freebsd-dev/share/man/man5/hosts.equiv.5

.\" Copyright (c) 1983, 1991, 1993
.\"	The Regents of the University of California.  All rights reserved.
.\"
.\" Redistribution and use in source and binary forms, with or without
.\" modification, are permitted provided that the following conditions
.\" are met:
.\" 1. Redistributions of source code must retain the above copyright
.\"    notice, this list of conditions and the following disclaimer.
.\" 2. Redistributions in binary form must reproduce the above copyright
.\"    notice, this list of conditions and the following disclaimer in the
.\"    documentation and/or other materials provided with the distribution.
.\" 3. All advertising materials mentioning features or use of this software
.\"    must display the following acknowledgement:
.\"	This product includes software developed by the University of
.\"	California, Berkeley and its contributors.
.\" 4. Neither the name of the University nor the names of its contributors
.\"    may be used to endorse or promote products derived from this software
.\"    without specific prior written permission.
.\"
.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
.\" $FreeBSD$
.\"
.Dd December 8, 2007
.Dt HOSTS.EQUIV 5
.Os
.Sh NAME
.Nm hosts.equiv ,
.Nm .rhosts
.Nd trusted remote host and user name data base
.Sh DESCRIPTION
The
.Nm
and
.Nm .rhosts
files contain information regarding
trusted hosts and users on the network.
For each host a single line should be present
with the following information:
.Pp
simple
.Bd -unfilled -offset indent
hostname [username]
.Ed
.Pp
or the more verbose
.Bd -unfilled -offset indent
[+-][hostname|@netgroup] [[+-][username|@netgroup]]
.Ed
.Pp
A
.Dq @
indicates a host by netgroup or user by netgroup.
A single
.Dq +
matches all hosts or users.
A host name with a leading
.Dq -
will reject
all matching hosts and all their users.
A user name with leading
.Dq -
will reject all matching users from matching hosts.
.Pp
Items are separated by any number of blanks and/or
tab characters.
A
.Dq #
indicates the beginning of
a comment; characters up to the end of the line are
not interpreted by routines which search the file.
.Pp
Host names are specified in the conventional Internet DNS
dotted-domains
.Dq .\&
(dot) notation using the
.Xr inet_addr 3
routine
from the Internet address manipulation library,
.Xr inet 3 .
Host names may contain any printable
character other than a field delimiter, newline,
or comment character.
.Pp
For security reasons, a user's
.Nm .rhosts
file will be ignored if it is not a regular file, or if it
is not owned by the user, or
if it is writable by anyone other than the user.
.Sh FILES
.Bl -tag -width /etc/hosts.equivxxx -compact
.It Pa /etc/hosts.equiv
The
.Nm
file resides in
.Pa /etc .
.It Pa $HOME/.rhosts
.Nm .rhosts
file resides in
.Pa $HOME .
.El
.Sh EXAMPLES
.Dl bar.com foo
.Pp
Trust user
.Dq foo
from host
.Dq bar.com .
.Pp
.Dl +@allclient
.Pp
Trust all hosts from netgroup
.Dq allclient .
.Pp
.Dl +@allclient -@dau
.Pp
Trust all hosts from netgroup
.Dq allclient
and their users
except users from netgroup
.Dq dau .
.Sh SEE ALSO
.Xr rcp 1 ,
.Xr rlogin 1 ,
.Xr rsh 1 ,
.Xr gethostbyname 3 ,
.Xr inet 3 ,
.Xr innetgr 3 ,
.Xr ruserok 3 ,
.Xr netgroup 5 ,
.Xr ifconfig 8 ,
.Xr named 8 ,
.Xr yp 8
.Sh BUGS
This manual page is incomplete.
For more information read
the source in
.Pa src/lib/libc/net/rcmd.c
or the SunOS manual page.
