5 Mar 2014 13:01:05 GMT
From: Vladimir Romanov <blueboar_2@rambler.ru>
To: freebsd-gnats-submit@FreeBSD.org
Subject: New Russian translation of audit chapter in handbook
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         187278
>Category:       docs
>Synopsis:       New Russian translation of audit chapter in handbook
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    taras
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Mar 05 13:10:00 UTC 2014
>Closed-Date:    Wed Apr 16 17:25:40 UTC 2014
>Last-Modified:  Wed Apr 16 17:40:01 UTC 2014
>Originator:     Vladimir Romanov
>Release:        
>Organization:
Kurgan TV Centre
>Environment:
>Description:
File with diff attached. It is new Russian translation of audit chapter of handbook, as of last SVN revision 43688.
>How-To-Repeat:

>Fix:


Patch attached with submission follows:

8c8
<      Original revision: r30208
---
>      Original revision: r43688
16c16,18
< <chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0" xml:id="audit">
---
> <chapter xmlns="http://docbook.org/ns/docbook"
>  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
>  xml:id="audit">
19c21,33
<       <author><personname><firstname>Tom</firstname><surname>Rhodes</surname></personname><contrib> </contrib></author>
---
>       <author>
>         <personname>
>           <firstname>Tom</firstname>
>           <surname>Rhodes</surname>
>         </personname>
>         <contrib> </contrib>
>       </author>
>       <author>
>         <personname>
>           <firstname>Robert</firstname>
>           <surname>Watson</surname>
>         </personname>
>       </author>
22c36,49
<       <author><personname><firstname></firstname><surname></surname></personname><contrib>   : </contrib></author>
---
>       <author>
>         <personname>
>           <firstname></firstname>
>           <surname></surname>
>         </personname>
>         <contrib>   : </contrib>
>       </author>
>       <author>
>         <personname>
>           <firstname></firstname>
>           <surname></surname>
>         </personname>
>         <contrib> : </contrib>
>       </author>
25c52
<   
---
> 
33,36c60,62
<     <para>&os;&nbsp;6.2-RELEASE     &os;
<             .
<              
<         ,   ,
---
>     <para>  &os;      
>        .        
>          ,   ,
87,107c113,128
<       <para>   &os; 6.2 - , 
< 	       
< 	    ,   
< 	   .  
< 	     ,    
< 	   .  ,  
< 	   (X11-  , 
< 	    ) 
< 	       
< 	 .</para>
<     </warning>
< 
<     <warning>
< 	<para>       
< 	    :      
< 	          .
< 	        
< 	     .  ,  
< 	       
< 	  <filename>/var/audit</filename>,    
< 	        .</para>
---
>       <para>    , ,
> 	      .
> 	,      (  X11 
> 	 ,      
> 	)      
> 	     .</para>
>       <para>      
> 	  :      
> 	        .
> 	      
> 	      
> 	. ,      
> 	   
> 	<filename>/var/audit</filename>, 
> 	        
> 	  .</para>
113c134
<     <title>  -  .</title>
---
>     <title>    .</title>
116,118c137
<        .     ,  
<       ,    -   
<        .      
---
>        .     
125,128c144,145
< 	      .    ,
< 	       
< 	  .      
< 	   :  ,  
---
> 	      .     
> 	    :  ,  
132c149,150
< 	   <quote>-</quote> (non-attributable).  
---
> 	   <quote>-</quote> (non-attributable), 
> 	       .  
134,135c152,153
< 	   , ,    
< 	   .</para>
---
> 	   , , , ,  
> 	      .</para>
139,147c157,162
< 	<para><emphasis></emphasis> (class):   
< 	       ,  
< 	    : <quote> </quote> (fc),
< 	  <quote>  </quote> (fo),
< 	  <quote> </quote> (ex), 
< 	         (lo).
< 	      
< 	       
< 	  ,       .</para>
---
> 	<para><emphasis></emphasis> (class):   
> 	     ,  
> 	    .   
> 	   <quote> </quote> (fc),
> 	  <quote> </quote> (ex)
> 	   <quote>       </quote> (lo).</para>
154,157c169,173
< 	      (),  ,
< 	      (, ) 
< 	      , 
< 	  .</para>
---
> 	      (), 
> 	    ,    ,
> 	       ,   ,
> 	        , 
> 	   .</para>
162,163c178,179
< 	  <quote></quote> ,  - -
< 	    <quote></quote>   .
---
> 	   ,  - -
> 	       .
166,167c182,183
< 	  .     (,
< 	  <command>auditd</command>)    .</para>
---
> 	  .     
> 	     .</para>
171c187
< 	<para><emphasis> </emphasis> (selection expression):
---
> 	<para><emphasis> </emphasis> (selection expression):
173c189
< 	     .</para>
---
> 	     .</para>
177,179c193,195
< 	<para><emphasis> </emphasis> (preselection):
< 	  ,     ,   
< 	     .     ,
---
> 	<para><emphasis> </emphasis> (preselection):
> 	  ,     ,   
> 	    .     ,
181,185c197,201
< 	     
< 	  <emphasis> </emphasis>  ,  ,
< 	          
< 	   ,  ,      
< 	  .</para>
---
> 	       
> 	   ,  ,      
> 	       ,   
> 	   ,      
> 	  ,     .</para>
191,197c207,213
< 	    ,   .    
< 	   <emphasis> </emphasis>.  
< 	  <emphasis></emphasis>   
< 	      .  , 
< 	     ,       
< 	             
< 	    .</para>
---
> 	    ,   . , 
> 	  ,      
> 	    .  ,  
> 	       .
> 	  ,     , 
> 	           
> 	             .</para>
206,209c222,225
<         &os;    6.2-RELEASE.    ,
<             .  
<        ,      
<         :</para>
---
>         &os;.      
>          ,    
>          ,    
>          :</para>
216c232,233
<    <para> ,     ,
---
>    <para>         , 
>       ,     ,
221,224c238,242
<     <para>      
<            <option>auditd_flags</option>
<        &man.rc.conf.5;.</para>
<   </sect1>
---
>     <para>      
>     ,  ,   :</para>
> 
> 	<programlisting>service auditd start</programlisting>
>     </sect1>
229d246
< 
244c261
< 	  ,  .</para>
---
> 	  ,      .</para>
248,249c265,268
< 	<para><filename>audit_event</filename> -  
< 	   .  ,  ,  .</para>
---
> 	<para><filename>audit_event</filename> -   
> 	  ,   , 
> 	   ,    
> 	.</para>
253,256c272,275
< 	<para><filename>audit_user</filename> -   
< 	    .  ,  
< 	    ,     
< 	  -   <filename>audit_control</filename>.</para>
---
> 	<para><filename>audit_user</filename> -  , 
> 	     .   
> 	        
> 	   .</para>
259d277
< 
262,263c280,281
< 	   Bourne Shell,  , 
< 	      
---
> 	  ,  &man.auditd.8;, 
> 	       
265c283,284
