CONFIG_PROTECT / CONFIG_PROTECT_MASK are currently described only as being an exact list of directories ... also, section 4.3.2 should simply describe it as lists that are used to control the configuration protection and leave the exact details for chapter 12
r91.
a few more parts need to be fixed up ... Chapter 12 ... in steps one and two, it still explicitly reads "directory"
Fixed as of r134.