etc/defaults/security.conf
author erh <erh@NetBSD.org>
Tue, 28 Sep 2004 15:03:58 +0000
branchtrunk
changeset 130733 d95151b04913
parent 120936 c952e86f16cc
child 133913 857ad6f6f0e4
permissions -rw-r--r--
PR misc/7716: add configuration options find_core_ignore_fstypes and check_devices_ignore_fstypes to allow the filesystem types that are ignored during the daily and security runs to be adjusted.

#	$NetBSD: security.conf,v 1.13 2004/09/28 15:03:58 erh Exp $
#
# /etc/defaults/security.conf --
#	default configuration of /etc/security.conf
#
# see security.conf(5) for more information.
#
# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
# EDIT /etc/security.conf INSTEAD.
#

check_passwd=YES
check_group=YES
check_rootdotfiles=YES
check_ftpusers=YES
check_aliases=YES
check_rhosts=YES
check_homes=YES
check_varmail=YES
check_nfs=YES
check_devices=YES
check_mtree=YES
check_disklabels=YES
check_pkgs=YES
check_changelist=YES

backup_dir=/var/backups
backup_uses_rcs=YES
diff_options=-u
pkgdb_dir=/var/db/pkg

check_homes_permit_usergroups=NO

check_devices_ignore_fstypes="!local fdesc kernfs null procfs"

check_mtree_follow_symlinks=NO

check_passwd_nowarn_shells="/sbin/nologin /usr/libexec/uucp/uucico"
check_passwd_nowarn_users=""
check_passwd_permit_star=NO
max_loginlen=8
max_grouplen=8