< 	      .</para>
---
> 	      ,   
> 	     .</para>
268a288,293
> 	<warning>
> 	<para>     
> 	  ,     
> 	     </para>
> 	</warning>
> 
270c295
<       <title>  </title>
---
>       <title>  </title>
272,280c297,306
<       <para>     ,   , 
< 	 ,   .  , 
< 	       
< 	,     
< 	    .</para>
< 
<        <para>      ,
<           .    
<        .</para>
---
>       <para>     
>           ,   
>        .     ,
>             . 
>         , ,   
>          , , , ,
>             . 
>          ,   
>             
>       .</para>
282c308
<       <para>      ,
---
>       <para>     ,
287c313
< 	  <para><option>all</option> - <literal>all</literal> -
---
> 	  <para><literal>all</literal> - <emphasis>all</emphasis> -
292c318
< 	  <para><option>ad</option> - <literal>administrative</literal>
---
> 	  <para><literal>ad</literal> - <emphasis>administrative</emphasis>
298c324
< 	  <para><option>ap</option> - <literal>application</literal> -
---
> 	  <para><literal>ap</literal> - <emphasis>application</emphasis> -
303,305c329,330
< 	  <para><option>cl</option> - <literal>file_close</literal>
< 	    -    
< 	    <function>close</function>.</para>
---
> 	  <para><literal>cl</literal> - <emphasis>file close</emphasis>
> 	    -     <function>close</function>.</para>
309c334
< 	  <para><option>ex</option> - <literal>exec</literal> -
---
> 	  <para><literal>ex</literal> - <emphasis>exec</emphasis> -
317,319c342,344
< 	  <para><option>fa</option> - <literal>file_attr_acc</literal>
< 	    -        ,
< 	      &man.stat.1;, &man.pathconf.2;, 
---
> 	  <para><literal>fa</literal> - <emphasis>file attribute access</emphasis>
> 	    -     ,
> 	     &man.stat.1;, &man.pathconf.2;, 
324c349
< 	  <para><option>fc</option> - <literal>file_creation</literal>
---
> 	  <para><literal>fc</literal> - <emphasis>file create</emphasis>
330c355
< 	  <para><option>fd</option> - <literal>file_deletion</literal>
---
> 	  <para><literal>fd</literal> - <emphasis>file delete</emphasis>
336c361
< 	  <para><option>fm</option> - <literal>file_attr_mod</literal>
---
> 	  <para><literal>fm</literal> - <emphasis>file attribute modify</emphasis>
343c368
< 	  <para><option>fr</option> - <literal>file_read</literal>
---
> 	  <para><literal>fr</literal> - <emphasis>file read</emphasis>
349c374
< 	  <para><option>fw</option> - <literal>file_write</literal> -
---
> 	  <para><literal>fw</literal> - <emphasis>file write</emphasis> -
351c376
< 	     ,     .</para>
---
> 	     ,       .</para>
355c380
< 	  <para><option>io</option> - <literal>ioctl</literal> -
---
> 	  <para><literal>io</literal> - <emphasis>ioctl</emphasis> -
360c385
< 	  <para><option>ip</option> - <literal>ipc</literal> -
---
> 	  <para><literal>ip</literal> - <emphasis>ipc</emphasis> -
362c387
< 	      -  (pipe) 
---
> 	      -  (POSIX pipe) 
368,369c393,395
< 	  <para><option>lo</option> - <literal>login_logout</literal> -
< 	       &man.login.1;   &man.logout.1;.</para>
---
> 	  <para><literal>lo</literal> - <emphasis>login_logout</emphasis> -
> 	       &man.login.1;   &man.logout.1;,
> 	      .</para>
373c399
< 	  <para><option>na</option> - <literal>non_attrib</literal> -
---
> 	  <para><literal>na</literal> - <emphasis>non attributable</emphasis> -
378,380c404,405
< 	  <para><option>no</option> - <literal>no_class</literal> -
< 	     ,   
< 	    .</para>
---
> 	  <para><literal>no</literal> - <emphasis>invalid class</emphasis> -
> 	        .</para>
384c409
< 	  <para><option>nt</option> - <literal>network</literal> -
---
> 	  <para><literal>nt</literal> - <emphasis>network</emphasis> -
390,391c415,416
< 	  <para><option>ot</option> - <literal>other</literal> -
< 	     ,     .</para>
---
> 	  <para><literal>ot</literal> - <emphasis>other</emphasis> -
> 	      .</para>
395c420
< 	  <para><option>pc</option> - <literal>process</literal> -
---
> 	  <para><literal>pc</literal> - <emphasis>process</emphasis> -
405,406c430,433
<       <para>    ,  
< 	   .</para>
---
>       <para>     , ,
>           -   ,
>         ,       
>         ,   .</para>
411,413c438
< 	    ,     .  , 
< 	           
< 	         .</para>
---
> 	    ,     .</para>
418c443
< 	  .</para>
---
> 	     .</para>
423c448
< 	  .</para>
---
> 	     .</para>
428c453
< 	     .</para>
---
> 	        .</para>
432,433c457,458
< 	  <para><literal>^-</literal> -   
< 	    .</para>
---
> 	  <para><literal>^+</literal> -   
> 	       .</para>
437,438c462,463
< 	  <para><literal>^+</literal> -   
< 	    .</para>
---
> 	  <para><literal>^-</literal> -   
> 	       .</para>
457,459c482,483
< 	        
< 	 ,    - .  
< 	     .</para>
---
> 	   ,   
> 	     .</para>
464,466c488,489
< 	<para> <filename>audit_control</filename> 
< 	    , , , 
< 	  .    :</para>
---
> 	<para>     
> 	    <filename>audit_control</filename>:</para>
475,476c498,502
< 	<para> <option>dir</option>  , 
< 	       .  
---
> 	<para> <option>dir</option>  
> 	      , 
> 	       . 
> 	      ,   
> 	     ,   . 
479,492c505,513
< 	       , 
< 	        
< 	  .</para>
< 
< 	<para> <option>flags</option>  
< 	    .    
< 	  <option>lo</option>     
< 	  &man.login.1;  &man.logout.1;.   
< 	  :</para>
< 
< 	  <programlisting>dir:/var/audit
< flags:lo,ad,-all,^-fa,^-fc,^-cl
< minfree:20
< naflags:lo</programlisting>
---
> 	       
> 	    ,      
> 	     .</para>
> 
> 	<para> <option>flags</option>  
> 	      
> 	    .   ,  
> 	    ,      
> 	         </para>
494,508c515
< 	  <para>   <option>flags</option>
< 	       &man.login.1; 
< 	  &man.logout.1;,   ,  
< 	    , ,    
< 	    <option>fa</option>, <option>fc</option> 
< 	  <option>cl</option>.    ,  
< 	  <option>-all</option>    
< 	    ,  <option>^-</option> 
< 	       .</para>
< 
< 	<para>,     .
< 	       ,
< 	   .</para>
< 
< 	<para> <option>minfree</option>  
---
> 	<para> <option>minfree</option>  
510,520c517,544
< 	      .  , 
< 	    <option>dir</option>  
< 	  <filename>/var/audit</filename>,  
< 	  <option>minfree</option>   (20),  
< 	    ,   <filename>/var</filename>   
< 	   (80%) .</para>
< 
