login.conf revision 61184
158579Srwatson# login.conf - login class capabilities database.
221526Sdavidn#
358579Srwatson# Remember to rebuild the database after each change to this file:
458579Srwatson#
521526Sdavidn#	cap_mkdb /etc/login.conf
621526Sdavidn#
721526Sdavidn# This file controls resource limits, accounting limits and
821526Sdavidn# default user environment settings.
921526Sdavidn#
1050472Speter# $FreeBSD: head/etc/login.conf 61184 2000-06-02 20:51:05Z alfred $
1121526Sdavidn#
1221526Sdavidn
1339375Smsmith# Default settings effectively disable resource limits, see the
1439375Smsmith# examples below for a starting point to enable them.
1521526Sdavidn
1642149Shoek# defaults
1721526Sdavidn# These settings are used by login(1) by default for classless users
1821526Sdavidn# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
1921526Sdavidn
2021526Sdavidndefault:\
2121526Sdavidn	:copyright=/etc/COPYRIGHT:\
2221526Sdavidn	:welcome=/etc/motd:\
2347583Sjkh	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
2458579Srwatson	:path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin ~/bin:\
2542515Sasami	:nologin=/var/run/nologin:\
2639375Smsmith	:cputime=unlimited:\
2739375Smsmith	:datasize=unlimited:\
2839375Smsmith	:stacksize=unlimited:\
2939375Smsmith	:memorylocked=unlimited:\
3039375Smsmith	:memoryuse=unlimited:\
3139375Smsmith	:filesize=unlimited:\
3239375Smsmith	:coredumpsize=unlimited:\
3339375Smsmith	:openfiles=unlimited:\
3439375Smsmith	:maxproc=unlimited:\
3561184Salfred	:sbsize=unlimited:\
3621538Sdavidn	:priority=0:\
3721526Sdavidn	:ignoretime@:\
3839375Smsmith	:umask=022:
3921526Sdavidn
4021943Sdavidn
4121538Sdavidn#
4239375Smsmith# A collection of common class names - forward them all to 'default'
4339375Smsmith# (login would normally do this anyway, but having a class name
4439375Smsmith#  here suppresses the diagnostic)
4521538Sdavidn#
4639375Smsmithstandard:\
4739375Smsmith	:tc=default:
4821538Sdavidnxuser:\
4939375Smsmith	:tc=default:
5021526Sdavidnstaff:\
5139375Smsmith	:tc=default:
5239375Smsmithdaemon:\
5339424Sdt	:tc=default:
5439375Smsmithnews:\
5539375Smsmith	:tc=default:
5639375Smsmithdialer:\
5739375Smsmith	:tc=default:
5821526Sdavidn
5921526Sdavidn#
6039375Smsmith# Root can always login
6121526Sdavidn#
6248814Snik# N.B.  login_getpwclass(3) will use this entry for the root account,
6348814Snik#       in preference to 'default'.
6421526Sdavidnroot:\
6539375Smsmith	:ignorenologin:\
6639375Smsmith	:tc=default:
6721526Sdavidn
6821526Sdavidn#
6939375Smsmith# Russian Users Accounts. Setup proper environment variables.
7021526Sdavidn#
7139375Smsmithrussian:Russian Users Accounts:\
7239375Smsmith	:charset=KOI8-R:\
7339375Smsmith	:lang=ru_RU.KOI8-R:\
7421526Sdavidn	:tc=default:
7521526Sdavidn
7621526Sdavidn
7739375Smsmith######################################################################
7839375Smsmith######################################################################
7939375Smsmith##
8039375Smsmith## Example entries
8139375Smsmith## 
8239375Smsmith######################################################################
8339375Smsmith######################################################################
8439375Smsmith
8539375Smsmith## Example defaults
8639375Smsmith## These settings are used by login(1) by default for classless users
8739375Smsmith## Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
8821526Sdavidn#
8939375Smsmith#default:\
9039375Smsmith#	:cputime=infinity:\
9139375Smsmith#	:datasize-cur=22M:\
9239375Smsmith#	:stacksize-cur=8M:\
