Hey Eric, I took a quick flip through the docs and they look/read well. One thing I found a bit confusing was in Chapter 3. You go over each partition and give a little info as why you handle it the way you do. At the end of the paragraph is an italics word or phrase. I figured out that the word or phrase is the reasoning behind your selection/handling, but it was a little confusing. I'm not sure if those are author notes, or if they are meant to be in the finished document. Under the assumption that you wanted them in the finished document, I went ahead and took a whack at including them in a way I thought was more clear. Also, the /tmp partition section doesn't have a "reasoning" so someone would need to add one there. To the best of my knowledge I did everything as one change, so you should be able to revert easily if I overstepped any bounds. - Adam On Tue, 2008-04-29 at 15:42 -0400, Eric H Christensen wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Keith, Yeah, I'm going to keep this in the wiki for now. After everything goes to the "final" side I'm going to try to put them in DocBook format and see if Karsten can help me with that process. Thanks! Eric Keith Henkell wrote: | I'll take a look at it tonight. Is this staying in the wiki for now? | | | | On 4/29/08, Eric H Christensen <eric(a)christensenplace.us&gt; wrote: |> I think Chapters 1-3 in the Security Guide [1] are ready for review and |> editing. Chapter 4 is getting close to being ready and Chapter 4.1 [2] is |> already over on the final side. As soon as I get a little more time I hope |> to have Chapter 4 ready for review (later tonight?). |> |> If someone can take a look at what I have I'd appreciate it greatly! Trying |> to get this ready before F9. |> |> Eric |> |> |> [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide |> [2] http://fedoraproject.org/wiki/Security_Guide/9/LUKSDiskEncryption |> |> -- |> fedora-docs-list mailing list |> fedora-docs-list(a)redhat.com |> To unsubscribe: |> https://www.redhat.com/mailman/listinfo/fedora-docs-list |> |

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Keith, Sounds good. Just post when you have them back on the wiki. Thanks, Eric Keith Henkell wrote: | I copied chapters 2 and 3 for editing offline. I should be able to | copy any changes back up in 2-3 hours. | | | | On 4/29/08, Keith Henkell <keith(a)henkell.net&gt; wrote: |> I'll take a look at it tonight. Is this staying in the wiki for now? |> |> |> |> On 4/29/08, Eric H Christensen <eric(a)christensenplace.us&gt; wrote: |>> I think Chapters 1-3 in the Security Guide [1] are ready for review and |>> editing. Chapter 4 is getting close to being ready and Chapter 4.1 [2] is |>> already over on the final side. As soon as I get a little more time I |> hope |>> to have Chapter 4 ready for review (later tonight?). |>> |>> If someone can take a look at what I have I'd appreciate it greatly! |> Trying |>> to get this ready before F9. |>> |>> Eric |>> |>> |>> [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide |>> [2] http://fedoraproject.org/wiki/Security_Guide/9/LUKSDiskEncryption |>> |>> -- |>> fedora-docs-list mailing list |>> fedora-docs-list(a)redhat.com |>> To unsubscribe: |>> https://www.redhat.com/mailman/listinfo/fedora-docs-list |>> |

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Keith, Yeah, I see what you mean. I feel like I've written that up somewhere but I need to go back and figure out where. I'd probably move that portion to a different chapter if for no other reason than it doesn't fit in with "Secure Installation" theme. Let's move that to a "staging area" for now and see if we can develop that further. In fact, lets pull that entire "Install Minimal Software" bit out and use that as a starting point for a new chapter that can not only talk more specifically about software packages (and gpg checks on the packages) but doing security updates and software updates and why it is important. I think that would make a good solid chapter. I went ahead and moved that information to a new chapter (Chapter 5, Software Maintenance [1]) which will allow us to have a larger playground for this topic. Headed for bed in a bit. I'll be checking in post 11:30UTC. Thanks, Eric [1] https://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide/SoftwareMaintenance Keith Henkell wrote: | I merged my changes into chapter 3. Chapter 2 looks good to me. | | I added one section to the end of chapter 3 to talk about setting up | an updates stretegy. It sounds too awkward though, so if you plan on | talking about it in the other chapters, it might be better to just | take it back out. | | On Tue, Apr 29, 2008 at 6:10 PM, Eric Christensen | <eric(a)christensenplace.us&gt; wrote: |> -----BEGIN PGP SIGNED MESSAGE----- |> Ha have to sh: SHA1 |> |> Keith, |> Sounds good. Just post when you have them back on the wiki. |> |> |> Thanks, |> Eric |> |> |> |> Keith Henkell wrote: |> |> | I copied chapters 2 and 3 for editing offline. I should be able to |> | copy any changes back up in 2-3 hours. |> | |> | |> | |> | On 4/29/08, Keith Henkell <keith(a)henkell.net&gt; wrote: |> |> I'll take a look at it tonight. Is this staying in the wiki for now? |> |> |> |> |> |> |> |> On 4/29/08, Eric H Christensen <eric(a)christensenplace.us&gt; wrote: |> |>> I think Chapters 1-3 in the Security Guide [1] are ready for review and |> |>> editing. Chapter 4 is getting close to being ready and Chapter 4.1 |> [2] is |> |>> already over on the final side. As soon as I get a little more time I |> |> hope |> |>> to have Chapter 4 ready for review (later tonight?). |> |>> |> |>> If someone can take a look at what I have I'd appreciate it greatly! |> |> Trying |> |>> to get this ready before F9. |> |>> |> |>> Eric |> |>> |> |>> |> |>> [1] http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide |> |>> [2] http://fedoraproject.org/wiki/Security_Guide/9/LUKSDiskEncryption |> |>> |> |>> -- |> |>> fedora-docs-list mailing list |> |>> fedora-docs-list(a)redhat.com |> |>> To unsubscribe: |> |>> https://www.redhat.com/mailman/listinfo/fedora-docs-list |> |>> |> | |> |> -- |> |> fedora-docs-list mailing list |> fedora-docs-list(a)redhat.com |> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-docs-list |> |