| Line | |
|---|
| 1 | This is nss_nonlocal, an nsswitch module that acts as a proxy for other |
|---|
| 2 | nsswitch modules like hesiod, but prevents non-local users from |
|---|
| 3 | potentially gaining local privileges by spoofing local UIDs and GIDs. |
|---|
| 4 | |
|---|
| 5 | To use it, configure /etc/nsswitch.conf as follows: |
|---|
| 6 | |
|---|
| 7 | passwd: compat nonlocal |
|---|
| 8 | passwd_nonlocal: hesiod |
|---|
| 9 | group: compat nonlocal |
|---|
| 10 | group_nonlocal: hesiod |
|---|
| 11 | |
|---|
| 12 | Copyright © 2007–2010 Anders Kaseorg <andersk@mit.edu> and Tim Abbott |
|---|
| 13 | <tabbott@mit.edu> |
|---|
| 14 | |
|---|
| 15 | nss_nonlocal is free software; you can redistribute it and/or modify |
|---|
| 16 | it under the terms of the GNU Lesser General Public License as |
|---|
| 17 | published by the Free Software Foundation; either version 2.1 of the |
|---|
| 18 | License, or (at your option) any later version. |
|---|
| 19 | |
|---|
| 20 | nss_nonlocal is distributed in the hope that it will be useful, but |
|---|
| 21 | WITHOUT ANY WARRANTY; without even the implied warranty of |
|---|
| 22 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|---|
| 23 | Lesser General Public License for more details. |
|---|
| 24 | |
|---|
| 25 | You should have received a copy of the GNU Lesser General Public |
|---|
| 26 | License along with nss_nonlocal; if not, write to the Free Software |
|---|
| 27 | Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
|---|
| 28 | 02110-1301 USA |
|---|
Note: See
TracBrowser
for help on using the repository browser.