< 	<para> <option>naflags</option>  
< 	    - ,   ,
< 	     ̣  .</para>
< 
---
> 	      .  
> 	    ,   .
> 	      
> 	     .</para>
> 
> 	<para> <option>naflags</option>  
> 	    - , , 
> 	       .</para>
> 
> 	<para> <option>policy</option>  
> 	 ,    
> 	.       .
> 	 ,  <literal>cnt</literal> , 
> 	   ,   
> 	 (     ).
> 	   - <literal>argv</literal>,
> 	     
> 	     &man.execve.2;, 
> 	  .</para>
> 	
> 	<para> <option>filesz</option> 
> 	   ,    
> 	  ,     
> 	   .  ,  0
> 	   .  
> 	  ,     
> 	512,    ,   
> 	   .</para>
526,546c550,575
< 	<para> <filename>audit_user</filename> 
< 	     ,   
< 	      .</para>
< 
< 	<para>   <filename>audit_user</filename>
< 	:</para>
< 
< 	<programlisting>root:lo:no
< audit:fc:no</programlisting>
< 
< 	<para> :     
< 	  <command>login</command>/<command>logout</command>  
< 	        
< 	  <systemitem class="username">root</systemitem>.     
< 	    ,      
< 	       
< 	  <systemitem class="username">audit</systemitem>.    
< 	        
< 	  ,   , 
< 	   <acronym>MAC</acronym> (Mandatory Access
< 	  Control),    .</para>
---
> 	<para>   
> 	       
> 	    <filename>audit_user</filename>.
> 	       
> 	     :   
> 	  <literal>alwaysaudit</literal>,  
> 	   ,    
> 	     ,   - 
> 	  <literal>neveraudit</literal>,  
> 	   ,     
> 	    .</para>
> 
> 	<para>  <filename>audit_user</filename>
> 	           
> 	     <systemitem class="username">root</systemitem>,
> 	       ,    
> 	        
> 	  <systemitem class="username">www</systemitem>.   
> 	     <filename>audit_control</filename>,
> 	   <literal>lo</literal>  <systemitem class="username">root</systemitem>
> 	   ,  ,      
> 	         
> 	  <systemitem class="username">www</systemitem>.</para>
> 
> 	<programmlisting>root:lo,+ex:no
> 	www:fc,+ex:no</programlisting>
553c582
<     <title>  </title>
---
>     <title>  </title>
560,561c589,590
< 	.   <command>praudit</command>   
< 	  ;  <command>auditreduce</command>  
---
> 	.   &man.praudit.1;   
> 	  ;  &man.auditreduce.1;  
563,566c592,595
< 	  .   <command>auditreduce</command>
< 	   ,   , 
< 	,  ,        ,
< 	   .</para>
---
> 	  .   
> 	  &man.auditreduce.1;,   
> 	,  ,  ,   
> 	 ,   ,    .</para>
568c597
<       <para>,  <command>praudit</command>   
---
>       <para>,  &man.praudit.1;   
573c602
<       <para>   <replaceable>AUDITFILE</replaceable> -  ,
---
>       <para>   <filename>AUDITFILE</filename> -  ,
577,580c606,609
< 	    .    
< 	<command>praudit</command>   -    .
< 	    , 
< 	<literal></literal> (header)   pfgbcb, a
---
> 	   ,   &man.praudit.1; 
> 	  -    .   
> 	  , 
> 	<literal></literal> (header)   , a
582,583c611
< 	lookup.        
< 	(execve):</para>
---
> 	      <literal>execve</literal>:</para>
593c621
<       <para>      
---
>       <para>      
595,596c623,624
< 	 <literal>finger doug</literal>.   <literal>exec</literal>  
< 	,    ,   .  
---
> 	 <literal>finger doug</literal>.      
> 	 ,    .  
599,610c627,640
< 	  , ,  ,    .
< 	 <literal></literal> (subject)  , 
< 	       ,  
< 	UID   ,  (effective) UID  GID,
< 	 (real) UID  GID,  ,  ,
< 	  ,       .
< 	  -     
< 	  :  ,  
< 	<literal>robert</literal>    
< 	<literal>root</literal>   ,   
< 	       .
< 	,  <literal></literal> (return)  
---
> 	  , ,  ,  , 
> 	   ,    
> 	setuid.  <literal></literal> (subject)  , 
> 	      ,  
> 	ID   ,  (effective) UID  GID,
> 	 ID   ,  , 
> 	 ,   ,     
> 	  .   -   
> 	     : 
> 	 ,   <systemitem class="username">robert</systemitem>  
> 	   <systemitem class="username">root</systemitem>  
> 	 ,        
> 	   . ,  
> 	<literal></literal> (return)  
613a644,647
> 	<para>   <acronym>XML</acronym>  
> 	    &man.praudit.1;,  
> 	<option>-x</option>.</para>
> 
625,626c659,660
<       <para>    ,   
< 	<systemitem class="username">trhodes</systemitem>,    
---
>       <para>    ,  
> 	<systemitem class="username">trhodes</systemitem>,   
634c668,669
< 	  ,   <filename>/var/audit</filename>;
---
> 	  ,   
> 	<filename>/var/audit</filename>;
639,641c674,676
< 	     ,    
< 	  .  ,  
< 	       .</para>
---
> 	     , , 
> 	       
> 	  .</para>
645c680
<       <title>    </title>
---
>       <title>        </title>
647,655c682,691
<       <para>   -  -,
< 	 ,      
< 	   .    ,  
< 	      
< 	  .    ,   
< 	       
< 	    ,     
< 	       .   ,
< 	       
---
>       <para>   -  - 
> 	  ,  ,   
> 	       .
> 	  ,      
> 	      .    
> 	,        
> 	        
> 	,     ,  
> 	 ,      .
> 	 ,        
660,661c696,697
<       <para> ,     <systemitem class="username">root</systemitem>.  
< 	     <systemitem class="groupname">audit</systemitem> 
---
>       <para> ,     <systemitem class="username">root</systemitem>.
> 	      <systemitem class="groupname">audit</systemitem> 
667c703
<       <para>    &man.devfs.rules.5;   
---
>       <para> &man.devfs.rules.5;   
673,677c709,716
< 	   -,   <command>praudit</command>
< 	     SSH-,     
< 	  ,          
< 	  .      <command>praudit</command>
< 	      ,   .</para>
---
> 	   -,   &man.praudit.1;
> 	     SSH-,   
> 	     ,    
> 	     ,    .
> 	     &man.praudit.1;
> 	       ,  
> 	     -,   
> 	  .</para>
685c724
< 	 <application>auditd</application>.     
---
> 	 &man.auditd.8;.     
689c728
< 	 <command>audit</command>.     
---
> 	 &man.audit.8;.     
692,693c731,732
< 	  - .     
< 	 .</para>
---
> 	  - ,       
> 	 .</para>
698c737
< 	<para>  <application>auditd</application>  ,   
---
> 	<para> &man.auditd.8;  ,   
711,714c750,753
<       <para>      
< 	 <option>filesz</option>  
< 	&man.audit.control.5;,    
< 	"  ".</para>
---
>       <para>     
>               <option>filesz</option>
>           &man.audit.control.5;,    
> 	"  "  .</para>
722,725c761,764
< 	    <command>auditd</command>.   
< 	    
< 	  ,     
< 	    ,    
---
> 	    .   
> 	  ,  
> 	  ,    
> 	   ,    
737,743c776,781
<       <para>    , ,     
< 	 ,    , 
< 	     .  
< 	<filename>audit_warn</filename>     
< 	       
< 	  ,      
< 	  .</para>
---
>       <para>    , ,  
> 	   ,    , 
> 	      .  
> 	         
> 	      ,     
> 	    .</para>