9339375Smsmith#	:memorylocked-cur=10M:\
9439375Smsmith#	:memoryuse-cur=30M:\
9539375Smsmith#	:filesize=infinity:\
9639375Smsmith#	:coredumpsize=infinity:\
9739375Smsmith#	:maxproc-cur=64:\
9839375Smsmith#	:openfiles-cur=64:\
9939375Smsmith#	:priority=0:\
10039375Smsmith#	:requirehome@:\
10139375Smsmith#	:umask=022:\
10239375Smsmith#	:tc=auth-defaults:
10321526Sdavidn#
10421526Sdavidn#
10539375Smsmith##
10639375Smsmith## standard - standard user defaults
10739375Smsmith##
10839375Smsmith#standard:\
10939375Smsmith#	:copyright=/etc/COPYRIGHT:\
11039375Smsmith#	:welcome=/etc/motd:\
11143220Sdg#	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
11239375Smsmith#	:path=~/bin /bin /usr/bin /usr/local/bin:\
11339375Smsmith#	:manpath=/usr/share/man /usr/local/man:\
11442587Sasami#	:nologin=/var/run/nologin:\
11539375Smsmith#	:cputime=1h30m:\
11639375Smsmith#	:datasize=8M:\
11739375Smsmith#	:stacksize=2M:\
11839375Smsmith#	:memorylocked=4M:\
11939375Smsmith#	:memoryuse=8M:\
12039375Smsmith#	:filesize=8M:\
12139375Smsmith#	:coredumpsize=8M:\
12239375Smsmith#	:openfiles=24:\
12339375Smsmith#	:maxproc=32:\
12439375Smsmith#	:priority=0:\
12539375Smsmith#	:requirehome:\
12646209Shoek#	:passwordtime=90d:\
12739375Smsmith#	:umask=002:\
12839375Smsmith#	:ignoretime@:\
12939375Smsmith#	:tc=default:
13021526Sdavidn#
13121526Sdavidn#
13239375Smsmith##
13339375Smsmith## users of X (needs more resources!)
13439375Smsmith##
13539375Smsmith#xuser:\
13639375Smsmith#	:manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
13739375Smsmith#	:cputime=4h:\
13839375Smsmith#	:datasize=12M:\
13939375Smsmith#	:stacksize=4M:\
14039375Smsmith#	:filesize=8M:\
14139375Smsmith#	:memoryuse=16M:\
14239375Smsmith#	:openfiles=32:\
14339375Smsmith#	:maxproc=48:\
14439375Smsmith#	:tc=standard:
14525369Sache#
14625369Sache#
14739375Smsmith##
14839375Smsmith## Staff users - few restrictions and allow login anytime
14939375Smsmith##
15039375Smsmith#staff:\
15139375Smsmith#	:ignorenologin:\
15239375Smsmith#	:ignoretime:\
15339375Smsmith#	:requirehome@:\
15439375Smsmith#	:accounted@:\
15539375Smsmith#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
15639375Smsmith#	:umask=022:\
15739375Smsmith#	:tc=standard:
15839375Smsmith#
15939375Smsmith#
16039375Smsmith##
16139375Smsmith## root - fallback for root logins
16239375Smsmith##
16339375Smsmith#root:\
16439375Smsmith#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
16539375Smsmith#	:cputime=infinity:\
16639375Smsmith#	:datasize=infinity:\
16739375Smsmith#	:stacksize=infinity:\
16839375Smsmith#	:memorylocked=infinity:\
16939375Smsmith#	:memoryuse=infinity:\
17039375Smsmith#	:filesize=infinity:\
17139375Smsmith#	:coredumpsize=infinity:\
17239375Smsmith#	:openfiles=infinity:\
17339375Smsmith#	:maxproc=infinity:\
17439375Smsmith#	:memoryuse-cur=32M:\
17539375Smsmith#	:maxproc-cur=64:\
17639375Smsmith#	:openfiles-cur=1024:\
17739375Smsmith#	:priority=0:\
17839375Smsmith#	:requirehome@:\
17939375Smsmith#	:umask=022:\
18039375Smsmith#	:tc=auth-root-defaults:
18139375Smsmith#
18239375Smsmith#
18339375Smsmith##
18439375Smsmith## Settings used by /etc/rc
18539375Smsmith##
18639375Smsmith#daemon:\
18739375Smsmith#	:coredumpsize@:\
18839375Smsmith#	:coredumpsize-cur=0:\
18939375Smsmith#	:datasize=infinity:\
19039375Smsmith#	:datasize-cur@:\
19139375Smsmith#	:maxproc=512:\
19239375Smsmith#	:maxproc-cur@:\
19339375Smsmith#	:memoryuse-cur=64M:\
19439375Smsmith#	:memorylocked-cur=64M:\
19539375Smsmith#	:openfiles=1024:\
19639375Smsmith#	:openfiles-cur@:\
19739375Smsmith#	:stacksize=16M:\
