bc093719ca
The last half year I've been working on a replacement TTY layer for the FreeBSD kernel. The new TTY layer was designed to improve the following: - Improved driver model: The old TTY layer has a driver model that is not abstract enough to make it friendly to use. A good example is the output path, where the device drivers directly access the output buffers. This means that an in-kernel PPP implementation must always convert network buffers into TTY buffers. If a PPP implementation would be built on top of the new TTY layer (still needs a hooks layer, though), it would allow the PPP implementation to directly hand the data to the TTY driver. - Improved hotplugging: With the old TTY layer, it isn't entirely safe to destroy TTY's from the system. This implementation has a two-step destructing design, where the driver first abandons the TTY. After all threads have left the TTY, the TTY layer calls a routine in the driver, which can be used to free resources (unit numbers, etc). The pts(4) driver also implements this feature, which means posix_openpt() will now return PTY's that are created on the fly. - Improved performance: One of the major improvements is the per-TTY mutex, which is expected to improve scalability when compared to the old Giant locking. Another change is the unbuffered copying to userspace, which is both used on TTY device nodes and PTY masters. Upgrading should be quite straightforward. Unlike previous versions, existing kernel configuration files do not need to be changed, except when they reference device drivers that are listed in UPDATING. Obtained from: //depot/projects/mpsafetty/... Approved by: philip (ex-mentor) Discussed: on the lists, at BSDCan, at the DevSummit Sponsored by: Snow B.V., the Netherlands dcons(4) fixed by: kan
323 lines
6.6 KiB
Plaintext
323 lines
6.6 KiB
Plaintext
# login.conf - login class capabilities database.
|
|
#
|
|
# Remember to rebuild the database after each change to this file:
|
|
#
|
|
# cap_mkdb /etc/login.conf
|
|
#
|
|
# This file controls resource limits, accounting limits and
|
|
# default user environment settings.
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
# Default settings effectively disable resource limits, see the
|
|
# examples below for a starting point to enable them.
|
|
|
|
# defaults
|
|
# These settings are used by login(1) by default for classless users
|
|
# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
|
|
#
|
|
# Note that since a colon ':' is used to separate capability entries,
|
|
# a \c escape sequence must be used to embed a literal colon in the
|
|
# value or name of a capability (see the ``CGETNUM AND CGETSTR SYNTAX
|
|
# AND SEMANTICS'' section of getcap(3) for more escape sequences).
|
|
|
|
default:\
|
|
:passwd_format=md5:\
|
|
:copyright=/etc/COPYRIGHT:\
|
|
:welcome=/etc/motd:\
|
|
:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
|
|
:path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin ~/bin:\
|
|
:nologin=/var/run/nologin:\
|
|
:cputime=unlimited:\
|
|
:datasize=unlimited:\
|
|
:stacksize=unlimited:\
|
|
:memorylocked=unlimited:\
|
|
:memoryuse=unlimited:\
|
|
:filesize=unlimited:\
|
|
:coredumpsize=unlimited:\
|
|
:openfiles=unlimited:\
|
|
:maxproc=unlimited:\
|
|
:sbsize=unlimited:\
|
|
:vmemoryuse=unlimited:\
|
|
:pseudoterminals=unlimited:\
|
|
:priority=0:\
|
|
:ignoretime@:\
|
|
:umask=022:
|
|
|
|
|
|
#
|
|
# A collection of common class names - forward them all to 'default'
|
|
# (login would normally do this anyway, but having a class name
|
|
# here suppresses the diagnostic)
|
|
#
|
|
standard:\
|
|
:tc=default:
|
|
xuser:\
|
|
:tc=default:
|
|
staff:\
|
|
:tc=default:
|
|
daemon:\
|
|
:tc=default:
|
|
news:\
|
|
:tc=default:
|
|
dialer:\
|
|
:tc=default:
|
|
|
|
#
|
|
# Root can always login
|
|
#
|
|
# N.B. login_getpwclass(3) will use this entry for the root account,
|
|
# in preference to 'default'.
|
|
root:\
|
|
:ignorenologin:\
|
|
:tc=default:
