--- doc/build/ubuntu14LTS_install.frag	2021/01/09 03:26:20	1.4
+++ doc/build/ubuntu14LTS_install.frag	2021/03/17 03:22:07	1.5
@@ -94,6 +94,7 @@ Use ufw to allow incoming traffic for th
 ssh, www, https
 </p>
 <pre>
+sudo apt-get install ufw
 sudo ufw default deny
 sudo ufw enable
 sudo ufw allow ssh
@@ -152,6 +153,15 @@ sudo apt-get install loncapa-prerequisit
 </pre><p>
 This may take some minutes due to LON-CAPA's large number of dependencies.
 </p>
+<h3>Secure MySQL</h3>
+<p> Execute: </p>
+<pre>
+sudo mysql_secure_installation
+</pre><p>
+Answer “Y” (yes) to the prompts to: 
+(a) remove anonymous users, 
+(b) restrict root user access to the local machine,
+and (c) remove the test database.</p>
 <h3>Set MPM mode for Apache web server and enable use of cgi scripts and webDAV</h3>
 <p>Execute: </p>
 <pre>
@@ -181,7 +191,6 @@ execute the setup script with the follow
 <pre>
 cd installation
 sudo ./install.pl
-
 </pre>
 <p>
 The script is used to prepare a Linux system to run LON-CAPA, and can also be
@@ -251,12 +260,11 @@ for it to function at all.  Below is a l
 
 <h3>Configuring LON-CAPA</h3>
 <p>
-To configure and install LON-CAPA, become root and execute the following commands:
+To configure and install LON-CAPA execute the following commands:
 </p>
 <pre>
-sudo -i
-cd /root/loncapa-X.Y.Z     (X.Y.Z should correspond to a version number like '2.11.0')
-./UPDATE
+cd ../loncapa-X.Y.Z  (X.Y.Z should correspond to a version number like '2.11.0')
+sudo ./UPDATE
 </pre>
 <p>
 You will need to enter the LON-CAPA configuration information you determined 
@@ -272,18 +280,19 @@ invoked below requires that you enter th
 Replace USERNAME and DOMAIN with an appropriate username and your domain.
 </p>
 <pre>
-cd /root/loncapa-X.Y.Z/loncom/build
-perl make_domain_coordinator.pl USERNAME DOMAIN
+cd loncom/build
+sudo perl make_domain_coordinator.pl USERNAME DOMAIN
+cd
 </pre>
 
 <h2>7. <a name="sts">Start/Restart Services</a></h2>
 <p>
 The LON-CAPA network services take a moment to start.  Most misconfigurations
-will be apparent at this step. Lastly, exit from root status to resume use of your regular account.
+will be apparent at this step.
 </p>
 <pre>
-/etc/init.d/loncontrol start
-/etc/init.d/apache2 restart
+sudo /etc/init.d/loncontrol start
+sudo service apache2 restart
 exit
 </pre>
 <p>