[PATCH 0/4] notes toward consensus, additions from RHEL 5 STIG