login.conf revision 74107
1# login.conf - login class capabilities database. 2# 3# Remember to rebuild the database after each change to this file: 4# 5# cap_mkdb /etc/login.conf 6# 7# This file controls resource limits, accounting limits and 8# default user environment settings. 9# 10# $FreeBSD: head/etc/login.conf 74107 2001-03-11 16:37:33Z markm $ 11# 12 13# Default settings effectively disable resource limits, see the 14# examples below for a starting point to enable them. 15 16# defaults 17# These settings are used by login(1) by default for classless users 18# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 19 20default:\ 21 :passwd_format=md5:\ 22 :copyright=/etc/COPYRIGHT:\ 23 :welcome=/etc/motd:\ 24 :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\ 25 :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin ~/bin:\ 26 :nologin=/var/run/nologin:\ 27 :passwd_format=md5:\ 28 :cputime=unlimited:\ 29 :datasize=unlimited:\ 30 :stacksize=unlimited:\ 31 :memorylocked=unlimited:\ 32 :memoryuse=unlimited:\ 33 :filesize=unlimited:\ 34 :coredumpsize=unlimited:\ 35 :openfiles=unlimited:\ 36 :maxproc=unlimited:\ 37 :sbsize=unlimited:\ 38 :priority=0:\ 39 :ignoretime@:\ 40 :umask=022: 41 42 43# 44# A collection of common class names - forward them all to 'default' 45# (login would normally do this anyway, but having a class name 46# here suppresses the diagnostic) 47# 48standard:\ 49 :tc=default: 50xuser:\ 51 :tc=default: 52staff:\ 53 :tc=default: 54daemon:\ 55 :tc=default: 56news:\ 57 :tc=default: 58dialer:\ 59 :tc=default: 60 61# 62# Root can always login 63# 64# N.B. login_getpwclass(3) will use this entry for the root account, 65# in preference to 'default'. 66root:\ 67 :ignorenologin:\ 68 :tc=default: 69 70# 71# Russian Users Accounts. Setup proper environment variables. 72# 73russian:Russian Users Accounts:\ 74 :charset=KOI8-R:\ 75 :lang=ru_RU.KOI8-R:\ 76 :tc=default: 77 78 79###################################################################### 80###################################################################### 81## 82## Example entries 83## 84###################################################################### 85###################################################################### 86 87## Example defaults 88## These settings are used by login(1) by default for classless users 89## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 90# 91#default:\ 92# :cputime=infinity:\ 93# :datasize-cur=22M:\ 94# :stacksize-cur=8M:\ 95# :memorylocked-cur=10M:\ 96# :memoryuse-cur=30M:\ 97# :filesize=infinity:\ 98# :coredumpsize=infinity:\ 99# :maxproc-cur=64:\ 100# :openfiles-cur=64:\ 101# :priority=0:\ 102# :requirehome@:\ 103# :umask=022:\ 104# :tc=auth-defaults: 105# 106# 107## 108## standard - standard user defaults 109## 110#standard:\ 111# :copyright=/etc/COPYRIGHT:\ 112# :welcome=/etc/motd:\ 113# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\ 114# :path=~/bin /bin /usr/bin /usr/local/bin:\ 115# :manpath=/usr/share/man /usr/local/man:\ 116# :nologin=/var/run/nologin:\ 117# :cputime=1h30m:\ 118# :datasize=8M:\ 119# :stacksize=2M:\ 120# :memorylocked=4M:\ 121# :memoryuse=8M:\ 122# :filesize=8M:\ 123# :coredumpsize=8M:\ 124# :openfiles=24:\ 125# :maxproc=32:\ 126# :priority=0:\ 127# :requirehome:\ 128# :passwordtime=90d:\ 129# :umask=002:\ 130# :ignoretime@:\ 131# :tc=default: 132# 133# 134## 135## users of X (needs more resources!) 