diff options
Diffstat (limited to 'usr.bin/login/login.access.5')
| -rw-r--r-- | usr.bin/login/login.access.5 | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/usr.bin/login/login.access.5 b/usr.bin/login/login.access.5 index 33e3bf3..2f2d8f2 100644 --- a/usr.bin/login/login.access.5 +++ b/usr.bin/login/login.access.5 @@ -17,7 +17,8 @@ When someone logs in, the .Nm is scanned for the first entry that matches the (user, host) combination, or, in case of non-networked -logins, the first entry that matches the (user, tty) combination. The +logins, the first entry that matches the (user, tty) combination. +The permissions field of that table entry determines whether the login will be accepted or refused. .Pp @@ -29,11 +30,13 @@ character: The first field should be a "+" (access granted) or "-" (access denied) character. The second field should be a list of one or more login names, -group names, or ALL (always matches). The third field should be a list +group names, or ALL (always matches). +The third field should be a list of one or more tty names (for non-networked logins), host names, domain names (begin with "."), host addresses, internet network numbers (end with "."), ALL (always matches) or LOCAL (matches any string that does -not contain a "." character). If you run NIS you can use @netgroupname +not contain a "." character). +If you run NIS you can use @netgroupname in host or user patterns. .Pp The EXCEPT operator makes it possible to write very compact rules. |
