1 files changed, 21 insertions, 0 deletions

diff --git a/usr.sbin/sysinstall/help/security.hlp b/usr.sbin/sysinstall/help/security.hlp
new file mode 100644
index 000000000000..31b421b33654
--- /dev/null
+++ b/usr.sbin/sysinstall/help/security.hlp
@@ -0,0 +1,21 @@
+Please see the FreeBSD FAQ for more detailed information on security
+profiles. The following table is intended to give you a rough idea just
+which services are enabled (or disabled) by each of the canned security
+profiles:
+
+               Fascist        High           Moderate       Low
+               -------        ----           --------       ---
+inetd          NO             NO             YES            YES
+sendmail       NO             YES            YES            YES
+sshd           NO             YES            YES            YES
+portmap        NO             NO             *              YES
+nfs_server     NO             NO             **             ***
+securelevel    YES (2)        YES (1)        NO             NO
+
+
+NOTES:
+*   Portmap is enabled if the machine has been configured as either an NFS
+    client or an NFS server earlier in the installation process.
+**  If the machine has been configured as an NFS server, NFS will only run
+    on a reserved port.
+*** No changes are made to the NFS configuration.