History log of /openbsd-current/etc/etc.amd64/login.conf
Revision (<<< Hide revision tags) (Show revision tags >>>) Date Author Comments
# 1.24 12-Nov-2023 robert

bump datasize to 1536M for the default login class to allow the build
user to generate the AMDGPU includes in llvm-16

discussed with deraadt@


Revision tags: OPENBSD_7_1_BASE OPENBSD_7_2_BASE OPENBSD_7_3_BASE OPENBSD_7_4_BASE
# 1.23 28-Feb-2022 sthen

provide a login class for vmd, the "daemon" class now has a datasize
limit which is a bit low for VMs. only done on amd64 as vmd is only
provided there. ok deraadt@


# 1.22 21-Feb-2022 robert

cap the daemon login class' datasize at either 1G or 4G depending on
the architecture and set the bgpd class' datasize to either 16G or 1G

ok sthen@ and discussed with many


# 1.21 04-Jan-2022 jmc

- add LDAP
- capitalise RADIUS when referring to the protocol
- remove tis

from raf czlonka
ok sthen ajacoutot


# 1.20 12-Nov-2021 ajacoutot

Bump maxproc-cur to 512 for the pbuild user.
This will prevent recurring failures in bulks ('cannot fork').

ok tb@ sthen@ deraadt@


Revision tags: OPENBSD_7_0_BASE
# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.23 28-Feb-2022 sthen

provide a login class for vmd, the "daemon" class now has a datasize
limit which is a bit low for VMs. only done on amd64 as vmd is only
provided there. ok deraadt@


# 1.22 21-Feb-2022 robert

cap the daemon login class' datasize at either 1G or 4G depending on
the architecture and set the bgpd class' datasize to either 16G or 1G

ok sthen@ and discussed with many


# 1.21 04-Jan-2022 jmc

- add LDAP
- capitalise RADIUS when referring to the protocol
- remove tis

from raf czlonka
ok sthen ajacoutot


# 1.20 12-Nov-2021 ajacoutot

Bump maxproc-cur to 512 for the pbuild user.
This will prevent recurring failures in bulks ('cannot fork').

ok tb@ sthen@ deraadt@


Revision tags: OPENBSD_7_0_BASE
# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.22 21-Feb-2022 robert

cap the daemon login class' datasize at either 1G or 4G depending on
the architecture and set the bgpd class' datasize to either 16G or 1G

ok sthen@ and discussed with many


# 1.21 04-Jan-2022 jmc

- add LDAP
- capitalise RADIUS when referring to the protocol
- remove tis

from raf czlonka
ok sthen ajacoutot


# 1.20 12-Nov-2021 ajacoutot

Bump maxproc-cur to 512 for the pbuild user.
This will prevent recurring failures in bulks ('cannot fork').

ok tb@ sthen@ deraadt@


Revision tags: OPENBSD_7_0_BASE
# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.21 04-Jan-2022 jmc

- add LDAP
- capitalise RADIUS when referring to the protocol
- remove tis

from raf czlonka
ok sthen ajacoutot


# 1.20 12-Nov-2021 ajacoutot

Bump maxproc-cur to 512 for the pbuild user.
This will prevent recurring failures in bulks ('cannot fork').

ok tb@ sthen@ deraadt@


Revision tags: OPENBSD_7_0_BASE
# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.20 12-Nov-2021 ajacoutot

Bump maxproc-cur to 512 for the pbuild user.
This will prevent recurring failures in bulks ('cannot fork').

ok tb@ sthen@ deraadt@


Revision tags: OPENBSD_7_0_BASE
# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.19 25-Apr-2021 mortimer

Bump pbuild stacksize to 8M.

Addresses a stack exhaustion issue with llvm11 and a small number of ports.

ok kettenis@


Revision tags: OPENBSD_6_9_BASE
# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.18 08-Jan-2021 naddy

Bump default datasize-max and datasize-cur since clang now seems to
require more than 768M to build itself.