136## 137#xuser:\ 138# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 139# :cputime=4h:\ 140# :datasize=12M:\ 141# :stacksize=4M:\ 142# :filesize=8M:\ 143# :memoryuse=16M:\ 144# :openfiles=32:\ 145# :maxproc=48:\ 146# :tc=standard: 147# 148# 149## 150## Staff users - few restrictions and allow login anytime 151## 152#staff:\ 153# :ignorenologin:\ 154# :ignoretime:\ 155# :requirehome@:\ 156# :accounted@:\ 157# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 158# :umask=022:\ 159# :tc=standard: 160# 161# 162## 163## root - fallback for root logins 164## 165#root:\ 166# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 167# :cputime=infinity:\ 168# :datasize=infinity:\ 169# :stacksize=infinity:\ 170# :memorylocked=infinity:\ 171# :memoryuse=infinity:\ 172# :filesize=infinity:\ 173# :coredumpsize=infinity:\ 174# :openfiles=infinity:\ 175# :maxproc=infinity:\ 176# :memoryuse-cur=32M:\ 177# :maxproc-cur=64:\ 178# :openfiles-cur=1024:\ 179# :priority=0:\ 180# :requirehome@:\ 181# :umask=022:\ 182# :tc=auth-root-defaults: 183# 184# 185## 186## Settings used by /etc/rc 187## 188#daemon:\ 189# :coredumpsize@:\ 190# :coredumpsize-cur=0:\ 191# :datasize=infinity:\ 192# :datasize-cur@:\ 193# :maxproc=512:\ 194# :maxproc-cur@:\ 195# :memoryuse-cur=64M:\ 196# :memorylocked-cur=64M:\ 197# :openfiles=1024:\ 198# :openfiles-cur@:\ 199# :stacksize=16M:\ 200# :stacksize-cur@:\ 201# :tc=default: 202# 203# 204## 205## Settings used by news subsystem 206## 207#news:\ 208# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 209# :cputime=infinity:\ 210# :filesize=128M:\ 211# :datasize-cur=64M:\ 212# :stacksize-cur=32M:\ 213# :coredumpsize-cur=0:\ 214# :maxmemorysize-cur=128M:\ 215# :memorylocked=32M:\ 216# :maxproc=128:\ 217# :openfiles=256:\ 218# :tc=default: 219# 220# 221## 222## The dialer class should be used for a dialup PPP/SLIP accounts 223## Welcome messages/news suppressed 224## 225#dialer:\ 226# :hushlogin:\ 227# :requirehome@:\ 228# :cputime=unlimited:\ 229# :filesize=2M:\ 230# :datasize=2M:\ 231# :stacksize=4M:\ 232# :coredumpsize=0:\ 233# :memoryuse=4M:\ 234# :memorylocked=1M:\ 235# :maxproc=16:\ 236# :openfiles=32:\ 237# :tc=standard: 238# 239# 240## 241## Site full-time 24/7 PPP/SLIP connections 242## - no time accounting, restricted to access via dialin lines 243## 244#site:\ 245# :ignoretime:\ 246# :passwordtime@:\ 247# :refreshtime@:\ 248# :refreshperiod@:\ 249# :sessionlimit@:\ 250# :autodelete@:\ 251# :expireperiod@:\ 252# :graceexpire@:\ 253# :gracetime@:\ 254# :warnexpire@:\ 255# :warnpassword@:\ 256# :idletime@:\ 257# :sessiontime@:\ 258# :daytime@:\ 259# :weektime@:\ 260# :monthtime@:\ 261# :warntime@:\ 262# :accounted@:\ 263# :tc=dialer:\ 264# :tc=staff: 265# 266# 267## 268## Example standard accounting entries for subscriber levels 269## 270# 271#subscriber|Subscribers:\ 272# :accounted:\ 273# :refreshtime=180d:\ 274# :refreshperiod@:\ 275# :sessionlimit@:\ 276# :autodelete=30d:\ 277# :expireperiod=180d:\ 278# :graceexpire=7d:\ 279# :gracetime=10m:\ 280# :warnexpire=7d:\ 281# :warnpassword=7d:\ 282# :idletime=30m:\ 283# :sessiontime=4h:\ 284# :daytime=6h:\ 285# :weektime=40h:\ 286# :monthtime=120h:\ 287# :warntime=4h:\ 288# :tc=standard: 289# 290# 291## 292## Subscriber accounts. These accounts have their login times 293## accounted and have access limits applied. 294## 295#subppp|PPP Subscriber Accounts:\ 296# :tc=dialer:\ 297# :tc=subscriber: 298# 299# 300#subslip|SLIP Subscriber Accounts:\ 301# :tc=dialer:\ 302# :tc=subscriber: 303# 304# 305#subshell:Shell Subscriber Accounts:\ 306# :tc=subscriber: 307# 308## 309## If you want some of the accounts to use traditional UNIX DES based 310## password hashes. 311## 312#des_users:\ 313# :password_format=des:\ 314# :tc=default: 315