summaryrefslogtreecommitdiffstats
path: root/etc/skey.access
diff options
context:
space:
mode:
authorpst <pst@FreeBSD.org>1994-09-29 18:58:39 +0000
committerpst <pst@FreeBSD.org>1994-09-29 18:58:39 +0000
commitfd0fa3649469bdef34189795c99e89c60d6bdd5a (patch)
treeaf8bf97155746f459837762b86976f6f08612315 /etc/skey.access
parenta6993e000c7885868c8b0eaf8f59726c90e6c907 (diff)
downloadFreeBSD-src-fd0fa3649469bdef34189795c99e89c60d6bdd5a.zip
FreeBSD-src-fd0fa3649469bdef34189795c99e89c60d6bdd5a.tar.gz
Install improved skey access code
Diffstat (limited to 'etc/skey.access')
-rw-r--r--etc/skey.access38
1 files changed, 30 insertions, 8 deletions
diff --git a/etc/skey.access b/etc/skey.access
index 22cdb69..ad0245f 100644
--- a/etc/skey.access
+++ b/etc/skey.access
@@ -1,8 +1,30 @@
-# First word says if UNIX passwords are to be permitted or denied.
-# remainder of the rule is a networknumber and mask. A rule matches a
-# host if any of its addresses satisfies:
-#
-# network = (address & mask)
-#
-#what network mask
-permit 0.0.0.0 0.0.0.0
+# This file controls whether UNIX passwords are to be permitted. Rules
+# are matched in order, and the search terminates when the first matching
+# rule has been found.
+#
+# Each rule has the form:
+#
+# permit condition condition...
+# deny condition condition...
+#
+# Where "permit" or "deny" may be followed by zero or more conditions.
+#
+# A rule is matched when all conditions are satisfied. A rule without
+# conditions is always satisfied.
+#
+# Examples of conditions are:
+#
+# hostname wzv.win.tue.nl
+# internet 131.155.210.0 255.255.255.0
+# port ttya
+# user root
+# group wheel
+#
+# The old S/Key form (permit/deny netnumber netmask) is still supported.
+#
+#permit user uugiga # uucp login via modem or internet
+#permit port ttyb # local
+#permit port console # local
+#deny # anything else
+
+permit # permit plaintext passwords all the time
OpenPOWER on IntegriCloud