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-doc->taras 
Responsible-Changed-By: taras 
Responsible-Changed-When: Sun Mar 9 09:18:30 UTC 2014 
Responsible-Changed-Why:  
Take. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=187278 
State-Changed-From-To: open->closed 
State-Changed-By: taras 
State-Changed-When: Wed Apr 16 17:23:08 UTC 2014 
State-Changed-Why:  
Your patch was committed with slight (style) modifications. 
Thanks. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=187278 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: docs/187278: commit references a PR
Date: Wed, 16 Apr 2014 17:31:06 +0000 (UTC)

 --===============7049696767389296746==
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
 
 Author: taras
 Date: Wed Apr 16 17:12:25 2014
 New Revision: 44579
 URL: http://svnweb.freebsd.org/changeset/doc/44579
 
 Log:
   MFen:
   + books/handbook/audit/chapter.xml            r30208  --> r43688
   
   PR: docs/187278
   Submitted by: Vladimir Romanov <blueboar_2@rambler.ru>
 
 Modified:
   head/ru_RU.KOI8-R/books/handbook/audit/chapter.xml
 
 Modified: head/ru_RU.KOI8-R/books/handbook/audit/chapter.xml
 ==============================================================================
 --- head/ru_RU.KOI8-R/books/handbook/audit/chapter.xml	Wed Apr 16 15:55:46 2014	(r44578)
 +++ head/ru_RU.KOI8-R/books/handbook/audit/chapter.xml	Wed Apr 16 17:12:25 2014	(r44579)
 @@ -5,7 +5,7 @@
       $FreeBSDru: frdp/doc/ru_RU.KOI8-R/books/handbook/audit/chapter.xml,v 1.10 2007/06/26 08:38:00 den Exp $
       $FreeBSD$
  
 -     Original revision: r30208
 +     Original revision: r43688
  -->
  <!-- Need more documentation on praudit, auditreduce, etc.  Plus more info
  on the triggers from the kernel (log rotation, out of space, etc).
 @@ -13,16 +13,43 @@ And the /dev/audit special file if we ch
  some coverage of integrating MAC with Event auditing and perhaps discussion
  on how some companies or organizations handle auditing and auditing
  requirements. -->
 -<chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0" xml:id="audit">
 +<chapter xmlns="http://docbook.org/ns/docbook"
 + xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
 + xml:id="audit">
    <info><title>  </title>
      <authorgroup>
 -      <author><personname><firstname>Tom</firstname><surname>Rhodes</surname></personname><contrib> </contrib></author>
 +      <author>
 +        <personname>
 +          <firstname>Tom</firstname>
 +          <surname>Rhodes</surname>
 +        </personname>
 +        <contrib> </contrib>
 +      </author>
 +      <author>
 +        <personname>
 +          <firstname>Robert</firstname>
 +          <surname>Watson</surname>
 +        </personname>
 +      </author>
      </authorgroup>
      <authorgroup>
 -      <author><personname><firstname></firstname><surname></surname></personname><contrib>   : </contrib></author>
 +      <author>
 +        <personname>
 +          <firstname></firstname>
 +          <surname></surname>
 +        </personname>
 +        <contrib>   : </contrib>
 +      </author>
 +      <author>
 +        <personname>
 +          <firstname></firstname>
 +          <surname></surname>
 +        </personname>
 +        <contrib> : </contrib>
 +      </author>
      </authorgroup>
    </info>
 -  
 +
    <sect1 xml:id="audit-synopsis">
      <title> </title>
      <indexterm><primary>AUDIT</primary></indexterm>
 @@ -30,10 +57,9 @@ requirements. -->
        <primary>  </primary>
        <see>MAC</see>
      </indexterm>
 -    <para>&os;&nbsp;6.2-RELEASE     &os;
 -            .
 -             
 -        ,   ,
 +    <para>  &os;      
 +       .        
 +         ,   ,
           ,  ,  
          .       
          ,  
 @@ -84,117 +110,107 @@ requirements. -->
      </itemizedlist>
  
