Home | History | Annotate | Line # | Download | only in defaults 
      1 #	$NetBSD: security.conf,v 1.28 2021/01/10 23:24:25 riastradh Exp $
      2 #
      3 # /etc/defaults/security.conf --
      4 #	default configuration of /etc/security.conf
      5 #
      6 # see security.conf(5) for more information.
      7 #
      8 # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
      9 # EDIT /etc/security.conf INSTEAD.
     10 #
     11 
     12 check_entropy=YES
     13 check_passwd=YES
     14 check_group=YES
     15 check_rootdotfiles=YES
     16 check_ftpusers=YES
     17 check_aliases=YES
     18 check_rhosts=YES
     19 check_homes=YES
     20 check_varmail=YES
     21 check_nfs=YES
     22 check_devices=YES
     23 check_mtree=YES
     24 check_disklabels=YES
     25 check_pkgs=YES
     26 check_changelist=YES
     27 check_lvm=NO
     28 check_pkg_vulnerabilities=YES
     29 check_pkg_signatures=YES
     30 
     31 backup_dir=/var/backups
     32 backup_uses_rcs=YES
     33 diff_options=-u
     34 
     35 check_homes_permit_usergroups=NO
     36 check_homes_permit_other_owner=""
     37 
     38 check_devices_ignore_fstypes="!local fdesc kernfs null procfs ptyfs ntfs msdos"
     39 check_devices_ignore_paths=""
     40 
     41 check_mtree_follow_symlinks=NO
     42 
     43 check_passwd_nowarn_shells="/sbin/nologin"
     44 check_passwd_nowarn_users=""
     45 check_passwd_permit_dups="toor"
     46 check_passwd_permit_star=NO
     47 check_passwd_permit_nonalpha=NO
     48 max_loginlen=16
     49 max_grouplen=16
     50 
     51 random_file=/var/db/entropy-file
     52