diff --git a/etc/Makefile b/etc/Makefile
index a7cc5a7f0b27..0081912ea367 100644
--- a/etc/Makefile
+++ b/etc/Makefile
@@ -74,7 +74,7 @@ distribution:
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 600 /dev/null \
 	    ${DESTDIR}/var/log/cron; \
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 600 \
-	    master.passwd ${DESTDIR}/etc; \
+	    opieaccess master.passwd ${DESTDIR}/etc; \
 	( cd ${.CURDIR}/periodic; ${MAKE} install ); \
 	( cd ${.CURDIR}/../gnu/usr.bin/send-pr; ${MAKE} etc-gnats-freefall ); \
 	( cd ${.CURDIR}/../share/termcap; ${MAKE} etc-termcap ); \
@@ -200,7 +200,7 @@ distrib-dirs:
 etc-examples:
 	(cd ${.CURDIR}; \
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 444 ${BIN1} ${BIN2} \
-	    ${DESTDIR}/usr/share/examples/etc; \
+	    opieaccess ${DESTDIR}/usr/share/examples/etc; \
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 444 defaults/rc.conf \
 	    ${DESTDIR}/usr/share/examples/etc/defaults; \
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 444 defaults/make.conf \
diff --git a/etc/opieaccess b/etc/opieaccess
new file mode 100644
index 000000000000..24bd517f84db
--- /dev/null
+++ b/etc/opieaccess
@@ -0,0 +1,12 @@
+# $FreeBSD$
+#
+# This file controls whether UNIX passwords are to be permitted.  Rules
+# are matched in order, and the search terminates when the first matching
+# rule has been found. Default action is "deny". See opieaccess(5) for
+# more information.
+#
+# Each rule has the form:
+#
+#       permit address netmask
+#       deny address netmask
+#