19839375Smsmith#	:stacksize-cur@:\
19939375Smsmith#	:tc=default:
20039375Smsmith#
20139375Smsmith#
20239375Smsmith##
20339375Smsmith## Settings used by news subsystem
20439375Smsmith##
20539375Smsmith#news:\
20639375Smsmith#	:path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
20739375Smsmith#	:cputime=infinity:\
20839375Smsmith#	:filesize=128M:\
20939375Smsmith#	:datasize-cur=64M:\
21039375Smsmith#	:stacksize-cur=32M:\
21139375Smsmith#	:coredumpsize-cur=0:\
21239375Smsmith#	:maxmemorysize-cur=128M:\
21339375Smsmith#	:memorylocked=32M:\
21439375Smsmith#	:maxproc=128:\
21539375Smsmith#	:openfiles=256:\
21639375Smsmith#	:tc=default:
21739375Smsmith#
21839375Smsmith#
21939375Smsmith##
22039375Smsmith## The dialer class should be used for a dialup PPP/SLIP accounts
22139375Smsmith## Welcome messages/news suppressed
22239375Smsmith##
22339375Smsmith#dialer:\
22439375Smsmith#	:hushlogin:\
22539375Smsmith#	:requirehome@:\
22639375Smsmith#	:cputime=unlimited:\
22739375Smsmith#	:filesize=2M:\
22839375Smsmith#	:datasize=2M:\
22939375Smsmith#	:stacksize=4M:\
23039375Smsmith#	:coredumpsize=0:\
23139375Smsmith#	:memoryuse=4M:\
23239375Smsmith#	:memorylocked=1M:\
23339375Smsmith#	:maxproc=16:\
23439375Smsmith#	:openfiles=32:\
23539375Smsmith#	:tc=standard:
23639375Smsmith#
23739375Smsmith#
23839375Smsmith##
23939375Smsmith## Site full-time 24/7 PPP/SLIP connections
24039375Smsmith## - no time accounting, restricted to access via dialin lines
24139375Smsmith##
24239375Smsmith#site:\
24339375Smsmith#	:ignoretime:\
24446209Shoek#	:passwordtime@:\
24539375Smsmith#	:refreshtime@:\
24639375Smsmith#	:refreshperiod@:\
24739375Smsmith#	:sessionlimit@:\
24839375Smsmith#	:autodelete@:\
24939375Smsmith#	:expireperiod@:\
25039375Smsmith#	:graceexpire@:\
25139375Smsmith#	:gracetime@:\
25239375Smsmith#	:warnexpire@:\
25339375Smsmith#	:warnpassword@:\
25439375Smsmith#	:idletime@:\
25539375Smsmith#	:sessiontime@:\
25639375Smsmith#	:daytime@:\
25739375Smsmith#	:weektime@:\
25839375Smsmith#	:monthtime@:\
25939375Smsmith#	:warntime@:\
26039375Smsmith#	:accounted@:\
26139375Smsmith#	:tc=dialer:\
26239375Smsmith#	:tc=staff:
26339375Smsmith#
26439375Smsmith#
26539375Smsmith##
26639375Smsmith## Example standard accounting entries for subscriber levels
26739375Smsmith##
26839375Smsmith#
26939375Smsmith#subscriber|Subscribers:\
27039375Smsmith#	:accounted:\
27139375Smsmith#	:refreshtime=180d:\
27239375Smsmith#	:refreshperiod@:\
27339375Smsmith#	:sessionlimit@:\
27439375Smsmith#	:autodelete=30d:\
27539375Smsmith#	:expireperiod=180d:\
27639375Smsmith#	:graceexpire=7d:\
27739375Smsmith#	:gracetime=10m:\
27839375Smsmith#	:warnexpire=7d:\
27939375Smsmith#	:warnpassword=7d:\
28039375Smsmith#	:idletime=30m:\
28139375Smsmith#	:sessiontime=4h:\
28239375Smsmith#	:daytime=6h:\
28339375Smsmith#	:weektime=40h:\
28439375Smsmith#	:monthtime=120h:\
28539375Smsmith#	:warntime=4h:\
28639375Smsmith#	:tc=standard:
28739375Smsmith#
28839375Smsmith#
28939375Smsmith##
29039375Smsmith## Subscriber accounts. These accounts have their login times
29139375Smsmith## accounted and have access limits applied.
29239375Smsmith##
29339375Smsmith#subppp|PPP Subscriber Accounts:\
29439375Smsmith#	:tc=dialer:\
29539375Smsmith#	:tc=subscriber:
29639375Smsmith#
29739375Smsmith#
29839375Smsmith#subslip|SLIP Subscriber Accounts:\
29939375Smsmith#	:tc=dialer:\
30039375Smsmith#	:tc=subscriber:
30139375Smsmith#
30239375Smsmith#
30339375Smsmith#subshell:Shell Subscriber Accounts:\
30439375Smsmith#	:tc=subscriber:
30539375Smsmith#
306