|
|
|
|
#
|
|
# Russian Users Accounts. Setup proper environment variables.
|
|
#
|
|
russian|Russian Users Accounts:\
|
|
:charset=KOI8-R:\
|
|
:lang=ru_RU.KOI8-R:\
|
|
:tc=default:
|
|
|
|
|
|
######################################################################
|
|
######################################################################
|
|
##
|
|
## Example entries
|
|
##
|
|
######################################################################
|
|
######################################################################
|
|
|
|
## Example defaults
|
|
## These settings are used by login(1) by default for classless users
|
|
## Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
|
|
#
|
|
#default:\
|
|
# :cputime=infinity:\
|
|
# :datasize-cur=22M:\
|
|
# :stacksize-cur=8M:\
|
|
# :memorylocked-cur=10M:\
|
|
# :memoryuse-cur=30M:\
|
|
# :filesize=infinity:\
|
|
# :coredumpsize=infinity:\
|
|
# :maxproc-cur=64:\
|
|
# :openfiles-cur=64:\
|
|
# :priority=0:\
|
|
# :requirehome@:\
|
|
# :umask=022:\
|
|
# :tc=auth-defaults:
|
|
#
|
|
#
|
|
##
|
|
## standard - standard user defaults
|
|
##
|
|
#standard:\
|
|
# :copyright=/etc/COPYRIGHT:\
|
|
# :welcome=/etc/motd:\
|
|
# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
|
|
# :path=~/bin /bin /usr/bin /usr/local/bin:\
|
|
# :manpath=/usr/share/man /usr/local/man:\
|
|
# :nologin=/var/run/nologin:\
|
|
# :cputime=1h30m:\
|
|
# :datasize=8M:\
|
|
# :vmemoryuse=100M:\
|
|
# :stacksize=2M:\
|
|
# :memorylocked=4M:\
|
|
# :memoryuse=8M:\
|
|
# :filesize=8M:\
|
|
# :coredumpsize=8M:\
|
|
# :openfiles=24:\
|
|
# :maxproc=32:\
|
|
# :priority=0:\
|
|
# :requirehome:\
|
|
# :passwordtime=90d:\
|
|
# :umask=002:\
|
|
# :ignoretime@:\
|
|
# :tc=default:
|
|
#
|
|
#
|
|
##
|
|
## users of X (needs more resources!)
|
|
##
|
|
#xuser:\
|
|
# :manpath=/usr/share/man /usr/local/man:\
|
|
# :cputime=4h:\
|
|
# :datasize=12M:\
|
|
# :vmemoryuse=infinity:\
|
|
# :stacksize=4M:\
|
|
# :filesize=8M:\
|
|
# :memoryuse=16M:\
|
|
# :openfiles=32:\
|
|
# :maxproc=48:\
|
|
# :tc=standard:
|
|
#
|
|
#
|
|
##
|
|
## Staff users - few restrictions and allow login anytime
|
|
##
|
|
#staff:\
|
|
# :ignorenologin:\
|
|
# :ignoretime:\
|
|
# :requirehome@:\
|
|
# :accounted@:\
|
|
# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
|
|
# :umask=022:\
|
|
# :tc=standard:
|
|
#
|
|
#
|
|
##
|
|
## root - fallback for root logins
|
|
##
|
|
#root:\
|
|
# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
|
|
# :cputime=infinity:\
|
|
# :datasize=infinity:\
|
|
# :stacksize=infinity:\
|
|
# :memorylocked=infinity:\
|
|
# :memoryuse=infinity:\
|
|
# :filesize=infinity:\
|
|
# :coredumpsize=infinity:\
|
|
# :openfiles=infinity:\
|
|
# :maxproc=infinity:\
|
|
# :memoryuse-cur=32M:\
|
|
# :maxproc-cur=64:\
|
|
# :openfiles-cur=1024:\
|
|
# :priority=0:\
|
|
# :requirehome@:\
|
|
# :umask=022:\
|
|
