1 1.28 riastrad # $NetBSD: security.conf,v 1.28 2021/01/10 23:24:25 riastradh Exp $ 2 1.1 lukem # 3 1.1 lukem # /etc/defaults/security.conf -- 4 1.1 lukem # default configuration of /etc/security.conf 5 1.1 lukem # 6 1.1 lukem # see security.conf(5) for more information. 7 1.2 lukem # 8 1.2 lukem # DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE. 9 1.2 lukem # EDIT /etc/security.conf INSTEAD. 10 1.2 lukem # 11 1.1 lukem 12 1.28 riastrad check_entropy=YES 13 1.1 lukem check_passwd=YES 14 1.1 lukem check_group=YES 15 1.1 lukem check_rootdotfiles=YES 16 1.1 lukem check_ftpusers=YES 17 1.1 lukem check_aliases=YES 18 1.1 lukem check_rhosts=YES 19 1.1 lukem check_homes=YES 20 1.1 lukem check_varmail=YES 21 1.1 lukem check_nfs=YES 22 1.1 lukem check_devices=YES 23 1.1 lukem check_mtree=YES 24 1.1 lukem check_disklabels=YES 25 1.7 atatat check_pkgs=YES 26 1.1 lukem check_changelist=YES 27 1.21 haad check_lvm=NO 28 1.22 jmmv check_pkg_vulnerabilities=YES 29 1.22 jmmv check_pkg_signatures=YES 30 1.3 abs 31 1.3 abs backup_dir=/var/backups 32 1.6 atatat backup_uses_rcs=YES 33 1.11 jhawk diff_options=-u 34 1.12 jhawk 35 1.12 jhawk check_homes_permit_usergroups=NO 36 1.26 spz check_homes_permit_other_owner="" 37 1.10 jhawk 38 1.17 jdolecek check_devices_ignore_fstypes="!local fdesc kernfs null procfs ptyfs ntfs msdos" 39 1.18 lukem check_devices_ignore_paths="" 40 1.13 erh 41 1.10 jhawk check_mtree_follow_symlinks=NO 42 1.1 lukem 43 1.19 jnemeth check_passwd_nowarn_shells="/sbin/nologin" 44 1.9 jhawk check_passwd_nowarn_users="" 45 1.24 spz check_passwd_permit_dups="toor" 46 1.9 jhawk check_passwd_permit_star=NO 47 1.14 jdolecek check_passwd_permit_nonalpha=NO 48 1.16 perry max_loginlen=16 49 1.16 perry max_grouplen=16 50 1.27 riastrad 51 1.27 riastrad random_file=/var/db/entropy-file 52