      <warning>
 -      <para>   &os; 6.2 - , 
 -	       
 -	    ,   
 -	   .  
 -	     ,    
 -	   .  ,  
 -	   (X11-  , 
 -	    ) 
 -	       
 -	 .</para>
 -    </warning>
 -
 -    <warning>
 -	<para>       
 -	    :      
 -	          .
 -	        
 -	     .  ,  
 -	       
 -	  <filename>/var/audit</filename>,    
 -	        .</para>
 +      <para>    , ,
 +	      .
 +	,      (  X11 
 +	 ,      
 +	)      
 +	     .</para>
 +      <para>      
 +	  :      
 +	        .
 +	      
 +	      
 +	. ,      
 +	   
 +	<filename>/var/audit</filename>, 
 +	        
 +	  .</para>
      </warning>
  
    </sect1>
  
    <sect1 xml:id="audit-inline-glossary">
 -    <title>  -  .</title>
 +    <title>    .</title>
  
      <para>      
 -       .     ,  
 -      ,    -   
 -       .      
 +       .     
                
         .</para>
  
      <itemizedlist>
        <listitem>
  	<para><emphasis></emphasis> (event): , 
 -	      .    ,
 -	       
 -	  .      
 -	   :  ,  
 +	      .     
 +	    :  ,  
  	  ,    .  
  	    <quote></quote> (attributable) -
  	  ,        -
 -	   <quote>-</quote> (non-attributable).  
 +	   <quote>-</quote> (non-attributable), 
 +	       .  
  	  -  -  ,  
 -	   , ,    
 -	   .</para>
 +	   , , , ,  
 +	      .</para>
        </listitem>
  
        <listitem>
 -	<para><emphasis></emphasis> (class):   
 -	       ,  
 -	    : <quote> </quote> (fc),
 -	  <quote>  </quote> (fo),
 -	  <quote> </quote> (ex), 
 -	         (lo).
 -	      
 -	       
 -	  ,       .</para>
 +	<para><emphasis></emphasis> (class):   
 +	     ,  
 +	    .   
 +	   <quote> </quote> (fc),
 +	  <quote> </quote> (ex)
 +	   <quote>       </quote> (lo).</para>
        </listitem>
  
        <listitem>
  	<para><emphasis></emphasis> (record): <quote></quote> -
  	      ,    
  	  .        ,
 -	      (),  ,
 -	      (, ) 
 -	      , 
 -	  .</para>
 +	      (), 
 +	    ,    ,
 +	       ,   ,
 +	        , 
 +	   .</para>
        </listitem>
  
        <listitem>
  	<para><emphasis></emphasis> (trail):
 -	  <quote></quote> ,  - -
 -	    <quote></quote>   .
 +	   ,  - -
 +	       .
  	   ,     
  	      
 -	  .     (,
 -	  <command>auditd</command>)    .</para>
 +	  .     
 +	     .</para>
       </listitem>
  
        <listitem>
 -	<para><emphasis> </emphasis> (selection expression):
 +	<para><emphasis> </emphasis> (selection expression):
  	  ,      , 
 -	     .</para>
 +	     .</para>
        </listitem>
  
        <listitem>
 -	<para><emphasis> </emphasis> (preselection):
 -	  ,     ,   
 -	     .     ,
 +	<para><emphasis> </emphasis> (preselection):
 +	  ,     ,   
 +	    .     ,
  	     ,    .
 -	     
 -	  <emphasis> </emphasis>  ,  ,
 -	          
 -	   ,  ,      
 -	  .</para>
 +	       
 +	   ,  ,      
 +	       ,   
 +	   ,      
 +	  ,     .</para>
        </listitem>
  
        <listitem>
  	<para><emphasis></emphasis> (reduction):
  	  ,       
 -	    ,   .    
 -	   <emphasis> </emphasis>.  
 -	  <emphasis></emphasis>   
 -	      .  , 
 -	     ,       
 -	             
 -	    .</para>
 +	    ,   . , 
 +	  ,      
 +	    .  ,  
 +	       .
 +	  ,     , 
 +	           
 +	             .</para>
        </listitem>
      </itemizedlist>
    </sect1>
 @@ -203,30 +219,31 @@ requirements. -->
      <title>  </title>
  
      <para>      
 -        &os;    6.2-RELEASE.    ,
 -            .  
 -       ,      
 -        :</para>
 +        &os;.      
 +         ,    
 +         ,    
 +         :</para>
  
      <programlisting>options	AUDIT</programlisting>
  
      <para>        
        <xref linkend="kernelconfig"/>.</para>
  
 -   <para> ,     ,
 +   <para>         , 
 +      ,     ,
            &man.rc.conf.5;:</para>
  
      <programlisting>auditd_enable="YES"</programlisting>
  
 -    <para>      
 -           <option>auditd_flags</option>
 -       &man.rc.conf.5;.</para>
 -  </sect1>
 +    <para>      
 +    ,  ,   :</para>
 +
 +	<programlisting>service auditd start</programlisting>
 +    </sect1>
  
    <sect1 xml:id="audit-config">
      <title>  </title>
  
 -
      <para>       
      <filename>/etc/security</filename>.    
            :</para>
 @@ -241,72 +258,80 @@ requirements. -->
  	<para><filename>audit_control</filename> -  
  	  :   ,  
  	  ,      
 -	  ,  .</para>
 +	  ,      .</para>
        </listitem>
  
        <listitem>
 -	<para><filename>audit_event</filename> -  
 -	   .  ,  ,  .</para>
 +	<para><filename>audit_event</filename> -   
 +	  ,   , 
 +	   ,    
 +	.</para>
        </listitem>
  
        <listitem>
 -	<para><filename>audit_user</filename> -   
 -	    .  ,  
 -	    ,     
 -	  -   <filename>audit_control</filename>.</para>
 +	<para><filename>audit_user</filename> -  , 
 +	     .   
 +	        
 +	   .</para>
        </listitem>
  
