diff --git a/rhel8/index.md b/rhel8/index.md
index c5dfae45..51be8ea5 100644
--- a/rhel8/index.md
+++ b/rhel8/index.md
@@ -17,43 +17,43 @@ The configuration management is done with Puppet like for RHEL 7.
 
 It looks like it works already a lot out of the box, but no guarantee can be given unless your specfic setup has been tested. The epic [RHEL 8.6 Alpha Test](https://jira.psi.ch/browse/PSILINUX-93) lists the currently knowns issues. Please add your bugs there too.
 
-### Major Known Issues
+## Major Known Issues
 
 - using a package snapshot tag (`yum_client::repo_tag` in hiera) different than `prod` will fail horribly
 
-### Major Missing Features
+## Major Missing Features
 
 - default user home is local unless configured to be on AFS [PSILINUX-97](https://jira.psi.ch/browse/PSILINUX-97)
 - security patches are automatically installed [PSILINUX-98](https://jira.psi.ch/browse/PSILINUX-98)
 - minimal default installation, aka gem, git and postfix is not installed by default [PSILINUX-100](https://jira.psi.ch/browse/PSILINUX-100)
 
-### Caveats
+## Caveats
 
-#### Workstation Installation Takes Long and Seams to Hang
+### Workstation Installation Takes Long and Seams to Hang
 On the very first puppet run the command to install the GUI packages takes up to 10 minutes and it looks like it
 is hanging. Usually it is after the installation of `/etc/sssd/sssd.conf`. Just give it a bit time.
 
-#### Missing or Replaced Packages
+### Missing or Replaced Packages
 
 [List of packages removed in RHEL 8](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/considerations_in_adopting_rhel_8/index#removed-packages_changes-to-packages)
 
 | RHEL 7 | RHEL 8 | remarks |
 | ---    | ---    | ---     |
 | `a2ps`   | recommends to use `enscript` instead | [`enscript` upstream](https://www.gnu.org/software/enscript/) [`a2ps` upstream](https://www.gnu.org/software/a2ps/)   |
-| blt | - | [`blt` upstream](http://blt.sourceforge.net/), does not work with newer Tk version ([source](https://wiki.tcl-lang.org/page/BLT)) |
+| `blt` | - | [`blt` upstream](http://blt.sourceforge.net/), does not work with newer Tk version ([source](https://wiki.tcl-lang.org/page/BLT)) |
 | ... | ... | here I stopped research, please report/document further packages |
 | `devtoolset*` | `gcc-toolset*` | |
 
-#### Installing a Machine with YFS and an Old Package Snapshot Tag
+### Installing a Machine with YFS and an Old Package Snapshot Tag
 After the `pli-firstboot` script it stopps due to errors (installed yfs kernel module version does not fit running kernel). Still it manages to install everything fine.  
 So please restart the machine (so it loads the right kernel) and run `puppet agent` again to finally start and enable the `yfs-service`.
 
-#### "yum/dnf search" Gives Permission Denied as Normal User
-It works fine beside the below error message.
+### "yum/dnf search" Gives Permission Denied as Normal User
+It works fine beside the below error message:
 ```
 Failed to store expired repos cache: [Errno 13] Permission denied: '/var/cache/dnf/x86_64/8/expired_repos.json'
 ```
-
+which is IMHO OK to not allow a normal user to do changes there.
 
 ## Documenatation