# 1.17 07-Jan-2021 robert

add a xenodm login class and bump openfiles to 512 to avoid running out
of file descriptors while running a busy desktop

the xenodm login class expands the records from the daemon login class

ok aja@, deraadt@, kettenis@, sthen@


Revision tags: OPENBSD_6_8_BASE
# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.16 23-Jun-2020 naddy

bump pbuild datasize limit to 8G to allow Firefox to build with Rust 1.44
ok deraadt@


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.15 23-May-2020 danj

Remove useless line from daemon class in login.conf

We used to have different numbers of blowfish rounds between the
default and daemon classes in login.conf. On Jun 26, 2016, tedu
committed "upgrade selected login.conf to use auto rounds for bcrypt"
for amd64, sparc64, i386, and maccpc.

Since the class daemon inherits from the default class, the
:localcipher=blowfish,a:\
is a duplicate.

ok millert@ deraadt@ sthen@


Revision tags: OPENBSD_6_7_BASE
# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.14 11-Mar-2020 naddy

Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.
ok deraadt@


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.13 05-Nov-2019 solene

Add a default priority of 5 for user _pbuild, this should help keeping system
responsive during packages compilation, especially on slower machines.

feedback welcome from people building ports

discussed with deraadt@


Revision tags: OPENBSD_6_6_BASE
# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.12 19-Aug-2019 naddy

The piggies have outgrown their pen again: Firefox 69 will no longer
build in 5 GB of memory. Bump default datasize for pbuild to 6 GB.
ok landry@ ajacoutot@


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.11 02-Jun-2019 jmc

spelling/grammar fixes; from larry hynes


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


# 1.10 02-May-2019 ajacoutot

pbuild class: bump datasize and maxproc; these should be sufficient for
running a ports bulk without bumping anything else
(matches what's on amd64.ports and exopi)

ok sthen@ phessler@ espie@ naddy@


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE OPENBSD_6_3_BASE OPENBSD_6_4_BASE OPENBSD_6_5_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert


Revision tags: OPENBSD_6_1_BASE OPENBSD_6_2_BASE
# 1.9 06-Feb-2017 sthen

List openfiles-max explicitly in default /etc/login.conf files. Otherwise,
raising openfiles-cur above the implicit -max value (1024 on at least the
common arch) results in the setting not being applied at all.

Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about
openfiles= from millert@ - changes in this version are to use 1024 for -max
rather than 512 to avoid changing the existing hard limit, and just use
openfiles= for bgpd/unbound where max and cur are the same value.


# 1.8 25-Nov-2016 bluhm

Increase default datasize limit from 512M to 768M on amd64. This
allows to build xenocara with extra options in malloc.conf.
OK deraadt@


Revision tags: OPENBSD_6_0_BASE
# 1.7 26-Jun-2016 tedu

upgrade selected login.conf to use auto rounds for bcrypt. the installer
already does this, so we don't want to go backwards on password changes.
ok krw


Revision tags: OPENBSD_5_9_BASE
# 1.6 23-Oct-2015 sthen

ypcipher isn't supported any more - it was already removed from login.conf(5)
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@


Revision tags: OPENBSD_5_8_BASE
# 1.5 20-Jul-2015 sthen

add class used by the _pbuild user for DPB, ok ajacoutot@


Revision tags: OPENBSD_5_7_BASE
# 1.4 17-Feb-2015 sthen

Add class section for unbound, using openfiles-cur=512 rather
than the daemon class' default of 128. Reminded by/ok ajacoutot@


# 1.3 20-Jan-2015 deraadt

increase limits for staff (user created at install time is in staff)


Revision tags: OPENBSD_5_6_BASE
# 1.2 22-Apr-2014 reyk

Remove the kerberos login methods.

ok henning@


# 1.1 26-Mar-2014 tedu

end experimental login.conf template support. one file per machine.
ok deraadt millert