 -
        <listitem>
  	<para><filename>audit_warn</filename> -  
 -	   Bourne Shell,  , 
 -	      
 +	  ,  &man.auditd.8;, 
 +	       
  	  , ,    
 -	      .</para>
 +	      ,   
 +	     .</para>
        </listitem>
      </itemizedlist>
  
 +	<warning>
 +	<para>     
 +	  ,     
 +	     </para>
 +	</warning>
 +
      <sect2>
 -      <title>  </title>
 +      <title>  </title>
  
 -      <para>     ,   , 
 -	 ,   .  , 
 -	       
 -	,     
 -	    .</para>
 -
 -       <para>      ,
 -          .    
 -       .</para>
 +      <para>     
 +          ,   
 +       .     ,
 +            . 
 +        , ,   
 +         , , , ,
 +            . 
 +         ,   
 +            
 +      .</para>
  
 -      <para>      ,
 +      <para>     ,
  	   <filename>audit_class</filename>:</para>
  
        <itemizedlist>
  	<listitem>
 -	  <para><option>all</option> - <literal>all</literal> -
 +	  <para><literal>all</literal> - <emphasis>all</emphasis> -
  	     .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>ad</option> - <literal>administrative</literal>
 +	  <para><literal>ad</literal> - <emphasis>administrative</emphasis>
  	    -   ,  
  	      .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>ap</option> - <literal>application</literal> -
 +	  <para><literal>ap</literal> - <emphasis>application</emphasis> -
  	     ,  - .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>cl</option> - <literal>file_close</literal>
 -	    -    
 -	    <function>close</function>.</para>
 +	  <para><literal>cl</literal> - <emphasis>file close</emphasis>
 +	    -     <function>close</function>.</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>ex</option> - <literal>exec</literal> -
 +	  <para><literal>ex</literal> - <emphasis>exec</emphasis> -
  	    .      
  	      &man.audit.control.5;
  	    <literal>argv</literal>   <literal>envv</literal>
 @@ -314,85 +339,85 @@ requirements. -->
  	</listitem>
  
  	<listitem>
 -	  <para><option>fa</option> - <literal>file_attr_acc</literal>
 -	    -        ,
 -	      &man.stat.1;, &man.pathconf.2;, 
 +	  <para><literal>fa</literal> - <emphasis>file attribute access</emphasis>
 +	    -     ,
 +	     &man.stat.1;, &man.pathconf.2;, 
  	       .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>fc</option> - <literal>file_creation</literal>
 +	  <para><literal>fc</literal> - <emphasis>file create</emphasis>
  	    -  ,    
  	    .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>fd</option> - <literal>file_deletion</literal>
 +	  <para><literal>fd</literal> - <emphasis>file delete</emphasis>
  	    -  ,    
  	    .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>fm</option> - <literal>file_attr_mod</literal>
 +	  <para><literal>fm</literal> - <emphasis>file attribute modify</emphasis>
  	    -  ,    
  	     , , &man.chown.8;,
  	    &man.chflags.1;, &man.flock.2;.</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>fr</option> - <literal>file_read</literal>
 +	  <para><literal>fr</literal> - <emphasis>file read</emphasis>
  	    -  ,    
  	     ,      ..</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>fw</option> - <literal>file_write</literal> -
 +	  <para><literal>fw</literal> - <emphasis>file write</emphasis> -
  	    -  ,    
 -	     ,     .</para>
 +	     ,       .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>io</option> - <literal>ioctl</literal> -
 +	  <para><literal>io</literal> - <emphasis>ioctl</emphasis> -
  	      &man.ioctl.2;.</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>ip</option> - <literal>ipc</literal> -
 +	  <para><literal>ip</literal> - <emphasis>ipc</emphasis> -
  	        ,
 -	      -  (pipe) 
 +	      -  (POSIX pipe) 
  	        System V
  	    <acronym>IPC</acronym>.</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>lo</option> - <literal>login_logout</literal> -
 -	       &man.login.1;   &man.logout.1;.</para>
 +	  <para><literal>lo</literal> - <emphasis>login_logout</emphasis> -
 +	       &man.login.1;   &man.logout.1;,
 +	      .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>na</option> - <literal>non_attrib</literal> -
 +	  <para><literal>na</literal> - <emphasis>non attributable</emphasis> -
  	     - .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>no</option> - <literal>no_class</literal> -
 -	     ,   
 -	    .</para>
 +	  <para><literal>no</literal> - <emphasis>invalid class</emphasis> -
 +	        .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>nt</option> - <literal>network</literal> -
 +	  <para><literal>nt</literal> - <emphasis>network</emphasis> -
  	     ,    ,
  	     &man.connect.2;  &man.accept.2;.</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>ot</option> - <literal>other</literal> -
 -	     ,     .</para>
 +	  <para><literal>ot</literal> - <emphasis>other</emphasis> -
 +	      .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><option>pc</option> - <literal>process</literal> -
 +	  <para><literal>pc</literal> - <emphasis>process</emphasis> -
  	      ,    &man.exec.3; 
  	    &man.exit.3;.</para>
  	</listitem>
 @@ -402,40 +427,40 @@ requirements. -->
  	  <filename>audit_class</filename> 
  	 <filename>audit_event</filename>.</para>
  
 -      <para>    ,  
 -	   .</para>
 +      <para>     , ,
 +          -   ,
 +        ,       
 +        ,   .</para>
  
        <itemizedlist>
  	<listitem>
  	  <para><literal>[ ]</literal> -    
 -	    ,     .  , 
 -	           
 -	         .</para>
 +	    ,     .</para>
  	</listitem>
  
  	<listitem>
  	  <para><literal>+</literal> -   
 -	  .</para>
 +	     .</para>
  	</listitem>
  
  	<listitem>
  	  <para><literal>-</literal> -   
 -	  .</para>
 +	     .</para>
  	</listitem>
  
  	<listitem>
  	  <para><literal>^</literal> -    ,  
 -	     .</para>
 +	        .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><literal>^-</literal> -   
 -	    .</para>
 +	  <para><literal>^+</literal> -   
 +	       .</para>
  	</listitem>
  
  	<listitem>
 -	  <para><literal>^+</literal> -   
 -	    .</para>
 +	  <para><literal>^-</literal> -   
 +	       .</para>
  	</listitem>
  
        </itemizedlist>
 @@ -454,16 +479,14 @@ requirements. -->
  	       :
  	<filename>audit_control</filename> 
  	<filename>audit_user</filename>.     
 -	        
 -	 ,    - .  
 -	     .</para>
 +	   ,   
 +	     .</para>
  
