Account Links: Cart | Register | Log In

Skip to content

Red Hat Linux 9 Documentation Errata

If you find any errors in the Red Hat Linux documentation, or just have a suggestion, please read the Submitting Documentation Errata page.

x86 Installation Guide

None available

Getting Started Guide

Bzip2 and Bunzip2

The command for compressing multiple files using the bzip2 utility is incorrect. The following passage shows the correct method:

You can use bzip2 to compress an archive containing multiple files and directories by first archiving the files and directories using the tar command:

tar -cvf filename.tar file1 file2 file3 /usr/work/school

The tar command archives the files and directories into a file called filename.tar. You can then use bzip2 to compress the archive file:

bzip2 filename.tar

The existing file filename.tar is automatically deleted when filename.tar.bz2 is created.

Customization Guide

Default Settings

The location of the Apache HTTP Server Error Pages is incorrect. They are located in DocumentRoot/../error/404.html. The paragraph should read:

For example, to redirect a 404 Not Found error code to a webpage that you created in a file called 404.html, copy 404.html to DocumentRoot/../error/404.html. In this case, DocumentRoot is the Document Root directory that you have defined (the default is /var/www/html/). If the Document Root is left as the default location, the file should be copied to /var/www/error/404.html. Then, choose File as the Behavior for 404 - Not Found error code and enter /error/404.html as the Location.


Working with Profiles

The statement that profiles cannot be activated at boot time is incorrect. It should read:

To activate a profile at boot time, modify the boot loader configuration file to include the netprofile=<profilename> option. For example, if the system uses GRUB as the boot loader and /boot/grub/grub.conf contains:

title Red Hat Linux (2.4.20-18.9)
        root (hd0,0)
        kernel /vmlinuz-2.4.20-18.9 ro root=LABEL=/
        initrd /initrd-2.4.20-18.9.img

modify it to the following (where <profilename> is the name of the profile to be activated at boot time):

title Red Hat Linux (2.4.20-18.9)
        root (hd0,0)
        kernel /vmlinuz-2.4.20-18.9 ro root=LABEL=/ netprofile=<profilename>
        initrd /initrd-2.4.20-18.9.img

Reference Guide

Binding and Redirection Options

The example redirect directive used in this section incorrectly specifies two ports. Unfortunately, xinetd is only capable of accepting one port for the redirect directive.

Below is a corrected version of the directive:

redirect = 10.0.1.13 23


Ethernet Interfaces

In the bullet listing for Ethernet interface options, the SRCADDR and USERCTL directives incorrectly appear to be arguments for the PEERDNS directive. They are, in fact, standalone directives.



Interface Control Scripts

The command listed for viewing configured network devices and active network interfaces is incorrect. The correct command is as follows:

/sbin/service network status


Securing Email Client Communications

The POP3 example stunnel command for securing POP3 communication specifies the wrong port (993 instead of 995).

The correct command is:

/usr/sbin/stunnel -d 995 -l /usr/sbin/pop3d pop3d


OpenLDAP Setup Overview

The command listed for starting the slapd service is incorrect. The correct command is as follows:

/sbin/service ldap start

Security Guide

Basic Firewall Policies

The commands in the following statements are incorrect:

The following rules will block all incoming and outgoing packets on a network gateway:

iptables -P INPUT DENY
iptables -P OUTPUT REJECT

Additionally, it is recommended that any forwarded packets — network traffic that is to be routed from the firewall to its destination node — be denied as well, to restrict internal clients from inadvertent exposure to the Internet. To do this, use the following rule:

iptables -P FORWARD REJECT

The correct commands should be the following:

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP


Password Protecting GRUB

The GRUB configuration file is no longer world-readable by default. For this reason, it is not necessary to alter the permissions of /boot/grub/grub.conf as specified in this section.



Configuring Clients for CIPE

The IP subnet specified in the example script is incorrect in context with the setup described in the section. The script should read as follows:

/sbin/modprobe iptables
/sbin/service iptables stop
/sbin/iptables -P INPUT REJECT
/sbin/iptables -F INPUT
/sbin/iptables -A INPUT -j ACCEPT -p udp -s 10.0.1.1
/sbin/iptables -A INPUT -j ACCEPT -i cipcb0
/sbin/iptables -A INPUT -j ACCEPT -i lo
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j MASQUERADE

System Administration Primer

None available