| Revision 22761,
628 bytes
checked in by andersk, 17 years ago
(diff) |
|
Explicitly allow root and (on Ubuntu) admin in addition to
nss-local-users.
|
| Rev | Line | |
|---|
| [22685] | 1 | |
|---|
| 2 | #DEBATHENA BEGIN |
|---|
| [22761] | 3 | |
|---|
| [22685] | 4 | #DEBATHENA EXAMPLES |
|---|
| 5 | ## Only root and tabbott can log in. |
|---|
| 6 | #-:ALL EXCEPT root tabbott:ALL |
|---|
| 7 | ## Only andersk and tabbott can log in remotely. |
|---|
| 8 | #-:ALL EXCEPT andersk tabbott:ALL EXCEPT LOCAL |
|---|
| 9 | ## Only root and users in group gsipb can log in. |
|---|
| 10 | #-:ALL EXCEPT root gsipb:ALL |
|---|
| [22761] | 11 | # Note that you can use Moira NFS groups here. |
|---|
| 12 | # See <http://debathena.mit.edu/access-controls> for details. |
|---|
| [22685] | 13 | |
|---|
| [22761] | 14 | # DEFAULT: Only allow remote access for users who have local accounts |
|---|
| [22731] | 15 | # on the machine (i.e. are in /etc/passwd). Allow all other users to |
|---|
| 16 | # login only locally. |
|---|
| 17 | |
|---|
| [22761] | 18 | -:ALL EXCEPT root admin nss-local-users:ALL EXCEPT LOCAL |
|---|
| 19 | |
|---|
| [22685] | 20 | #DEBATHENA END |
|---|
Note: See
TracBrowser
for help on using the repository browser.