        <sect3 xml:id="audit-auditcontrol">
  	<title> <filename>audit_control</filename></title>
  
 -	<para> <filename>audit_control</filename> 
 -	    , , , 
 -	  .    :</para>
 +	<para>     
 +	    <filename>audit_control</filename>:</para>
  
  	<programlisting>dir:/var/audit
  flags:lo
 @@ -472,115 +495,120 @@ naflags:lo
  policy:cnt
  filesz:0</programlisting>
  
 -	<para> <option>dir</option>  , 
 -	       .  
 +	<para> <option>dir</option>  
 +	      , 
 +	       . 
 +	      ,   
 +	     ,   . 
  	  ,     , 
  	       , 
 -	       , 
 -	        
 -	  .</para>
 -
 -	<para> <option>flags</option>  
 -	    .    
 -	  <option>lo</option>     
 -	  &man.login.1;  &man.logout.1;.   
 -	  :</para>
 -
 -	  <programlisting>dir:/var/audit
 -flags:lo,ad,-all,^-fa,^-fc,^-cl
 -minfree:20
 -naflags:lo</programlisting>
 +	       
 +	    ,      
 +	     .</para>
 +
 +	<para> <option>flags</option>  
 +	      
 +	    .   ,  
 +	    ,      
 +	         </para>
  
 -	  <para>   <option>flags</option>
 -	       &man.login.1; 
 -	  &man.logout.1;,   ,  
 -	    , ,    
 -	    <option>fa</option>, <option>fc</option> 
 -	  <option>cl</option>.    ,  
 -	  <option>-all</option>    
 -	    ,  <option>^-</option> 
 -	       .</para>
 -
 -	<para>,     .
 -	       ,
 -	   .</para>
 -
 -	<para> <option>minfree</option>  
 +	<para> <option>minfree</option>  
  	       , 
 -	      .  , 
 -	    <option>dir</option>  
 -	  <filename>/var/audit</filename>,  
 -	  <option>minfree</option>   (20),  
 -	    ,   <filename>/var</filename>   
 -	   (80%) .</para>
 -
 -	<para> <option>naflags</option>  
 -	    - ,   ,
 -	     ̣  .</para>
 -
 +	      .  
 +	    ,   .
 +	      
 +	     .</para>
 +
 +	<para> <option>naflags</option>  
 +	    - , , 
 +	       .</para>
 +
 +	<para> <option>policy</option>  
 +	 ,    
 +	.       .
 +	 ,  <literal>cnt</literal> , 
 +	   ,   
 +	 (     ).
 +	   - <literal>argv</literal>,
 +	     
 +	     &man.execve.2;, 
 +	  .</para>
 +	
 +	<para> <option>filesz</option> 
 +	   ,    
 +	  ,     
 +	   .  ,  0
 +	   .  
 +	  ,     
 +	512,    ,   
 +	   .</para>
        </sect3>
  
        <sect3 xml:id="audit-audituser">
  	<title> <filename>audit_user</filename></title>
  
 -	<para> <filename>audit_user</filename> 
 -	     ,   
 -	      .</para>
 -
 -	<para>   <filename>audit_user</filename>
 -	:</para>
 -
 -	<programlisting>root:lo:no
 -audit:fc:no</programlisting>
 -
 -	<para> :     
 -	  <command>login</command>/<command>logout</command>  
 -	        
 -	  <systemitem class="username">root</systemitem>.     
 -	    ,      
 -	       
 -	  <systemitem class="username">audit</systemitem>.    
 -	        
 -	  ,   , 
 -	   <acronym>MAC</acronym> (Mandatory Access
 -	  Control),    .</para>
 +	<para>   
 +	       
 +	    <filename>audit_user</filename>.
 +	       
 +	     :   
 +	  <literal>alwaysaudit</literal>,  
 +	   ,    
 +	     ,   - 
 +	  <literal>neveraudit</literal>,  
 +	   ,     
 +	    .</para>
 +
 +	<para>  <filename>audit_user</filename>
 +	           
 +	     <systemitem class="username">root</systemitem>,
 +	       ,    
 +	        
 +	  <systemitem class="username">www</systemitem>.   
 +	     <filename>audit_control</filename>,
 +	   <literal>lo</literal>  <systemitem class="username">root</systemitem>
 +	   ,  ,      
 +	         
 +	  <systemitem class="username">www</systemitem>.</para>
 +
 +	<programlisting>root:lo,+ex:no
 +www:fc,+ex:no</programlisting>
  
        </sect3>
      </sect2>
    </sect1>
  
    <sect1 xml:id="audit-administration">
 -    <title>  </title>
 +    <title>  </title>
  
      <sect2>
        <title>  </title>
  
        <para>      BSM,  
  	        
 -	.   <command>praudit</command>   
 -	  ;  <command>auditreduce</command>  
 +	.   &man.praudit.1;   
 +	  ;  &man.auditreduce.1;  
  	        ,
 -	  .   <command>auditreduce</command>
 -	   ,   , 
 -	,  ,        ,
 -	   .</para>
 +	  .   
 +	  &man.auditreduce.1;,   
 +	,  ,  ,   
 +	 ,   ,    .</para>
  
 -      <para>,  <command>praudit</command>   
 +      <para>,  &man.praudit.1;   
  	    :</para>
  
        <screen>&prompt.root; <userinput>praudit /var/audit/AUDITFILE</userinput></screen>
  
 -      <para>   <replaceable>AUDITFILE</replaceable> -  ,
 +      <para>   <filename>AUDITFILE</filename> -  ,
  	     .</para>
  
        <para>     , ,  
 -	    .    
 -	<command>praudit</command>   -    .
 -	    , 
 -	<literal></literal> (header)   pfgbcb, a
 +	   ,   &man.praudit.1; 
 +	  -    .   
 +	  , 
 +	<literal></literal> (header)   , a
  	<literal></literal> (path) -   ,    .
 -	lookup.        
 -	(execve):</para>
 +	      <literal>execve</literal>:</para>
  
        <programlisting>header,133,10,execve(2),0,Mon Sep 25 15:58:03 2006, + 384 msec
  exec arg,finger,doug
 @@ -590,27 +618,33 @@ subject,robert,root,wheel,root,wheel,384
  return,success,0
  trailer,133</programlisting>
  
