1130b656e5
This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise.
246 lines
4.5 KiB
Plaintext
246 lines
4.5 KiB
Plaintext
# Sample login.conf - login class capabilities database.
|
|
# To speed up access to this data, you can use /bin/cap_mkdb
|
|
# to create a database form of this file:
|
|
#
|
|
# cap_mkdb /etc/login.conf
|
|
#
|
|
# Don't forget to do this after each edit as well!
|
|
#
|
|
# This file controls resource limits, accounting limits and
|
|
# default user environment settings.
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
|
|
# Authentication methods
|
|
|
|
auth-defaults:\
|
|
:auth=krb_skey_or_passwd,passwd,kerberos,skey:
|
|
|
|
auth-root-defaults:\
|
|
:auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\
|
|
:auth-rlogin=krb_or_skey,kerberos,skey:\
|
|
|
|
auth-ftp-defaults:\
|
|
:auth=skey_or_pwd,passwd,skey:
|
|
|
|
|
|
# Example defaults
|
|
# These settings are used by login(1) by default for classless users
|
|
# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
|
|
|
|
default:\
|
|
:cputime=infinity:\
|
|
:coredumpsize=infinity:\
|
|
:datasize=16M:\
|
|
:filesize=infinity:\
|
|
:maxproc=64:\
|
|
:memorylocked=10M:\
|
|
:memoryuse=30M:\
|
|
:openfiles=64:\
|
|
:priority=0:\
|
|
:requirehome:\
|
|
:stacksize=2M:\
|
|
:term=dumb:\
|
|
:umask=022:\
|
|
:rc=auth-defaults:
|
|
|
|
|
|
#
|
|
# standard - standard user defaults
|
|
#
|
|
standard:\
|
|
:copyright=/etc/COPYRIGHT:\
|
|
:welcome=/etc/motd:\
|
|
:setenv=MAIL=/var/mail/$ BLOCKSIZE=K EDITOR=/usr/bin/ee:\
|
|
:path=~/bin /bin /usr/bin /usr/local/bin:\
|
|
:manpath=/usr/share/man /usr/local/man:\
|
|
:nologin=/etc/nologin:\
|
|
:coredumpsize=8M:\
|
|
:cputime=1h30m:\
|
|
:datasize=8M:\
|
|
:stacksize=2M:\
|
|
:filesize=8M:\
|
|
:memorylocked=4M:\
|
|
:memoryuse=8M:\
|
|
:openfiles=24:\
|
|
:maxproc=32:\
|
|
:priority=0:\
|
|
:requirehome:\
|
|
:umask=002:\
|
|
:ignoretime@:\
|
|
:tc=default:
|
|
|
|
#
|
|
# users of X (needs more resources!)
|
|
#
|
|
xuser:\
|
|
:manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
|
|
:cputime=4M:\
|
|
:stacksize=4M:\
|
|
:filesize=8M:\
|
|
:memoryuse=12M:\
|
|
:openfiles=32:\
|
|
:maxproc=48:\
|
|
:tc=standard:
|
|
|
|
|
|
#
|
|
# Staff users - few restrictions and allow login anytime
|
|
# display staff motd
|
|
#
|
|
staff:\
|
|
:welcome=/etc/motd-staff:\
|
|
:ignorenologin:\
|
|
:ignoretime:\
|
|
:requirehome@:\
|
|
:accounted@:\
|
|
:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
|
|
:umask=022:\
|
|
:tc=standard:
|
|
|
|
|
|
#
|
|
# root - fallback for root logins
|
|
#
|
|
root:\
|
|
:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
|
|
:umask=022:\
|
|
:tc=auth-root-defaults:\
|
|
:tc=staff:
|
|
|
|
|
|
#
|
|