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.\" Copyright (c) 1983, 1991, 1993`
			`.\" The Regents of the University of California. All rights reserved.`
			`.\"`
			`.\" Redistribution and use in source and binary forms, with or without`
			`.\" modification, are permitted provided that the following conditions`
			`.\" are met:`
			`.\" 1. Redistributions of source code must retain the above copyright`
			`.\" notice, this list of conditions and the following disclaimer.`
			`.\" 2. Redistributions in binary form must reproduce the above copyright`
			`.\" notice, this list of conditions and the following disclaimer in the`
			`.\" documentation and/or other materials provided with the distribution.`
			`.\" 3. All advertising materials mentioning features or use of this software`
			`.\" must display the following acknowledgement:`
			`.\" This product includes software developed by the University of`
			`.\" California, Berkeley and its contributors.`
			`.\" 4. Neither the name of the University nor the names of its contributors`
			`.\" may be used to endorse or promote products derived from this software`
			`.\" without specific prior written permission.`
			`.\"`
			.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
			`.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE`
			`.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE`
			`.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE`
			`.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL`
			`.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS`
			`.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)`
			`.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT`
			`.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY`
			`.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF`
			`.\" SUCH DAMAGE.`
			`.\"`
$Id$ -> $FreeBSD$ 1999-08-28 00:22:10 +00:00			`.\" $FreeBSD$`
delete doubled words, e.g.: "the the" -> "the" 1996-10-05 18:37:31 +00:00			`.\"`
Improve readability for the hosts.equiv file regarding the notation of hostnames. PR: docs/35953 Submitted by: "Gary W. Swearingen" <swear at blarg dot net> With minor modifications by me. 2007-12-08 22:43:16 +00:00			`.Dd December 8, 2007`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Dt HOSTS.EQUIV 5`
mdoc(7) police: removed HISTORY info from the .Os call. 2001-07-10 15:31:11 +00:00			`.Os`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Sh NAME`
			`.Nm hosts.equiv ,`
			`.Nm .rhosts`
"host name and user" -> "host and user name" Submitted by: Rich Morin <rdm@cfcl.com> 2001-06-26 14:04:28 +00:00			`.Nd trusted remote host and user name data base`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Sh DESCRIPTION`
			`The`
mdoc(7) police: use the new features of the Nm macro. 2000-11-20 18:41:33 +00:00			`.Nm`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`and`
			`.Nm .rhosts`
misc. spelling and grammar gnits. 1998-06-28 21:33:42 +00:00			`files contain information regarding`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`trusted hosts and users on the network.`
			`For each host a single line should be present`
			`with the following information:`
Prepare for mdoc(7)NG. 2000-12-29 09:18:45 +00:00			`.Pp`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`simple`
			`.Bd -unfilled -offset indent`
			`hostname [username]`
			`.Ed`
Prepare for mdoc(7)NG. 2000-12-29 09:18:45 +00:00			`.Pp`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`or the more verbose`
			`.Bd -unfilled -offset indent`
			`[+-][hostname\|@netgroup] [[+-][username\|@netgroup]]`
			`.Ed`
			`.Pp`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`A`
			`.Dq @`
Remove single-space hard sentence breaks. These degrade the quality of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc. 2000-03-03 14:05:08 +00:00			`indicates a host by netgroup or user by netgroup.`
			`A single`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`.Dq +`
Mechanically kill hard sentence breaks and double whitespaces. 2004-07-03 18:29:24 +00:00			`matches all hosts or users.`
			`A host name with a leading`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`.Dq -`
			`will reject`
Remove single-space hard sentence breaks. These degrade the quality of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc. 2000-03-03 14:05:08 +00:00			`all matching hosts and all their users.`
			`A user name with leading`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`.Dq -`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`will reject all matching users from matching hosts.`
			`.Pp`
			`Items are separated by any number of blanks and/or`
Mechanically kill hard sentence breaks and double whitespaces. 2004-07-03 18:29:24 +00:00			`tab characters.`