# :tc=auth-root-defaults:
|
|
#
|
|
#
|
|
##
|
|
## Settings used by /etc/rc
|
|
##
|
|
#daemon:\
|
|
# :coredumpsize@:\
|
|
# :coredumpsize-cur=0:\
|
|
# :datasize=infinity:\
|
|
# :datasize-cur@:\
|
|
# :maxproc=512:\
|
|
# :maxproc-cur@:\
|
|
# :memoryuse-cur=64M:\
|
|
# :memorylocked-cur=64M:\
|
|
# :openfiles=1024:\
|
|
# :openfiles-cur@:\
|
|
# :stacksize=16M:\
|
|
# :stacksize-cur@:\
|
|
# :tc=default:
|
|
#
|
|
#
|
|
##
|
|
## Settings used by news subsystem
|
|
##
|
|
#news:\
|
|
# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
|
|
# :cputime=infinity:\
|
|
# :filesize=128M:\
|
|
# :datasize-cur=64M:\
|
|
# :stacksize-cur=32M:\
|
|
# :coredumpsize-cur=0:\
|
|
# :maxmemorysize-cur=128M:\
|
|
# :memorylocked=32M:\
|
|
# :maxproc=128:\
|
|
# :openfiles=256:\
|
|
# :tc=default:
|
|
#
|
|
#
|
|
##
|
|
## The dialer class should be used for a dialup PPP/SLIP accounts
|
|
## Welcome messages/news suppressed
|
|
##
|
|
#dialer:\
|
|
# :hushlogin:\
|
|
# :requirehome@:\
|
|
# :cputime=unlimited:\
|
|
# :filesize=2M:\
|
|
# :datasize=2M:\
|
|
# :stacksize=4M:\
|
|
# :coredumpsize=0:\
|
|
# :memoryuse=4M:\
|
|
# :memorylocked=1M:\
|
|
# :maxproc=16:\
|
|
# :openfiles=32:\
|
|
# :tc=standard:
|
|
#
|
|
#
|
|
##
|
|
## Site full-time 24/7 PPP/SLIP connections
|
|
## - no time accounting, restricted to access via dialin lines
|
|
##
|
|
#site:\
|
|
# :ignoretime:\
|
|
# :passwordtime@:\
|
|
# :refreshtime@:\
|
|
# :refreshperiod@:\
|
|
# :sessionlimit@:\
|
|
# :autodelete@:\
|
|
# :expireperiod@:\
|
|
# :graceexpire@:\
|
|
# :gracetime@:\
|
|
# :warnexpire@:\
|
|
# :warnpassword@:\
|
|
# :idletime@:\
|
|
# :sessiontime@:\
|
|
# :daytime@:\
|
|
# :weektime@:\
|
|
# :monthtime@:\
|
|
# :warntime@:\
|
|
# :accounted@:\
|
|
# :tc=dialer:\
|
|
# :tc=staff:
|
|
#
|
|
#
|
|
##
|
|
## Example standard accounting entries for subscriber levels
|
|
##
|
|
#
|
|
#subscriber|Subscribers:\
|
|
# :accounted:\
|
|
# :refreshtime=180d:\
|
|
# :refreshperiod@:\
|
|
# :sessionlimit@:\
|
|
# :autodelete=30d:\
|
|
# :expireperiod=180d:\
|
|
# :graceexpire=7d:\
|
|
# :gracetime=10m:\
|
|
# :warnexpire=7d:\
|
|
# :warnpassword=7d:\
|
|
# :idletime=30m:\
|
|
# :sessiontime=4h:\
|
|
# :daytime=6h:\
|
|
# :weektime=40h:\
|
|
# :monthtime=120h:\
|
|
# :warntime=4h:\
|
|
# :tc=standard:
|
|
#
|
|
#
|
|
##
|
|
## Subscriber accounts. These accounts have their login times
|
|
## accounted and have access limits applied.
|
|
##
|
|
#subppp|PPP Subscriber Accounts:\
|
|
# :tc=dialer:\
|
|
# :tc=subscriber:
|
|
#
|
|
#
|
|
#subslip|SLIP Subscriber Accounts:\
|
|
# :tc=dialer:\
|
|
# :tc=subscriber:
|
|
#
|
|
#
|
|
#subshell|Shell Subscriber Accounts:\
|
|
# :tc=subscriber:
|
|
#
|
|
##
|
|
## If you want some of the accounts to use traditional UNIX DES based
|
|
## password hashes.
|
|
##
|
|
#des_users:\
|
|
# :passwd_format=des:\
|
|
# :tc=default:
|