[handbook] bsdinstall add the hardening section

[carlavilla]

Summary

Add the hardening section to the bsdinstall section of the handbook.
Update the final configuration section to reflect the new hardening section.
And correct bug in the services section.

Test Plan

Compile the handbook

[bcr]

Ah, it's high time that these settings get documented. Thanks for that.
I've added a few corrections and clarifications.

en_US.ISO8859-1/books/handbook/bsdinstall/chapter.xml

2341 ↗

(On Diff #69298)

s/the/their/

2359 ↗

(On Diff #69298)

s/users prevent/users to prevent/

2366 ↗

(On Diff #69298)

s/groups prevent/groups to prevent/
s/user//

2373 ↗

(On Diff #69298)

s/jails prevent/jails to prevent/

2379 ↗

(On Diff #69298)

s/users prevent/users to prevent/

2386 ↗

(On Diff #69298)

s/will disable/disables/

2403 ↗

(On Diff #69298)

just write "Clean /tmp (with the markup) when the system starts up."
The markup makes it clear that this is a directory.

2411 ↗

(On Diff #69298)

s/the flag//

2412 ↗

(On Diff #69298)

That prevents the daemon from listening for...

2413 ↗

(On Diff #69298)

s/514 port/port 514/

2416 ↗

(On Diff #69298)

... which prevents syslog from opening any port.

2427 ↗

(On Diff #69298)

When this option is enabled, the ...
s/promt/prompt/
s/ask about/requests/
s/in single/when entering single/

2436 ↗

(On Diff #69298)

s/the flag//

[carlavilla]

Fixed. Thanks for the corrections!

[bcr]

You're welcome. Go ahead with the commit.