			`A`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`.Dq #`
			`indicates the beginning of`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`a comment; characters up to the end of the line are`
			`not interpreted by routines which search the file.`
			`.Pp`
Improve readability for the hosts.equiv file regarding the notation of hostnames. PR: docs/35953 Submitted by: "Gary W. Swearingen" <swear at blarg dot net> With minor modifications by me. 2007-12-08 22:43:16 +00:00			`Host names are specified in the conventional Internet DNS`
			`dotted-domains`
Prepare for mdoc(7)NG. 2000-12-29 09:18:45 +00:00			`.Dq .\&`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`(dot) notation using the`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Xr inet_addr 3`
			`routine`
			`from the Internet address manipulation library,`
			`.Xr inet 3 .`
			`Host names may contain any printable`
			`character other than a field delimiter, newline,`
			`or comment character.`
			`.Pp`
misc. spelling and grammar gnits. 1998-06-28 21:33:42 +00:00			`For security reasons, a user's`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Nm .rhosts`
Removed whitespace at end-of-line; no content changes. I simply did cd src/share; find man[1-9] -type f\|xargs perl -pi -e 's/[ \t]+$//' BTW, what editors are the culprits? I'm using vim and it shows me whitespace at EOL in troff files with a thick blue block... Reviewed by: Silence from cvs diff -b MFC after: 7 days 2001-07-14 19:41:16 +00:00			`file will be ignored if it is not a regular file, or if it`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`is not owned by the user, or`
delete doubled words, e.g.: "the the" -> "the" 1996-10-05 18:37:31 +00:00			`if it is writable by anyone other than the user.`
Sort sections. 2005-01-21 08:36:40 +00:00			`.Sh FILES`
			`.Bl -tag -width /etc/hosts.equivxxx -compact`
			`.It Pa /etc/hosts.equiv`
			`The`
			`.Nm`
			`file resides in`
			`.Pa /etc .`
			`.It Pa $HOME/.rhosts`
			`.Nm .rhosts`
			`file resides in`
			`.Pa $HOME .`
			`.El`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Sh EXAMPLES`
			`.Dl bar.com foo`
			`.Pp`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`Trust user`
			`.Dq foo`
			`from host`
			`.Dq bar.com .`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Pp`
Removed whitespace at end-of-line; no content changes. I simply did cd src/share; find man[1-9] -type f\|xargs perl -pi -e 's/[ \t]+$//' BTW, what editors are the culprits? I'm using vim and it shows me whitespace at EOL in troff files with a thick blue block... Reviewed by: Silence from cvs diff -b MFC after: 7 days 2001-07-14 19:41:16 +00:00			`.Dl +@allclient`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Pp`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`Trust all hosts from netgroup`
			`.Dq allclient .`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Pp`
			`.Dl +@allclient -@dau`
			`.Pp`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`Trust all hosts from netgroup`
			`.Dq allclient`
Removed whitespace at end-of-line; no content changes. I simply did cd src/share; find man[1-9] -type f\|xargs perl -pi -e 's/[ \t]+$//' BTW, what editors are the culprits? I'm using vim and it shows me whitespace at EOL in troff files with a thick blue block... Reviewed by: Silence from cvs diff -b MFC after: 7 days 2001-07-14 19:41:16 +00:00			`and their users`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`except users from netgroup`
			`.Dq dau .`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Sh SEE ALSO`
			`.Xr rcp 1 ,`
			`.Xr rlogin 1 ,`
Sort cross references. 1996-12-26 02:02:31 +00:00			`.Xr rsh 1 ,`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Xr gethostbyname 3 ,`
Sort cross references. 1996-12-26 02:02:31 +00:00			`.Xr inet 3 ,`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Xr innetgr 3 ,`
			`.Xr ruserok 3 ,`
Add netgroup(5) to SEE ALSO. PR: docs/84764 Submitted by: garys 2006-10-13 09:02:59 +00:00			`.Xr netgroup 5 ,`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Xr ifconfig 8 ,`
yp(4) -> yp(8). PR: docs/30797 2002-01-14 16:59:03 +00:00			`.Xr named 8 ,`
			`.Xr yp 8`
Reviewed by: mpp a tiny man page 1996-02-11 13:47:00 +00:00			`.Sh BUGS`
Use 'manual page' instead of 'man page' for consistency. Approved by: re (hrs) 2005-06-30 13:18:15 +00:00			`This manual page is incomplete.`
Remove single-space hard sentence breaks. These degrade the quality of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc. 2000-03-03 14:05:08 +00:00			`For more information read`
mdoc(7)'fy 2000-01-07 12:58:57 +00:00			`the source in`
			`.Pa src/lib/libc/net/rcmd.c`
Use 'manual page' instead of 'man page' for consistency. Approved by: re (hrs) 2005-06-30 13:18:15 +00:00			`or the SunOS manual page.`