diff options
| author | Sheldon Hearn <sheldonh@FreeBSD.org> | 2000-03-01 12:20:22 +0000 |
|---|---|---|
| committer | Sheldon Hearn <sheldonh@FreeBSD.org> | 2000-03-01 12:20:22 +0000 |
| commit | 87faa07bec7b6e1212692fbaa21d663ee288abe8 (patch) | |
| tree | 9a436c177ed358d0faad3010a07f77c999ee9cfa /lib/libpam | |
| parent | f63f700eead0ba7d5c6f70df1a0bedc055bc8734 (diff) | |
Notes
Diffstat (limited to 'lib/libpam')
| -rw-r--r-- | lib/libpam/modules/pam_login_access/login.access.5 | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/lib/libpam/modules/pam_login_access/login.access.5 b/lib/libpam/modules/pam_login_access/login.access.5 index 500eb3a7ec94..f9f0eb5f0f0e 100644 --- a/lib/libpam/modules/pam_login_access/login.access.5 +++ b/lib/libpam/modules/pam_login_access/login.access.5 @@ -26,7 +26,8 @@ Each line of the login access control table has three fields separated by a ":" character: permission : users : origins .Pp The first field should be a "+" (access granted) or "-" (access denied) -character. The second field should be a list of one or more login names, +character. +The second field should be a list of one or more login names, group names, or ALL (always matches). The third field should be a list of one or more tty names (for non-networked logins), host names, domain names (begin with "."), host addresses, internet network numbers (end @@ -37,7 +38,8 @@ in host or user patterns. The EXCEPT operator makes it possible to write very compact rules. .Pp The group file is searched only when a name does not match that of the -logged-in user. Only groups are matched in which users are explicitly +logged-in user. +Only groups are matched in which users are explicitly listed: the program does not look at a user's primary group id value. .Sh FILES .Bl -tag -width /etc/login.access -compact |