# Settings used by /etc/rc
|
|
#
|
|
daemon:\
|
|
:cputime=unlimited:\
|
|
:filesize=64M:\
|
|
:datasize=32M:\
|
|
:stacksize=32M:\
|
|
:coredumpsize=0:\
|
|
:memoryuse=64M:\
|
|
:memorylocked=64M:\
|
|
:maxproc=32:\
|
|
:openfiles=256:\
|
|
:tc=default:
|
|
|
|
|
|
#
|
|
# Settings used by news subsystem daemons
|
|
#
|
|
news:\
|
|
:cputime=unlimited:\
|
|
:filesize=128:\
|
|
:datasize=64M:\
|
|
:stacksize=32M:\
|
|
:coredumpsize=0:\
|
|
:maxmemorysize=128M:\
|
|
:lockedmemory=32M:\
|
|
:maxproc=128:\
|
|
:openfiles=256:\
|
|
:tc=default:\
|
|
|
|
|
|
#
|
|
# The dialer class should be used for a dialup PPP/SLIP accounts
|
|
# Welcome messages/news suppressed and a special shell selector
|
|
#
|
|
dialer:\
|
|
:hushlogin:\
|
|
:requirehome@:\
|
|
:shell=/usr/sbin/userls:\
|
|
:cputime=unlimited:\
|
|
:filesize=2M:\
|
|
:datasize=2M:\
|
|
:stacksize=4M:\
|
|
:coredumpsize=0:\
|
|
:memoryuse=4M:\
|
|
:memorylocked=1M:\
|
|
:maxproc=16:\
|
|
:openfiles=32:\
|
|
:tc=standard:
|
|
|
|
|
|
#
|
|
# Site full-time 24/7 PPP/SLIP connections
|
|
# - no time accounting, restricted to access via dialin lines
|
|
#
|
|
site:\
|
|
:ignoretime:\
|
|
:passwordperiod@:\
|
|
:refreshtime@:\
|
|
:refreshperiod@:\
|
|
:sessionlimit@:\
|
|
:autodelete@:\
|
|
:expireperiod@:\
|
|
:graceexpire@:\
|
|
;gracetime@:\
|
|
:warnexpire@:\
|
|
:warnpassword@:\
|
|
:idletime@:\
|
|
:sessiontime@:\
|
|
:daytime@:\
|
|
:weektime@:\
|
|
:monthtime@:\
|
|
:warntime@:\
|
|
:tty.allow=dialin:\
|
|
:tty.deny=:\
|
|
:host.allow=:\
|
|
:host.deny=:\
|
|
:accounted@:
|
|
:tc=dialer:\
|
|
:tc=staff:
|
|
|
|
|
|
#
|
|
# Example standard accounting entries for subscriber levels
|
|
#
|
|
|
|
subscriber|Subscribers:\
|
|
:accounted:\
|
|
:passwordperiod=90d:\
|
|
:refreshtime=180d:\
|
|
:refreshperiod@:\
|
|
:sessionlimit@:\
|
|
:autodelete=30d:\
|
|
:expireperiod=180d:\
|
|
:graceexpire=7d:\
|
|
:gracetime=10m:\
|
|
:warnexpire=7d:\
|
|
:warnpassword=7d:\
|
|
:idletime=30m:\
|
|
:sessiontime=4h:\
|
|
:daytime=6h:\
|
|
:weektime=40h:\
|
|
:monthtime=120h:\
|
|
:warntime=4h:\
|
|
:tty.allow=dialin,pty,vt:\
|
|
:tty.deny=:\
|
|
:times.allow=Any0000-2400:\
|
|
:times.deny=Mo0900-1200,Fr2120-2130:\
|
|
:tc=standard:
|
|
|
|
|
|
#
|
|
# Subscriber accounts. These accounts have their login times
|
|
# accounted and have access limits applied.
|
|
# Userls is a user shell selector - do not use these classes without it!
|
|
#
|
|
subppp|Dual PPP/SLIP Subscriber Accounts:\
|
|
:shell=/usr/sbin/userls:\
|
|
:tc=dialer:\
|
|
:tc=subscriber:
|
|
|
|
|
|
subslip|Dual PPP/SLIP Subscriber Accounts:\
|
|
:shell=/usr/sbin/userls:\
|
|
:tc=dialer:\
|
|
:tc=subscriber:
|
|
|
|
|
|
subshell:Shell Subscriber Accounts:\
|
|
:tc=subscriber:
|
|
|