 -      <para>      
 +      <para>      
  	 <literal>execve</literal>,    
 -	 <literal>finger doug</literal>.   <literal>exec</literal>  
 -	,    ,   .  
 +	 <literal>finger doug</literal>.      
 +	 ,    .  
  	<literal></literal> (path)      
  	 .   <literal></literal> (attribute)
 -	  , ,  ,    .
 -	 <literal></literal> (subject)  , 
 -	       ,  
 -	UID   ,  (effective) UID  GID,
 -	 (real) UID  GID,  ,  ,
 -	  ,       .
 -	  -     
 -	  :  ,  
 -	<literal>robert</literal>    
 -	<literal>root</literal>   ,   
 -	       .
 -	,  <literal></literal> (return)  
 +	  , ,  ,  , 
 +	   ,    
 +	setuid.  <literal></literal> (subject)  , 
 +	      ,  
 +	ID   ,  (effective) UID  GID,
 +	 ID   ,  , 
 +	 ,   ,     
 +	  .   -   
 +	     : 
 +	 ,   <systemitem class="username">robert</systemitem>  
 +	   <systemitem class="username">root</systemitem>  
 +	 ,        
 +	   . ,  
 +	<literal></literal> (return)  
  	     0,  
  	<literal>trailer</literal>  .</para>
  
 +	<para>   <acronym>XML</acronym>  
 +	    &man.praudit.1;,  
 +	<option>-x</option>.</para>
 +
      </sect2>
  
      <sect2>
 @@ -622,8 +656,8 @@ trailer,133</programlisting>
  
        <screen>&prompt.root; <userinput>auditreduce -u trhodes /var/audit/AUDITFILE | praudit</userinput></screen>
  
 -      <para>    ,   
 -	<systemitem class="username">trhodes</systemitem>,    
 +      <para>    ,  
 +	<systemitem class="username">trhodes</systemitem>,   
  	<filename>AUDITFILE</filename>.</para>
      </sect2>
  
 @@ -631,50 +665,55 @@ trailer,133</programlisting>
        <title>   </title>
  
        <para>  <systemitem class="groupname">audit</systemitem>    
 -	  ,   <filename>/var/audit</filename>;
 +	  ,   
 +	<filename>/var/audit</filename>;
  	    ,   <systemitem class="username">root</systemitem>
  	   .   ,      
  	 ,      <systemitem class="groupname">audit</systemitem>.
  	       
 -	     ,    
 -	  .  ,  
 -	       .</para>
 +	     , , 
 +	       
 +	  .</para>
      </sect2>
  
      <sect2>
 -      <title>    </title>
 +      <title>        </title>
  
 -      <para>   -  -,
 -	 ,      
 -	   .    ,  
 -	      
 -	  .    ,   
 -	       
 -	    ,     
 -	       .   ,
 -	       
 +      <para>   -  - 
 +	  ,  ,   
 +	       .
 +	  ,      
 +	      .    
 +	,        
 +	        
 +	,     ,  
 +	 ,      .
 +	 ,        
  	 :</para>
  
        <screen>&prompt.root; <userinput>praudit /dev/auditpipe</userinput></screen>
  
 -      <para> ,     <systemitem class="username">root</systemitem>.  
 -	     <systemitem class="groupname">audit</systemitem> 
 +      <para> ,     <systemitem class="username">root</systemitem>.
 +	      <systemitem class="groupname">audit</systemitem> 
  	 <literal>devfs</literal>  
  	<filename>devfs.rules</filename>:</para>
  
        <programlisting>add path 'auditpipe*' mode 0440 group audit</programlisting>
  
 -      <para>    &man.devfs.rules.5;   
 +      <para> &man.devfs.rules.5;   
  	     devfs.</para>
  
        <warning>
  	<para>     
  	   .  ,     
 -	   -,   <command>praudit</command>
 -	     SSH-,     
 -	  ,          
 -	  .      <command>praudit</command>
 -	      ,   .</para>
 +	   -,   &man.praudit.1;
 +	     SSH-,   
 +	     ,    
 +	     ,    .
 +	     &man.praudit.1;
 +	       ,  
 +	     -,   
 +	  .</para>
        </warning>
      </sect2>
  
 @@ -682,20 +721,20 @@ trailer,133</programlisting>
        <title>   </title>
  
        <para>        
 -	 <application>auditd</application>.     
 +	 &man.auditd.8;.     
  	 &man.newsyslog.conf.5;    
  	  .   ,   ,
  	      
 -	 <command>audit</command>.     
 +	 &man.audit.8;.     
  	        
  	    .       , 
 -	  - .     
 -	 .</para>
 +	  - ,       
 +	 .</para>
  
        <screen>&prompt.root; <userinput>audit -n</userinput></screen>
  
        <warning>
 -	<para>  <application>auditd</application>  ,   
 +	<para> &man.auditd.8;  ,   
  	         .</para>
        </warning>
  
 @@ -708,10 +747,10 @@ trailer,133</programlisting>
        <para>      
  	<filename>/etc/crontab</filename>.</para>
  
 -      <para>      
 -	 <option>filesz</option>  
 -	&man.audit.control.5;,    
 -	"  ".</para>
 +      <para>     
 +              <option>filesz</option>
 +          &man.audit.control.5;,    
 +	"  "  .</para>
      </sect2>
  
      <sect2>
 @@ -719,10 +758,10 @@ trailer,133</programlisting>
  
        <para>       ,
  	         
 -	    <command>auditd</command>.   
 -	    
 -	  ,     
 -	    ,    
 +	    .   
 +	  ,  
 +	  ,    
 +	   ,    
  	<filename>audit_warn</filename>.  ,   
  	  <filename>audit_warn</filename>    
  	  :</para>
 @@ -734,13 +773,12 @@ if [ "$1" = closefile ]; then
  	gzip -9 $2
  fi</programlisting>
  
 -      <para>    , ,     
 -	 ,    , 
 -	     .  
 -	<filename>audit_warn</filename>     
 -	       
 -	  ,      
 -	  .</para>
 +      <para>    , ,  
 +	   ,    , 
 +	      .  
 +	         
 +	      ,     
 +	    .</para>
      </sect2>
    </sect1>
  </chapter>
 
 --===============7049696767389296746==
 Content-Type: text/plain; charset="us-ascii"
 MIME-Version: 1.0
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline
 
 _______________________________________________
 svn-doc-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-doc-all
 To unsubscribe, send any mail to "svn-doc-all-unsubscribe@freebsd.org"
 --===============7049696767389296746==--
 
>Unformatted:
