xref: /dragonfly/etc/login.conf (revision c3762235) 
1# login.conf - login class capabilities database.
2#
3# Remember to rebuild the database after each change to this file:
4#
5#	cap_mkdb /etc/login.conf
6#
7# This file controls resource limits, accounting limits and
8# default user environment settings.
9#
10# $FreeBSD: src/etc/login.conf,v 1.34.2.6 2002/07/02 20:06:18 dillon Exp $
11#
12
13# Default settings effectively disable resource limits, see the
14# examples below for a starting point to enable them.
15
16# defaults
17# These settings are used by login(1) by default for classless users
18# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
19
20default:\
21	:passwd_format=sha512:\
22	:copyright=/etc/COPYRIGHT:\
23	:welcome=/etc/motd:\
24	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
25	:path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/pkg/sbin /usr/pkg/bin ~/bin:\
26	:nologin=/var/run/nologin:\
27	:cputime=unlimited:\
28	:datasize=unlimited:\
29	:stacksize=unlimited:\
30	:memorylocked=unlimited:\
31	:memoryuse=unlimited:\
32	:filesize=unlimited:\
33	:coredumpsize=unlimited:\
34	:openfiles=unlimited:\
35	:maxproc=unlimited:\
36	:posixlocks=unlimited:\
37	:sbsize=unlimited:\
38	:vmemoryuse=unlimited:\
39	:priority=0:\
40	:ignoretime@:\
41	:umask=022:
42
43
44#
45# A collection of common class names - forward them all to 'default'
46# (login would normally do this anyway, but having a class name
47#  here suppresses the diagnostic)
48#
49standard:\
50	:tc=default:
51xuser:\
52	:tc=default:
53staff:\
54	:tc=default:
55daemon:\
56	:tc=default:
57news:\
58	:tc=default:
59dialer:\
60	:tc=default:
61
62#
63# Root can always login
64#
65# N.B.  login_getpwclass(3) will use this entry for the root account,
66#       in preference to 'default'.
67root:\
68	:ignorenologin:\
69	:tc=default:
70
71#
72# Russian Users Accounts. Setup proper environment variables.
73#
74russian|Russian Users Accounts:\
75	:charset=KOI8-R:\
76	:lang=ru_RU.KOI8-R:\
77	:tc=default:
78
79
80######################################################################
81######################################################################
82##
83## Example entries
84##
85######################################################################
86######################################################################
87
88## Example defaults
89## These settings are used by login(1) by default for classless users
90## Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
91#
92#default:\
93#	:cputime=infinity:\
94#	:datasize-cur=22M:\
95#	:stacksize-cur=8M:\
96#	:memorylocked-cur=10M:\
97#	:memoryuse-cur=30M:\
98#	:filesize=infinity:\
99#	:coredumpsize=infinity:\
100#	:maxproc-cur=64:\
101#	:openfiles-cur=64:\
102#	:priority=0:\
103#	:requirehome@:\
104#	:umask=022:\
105#	:tc=auth-defaults:
106#
107#
108##
109## standard - standard user defaults
110##
111#standard:\
112#	:copyright=/etc/COPYRIGHT:\
113#	:welcome=/etc/motd:\
114#	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
115#	:path=~/bin /bin /usr/bin /usr/local/bin:\
116#	:manpath=/usr/share/man /usr/local/man:\
117#	:nologin=/var/run/nologin:\
118#	:cputime=1h30m:\
119#	:datasize=8M:\
120#	:vmemoryuse=100M:\
121#	:stacksize=2M:\
122#	:memorylocked=4M:\
123#	:memoryuse=8M:\
124#	:filesize=8M:\
125#	:coredumpsize=8M:\
126#	:openfiles=24:\
127#	:maxproc=32:\
128#	:priority=0:\
129#	:requirehome:\
130#	:passwordtime=90d:\
131#	:umask=002:\
132#	:ignoretime@:\
133#	:tc=default:
134#
135#
136##
137## users of X (needs more resources!)
138##
139#xuser:\
140#	:manpath=/usr/share/man /usr/local/man /usr/pkg/man:\
141#	:cputime=4h:\
142#	:datasize=12M:\
143#	:vmemoryuse=infinity:\
144#	:stacksize=4M:\
145#	:filesize=8M:\
146#	:memoryuse=16M:\
147#	:openfiles=32:\
148#	:maxproc=48:\
149#	:tc=standard:
150#
151#
152##
153## Staff users - few restrictions and allow login anytime
154##
155#staff:\
156#	:ignorenologin:\
157#	:ignoretime:\
158#	:requirehome@:\
159#	:accounted@:\
160#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
161#	:umask=022:\
162#	:tc=standard:
163#
164#
165##
166## root - fallback for root logins
167##
168#root:\
169#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
170#	:cputime=infinity:\
171#	:datasize=infinity:\
172#	:stacksize=infinity:\
173#	:memorylocked=infinity:\
174#	:memoryuse=infinity:\
175#	:filesize=infinity:\
176#	:coredumpsize=infinity:\
177#	:openfiles=infinity:\
178#	:maxproc=infinity:\
179#	:memoryuse-cur=32M:\
180#	:maxproc-cur=64:\
181#	:openfiles-cur=1024:\
182#	:priority=0:\
183#	:requirehome@:\
184#	:umask=022:\
185#	:tc=auth-root-defaults:
186#
187#
188##
189## Settings used by /etc/rc
190##
191#daemon:\
192#	:coredumpsize@:\
193#	:coredumpsize-cur=0:\
194#	:datasize=infinity:\
195#	:datasize-cur@:\
196#	:maxproc=512:\
197#	:maxproc-cur@:\
198#	:memoryuse-cur=64M:\
199#	:memorylocked-cur=64M:\
200#	:openfiles=1024:\
201#	:openfiles-cur@:\
202#	:stacksize=16M:\
203#	:stacksize-cur@:\
204#	:tc=default:
205#
206#
207##
208## Settings used by news subsystem
209##
210#news:\
211#	:path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
212#	:cputime=infinity:\
213#	:filesize=128M:\
214#	:datasize-cur=64M:\
215#	:stacksize-cur=32M:\
216#	:coredumpsize-cur=0:\
217#	:maxmemorysize-cur=128M:\
218#	:memorylocked=32M:\
219#	:maxproc=128:\
220#	:openfiles=256:\
221#	:tc=default:
222#
223#
224##
225## The dialer class should be used for a dialup PPP/SLIP accounts
226## Welcome messages/news suppressed
227##
228#dialer:\
229#	:hushlogin:\
230#	:requirehome@:\
231#	:cputime=unlimited:\
232#	:filesize=2M:\
233#	:datasize=2M:\
234#	:stacksize=4M:\
235#	:coredumpsize=0:\
236#	:memoryuse=4M:\
237#	:memorylocked=1M:\
238#	:maxproc=16:\
239#	:openfiles=32:\
240#	:tc=standard:
241#
242#
243##
244## Site full-time 24/7 PPP/SLIP connections
245## - no time accounting, restricted to access via dialin lines
246##
247#site:\
248#	:ignoretime:\
249#	:passwordtime@:\
250#	:refreshtime@:\
251#	:refreshperiod@:\
252#	:sessionlimit@:\
253#	:autodelete@:\
254#	:expireperiod@:\
255#	:graceexpire@:\
256#	:gracetime@:\
257#	:warnexpire@:\
258#	:warnpassword@:\
259#	:idletime@:\
260#	:sessiontime@:\
261#	:daytime@:\
262#	:weektime@:\
263#	:monthtime@:\
264#	:warntime@:\
265#	:accounted@:\
266#	:tc=dialer:\
267#	:tc=staff:
268#
269#
270##
271## Example standard accounting entries for subscriber levels
272##
273#
274#subscriber|Subscribers:\
275#	:accounted:\
276#	:refreshtime=180d:\
277#	:refreshperiod@:\
278#	:sessionlimit@:\
279#	:autodelete=30d:\
280#	:expireperiod=180d:\
281#	:graceexpire=7d:\
282#	:gracetime=10m:\
283#	:warnexpire=7d:\
284#	:warnpassword=7d:\
285#	:idletime=30m:\
286#	:sessiontime=4h:\
287#	:daytime=6h:\
288#	:weektime=40h:\
289#	:monthtime=120h:\
290#	:warntime=4h:\
291#	:tc=standard:
292#
293#
294##
295## Subscriber accounts. These accounts have their login times
296## accounted and have access limits applied.
297##
298#subppp|PPP Subscriber Accounts:\
299#	:tc=dialer:\
300#	:tc=subscriber:
301#
302#
303#subslip|SLIP Subscriber Accounts:\
304#	:tc=dialer:\
305#	:tc=subscriber:
306#
307#
308#subshell|Shell Subscriber Accounts:\
309#	:tc=subscriber:
310#
311##
312## If you want some of the accounts to use traditional UNIX DES based
313## password hashes.
314##
315#des_users:\
316#	:passwd_format=des:\
317#	:tc=default:
318