1 # login.conf - login class capabilities database.
3 # Remember to rebuild the database after each change to this file:
5 # cap_mkdb /etc/login.conf
7 # This file controls resource limits, accounting limits and
8 # default user environment settings.
13 # Default settings effectively disable resource limits, see the
14 # examples below for a starting point to enable them.
17 # These settings are used by login(1) by default for classless users
18 # Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
20 # Note that since a colon ':' is used to separate capability entries,
21 # a \c escape sequence must be used to embed a literal colon in the
22 # value or name of a capability (see the ``CGETNUM AND CGETSTR SYNTAX
23 # AND SEMANTICS'' section of getcap(3) for more escape sequences).
27 :copyright=/etc/COPYRIGHT:\
29 :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
30 :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin ~/bin:\
31 :nologin=/var/run/nologin:\
34 :stacksize=unlimited:\
35 :memorylocked=unlimited:\
36 :memoryuse=unlimited:\
38 :coredumpsize=unlimited:\
39 :openfiles=unlimited:\
42 :vmemoryuse=unlimited:\
49 # A collection of common class names - forward them all to 'default'
50 # (login would normally do this anyway, but having a class name
51 # here suppresses the diagnostic)
67 # Root can always login
69 # N.B. login_getpwclass(3) will use this entry for the root account,
70 # in preference to 'default'.
76 # Russian Users Accounts. Setup proper environment variables.
78 russian|Russian Users Accounts:\
84 ######################################################################
85 ######################################################################
89 ######################################################################
90 ######################################################################
93 ## These settings are used by login(1) by default for classless users
94 ## Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
100 # :memorylocked-cur=10M:\
101 # :memoryuse-cur=30M:\
102 # :filesize=infinity:\
103 # :coredumpsize=infinity:\
105 # :openfiles-cur=64:\
113 ## standard - standard user defaults
116 # :copyright=/etc/COPYRIGHT:\
117 # :welcome=/etc/motd:\
118 # :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
119 # :path=~/bin /bin /usr/bin /usr/local/bin:\
120 # :manpath=/usr/share/man /usr/local/man:\
121 # :nologin=/var/run/nologin:\
134 # :passwordtime=90d:\
141 ## users of X (needs more resources!)
144 # :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
147 # :vmemoryuse=infinity:\
157 ## Staff users - few restrictions and allow login anytime
164 # :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
170 ## root - fallback for root logins
173 # :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
174 # :cputime=infinity:\
175 # :datasize=infinity:\
176 # :stacksize=infinity:\
177 # :memorylocked=infinity:\
178 # :memoryuse=infinity:\
179 # :filesize=infinity:\
180 # :coredumpsize=infinity:\
181 # :openfiles=infinity:\
182 # :maxproc=infinity:\
183 # :memoryuse-cur=32M:\
185 # :openfiles-cur=1024:\
189 # :tc=auth-root-defaults:
193 ## Settings used by /etc/rc
197 # :coredumpsize-cur=0:\
198 # :datasize=infinity:\
202 # :memoryuse-cur=64M:\
203 # :memorylocked-cur=64M:\
212 ## Settings used by news subsystem
215 # :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
216 # :cputime=infinity:\
218 # :datasize-cur=64M:\
219 # :stacksize-cur=32M:\
220 # :coredumpsize-cur=0:\
221 # :maxmemorysize-cur=128M:\
222 # :memorylocked=32M:\
229 ## The dialer class should be used for a dialup PPP/SLIP accounts
230 ## Welcome messages/news suppressed
235 # :cputime=unlimited:\
248 ## Site full-time 24/7 PPP/SLIP connections
249 ## - no time accounting, restricted to access via dialin lines
275 ## Example standard accounting entries for subscriber levels
278 #subscriber|Subscribers:\
280 # :refreshtime=180d:\
284 # :expireperiod=180d:\
299 ## Subscriber accounts. These accounts have their login times
300 ## accounted and have access limits applied.
302 #subppp|PPP Subscriber Accounts:\
307 #subslip|SLIP Subscriber Accounts:\
312 #subshell|Shell Subscriber Accounts:\
316 ## If you want some of the accounts to use traditional UNIX DES based
320 # :passwd_format=des:\