xref: /netbsd-src/etc/defaults/security.conf (revision cba96d16f7761373cca40f6996dfc63450933ac1)
1*cba96d16Sriastradh#	$NetBSD: security.conf,v 1.28 2021/01/10 23:24:25 riastradh Exp $
26d521525Slukem#
36d521525Slukem# /etc/defaults/security.conf --
46d521525Slukem#	default configuration of /etc/security.conf
56d521525Slukem#
66d521525Slukem# see security.conf(5) for more information.
72775f3b9Slukem#
82775f3b9Slukem# DO NOT EDIT THIS FILE DIRECTLY; IT MAY BE REPLACED DURING A SYSTEM UPGRADE.
92775f3b9Slukem# EDIT /etc/security.conf INSTEAD.
102775f3b9Slukem#
116d521525Slukem
12*cba96d16Sriastradhcheck_entropy=YES
136d521525Slukemcheck_passwd=YES
146d521525Slukemcheck_group=YES
156d521525Slukemcheck_rootdotfiles=YES
166d521525Slukemcheck_ftpusers=YES
176d521525Slukemcheck_aliases=YES
186d521525Slukemcheck_rhosts=YES
196d521525Slukemcheck_homes=YES
206d521525Slukemcheck_varmail=YES
216d521525Slukemcheck_nfs=YES
226d521525Slukemcheck_devices=YES
236d521525Slukemcheck_mtree=YES
246d521525Slukemcheck_disklabels=YES
2592025001Satatatcheck_pkgs=YES
266d521525Slukemcheck_changelist=YES
27a4e58525Shaadcheck_lvm=NO
28497b5f80Sjmmvcheck_pkg_vulnerabilities=YES
29497b5f80Sjmmvcheck_pkg_signatures=YES
306d521525Slukem
316258e0bfSabsbackup_dir=/var/backups
322811b170Satatatbackup_uses_rcs=YES
331d79603cSjhawkdiff_options=-u
346258e0bfSabs
354828bcfbSjhawkcheck_homes_permit_usergroups=NO
36acaf72ecSspzcheck_homes_permit_other_owner=""
374828bcfbSjhawk
38dbfcc2f3Sjdolecekcheck_devices_ignore_fstypes="!local fdesc kernfs null procfs ptyfs ntfs msdos"
396d23caf2Slukemcheck_devices_ignore_paths=""
407da8bb10Serh
41687107d3Sjhawkcheck_mtree_follow_symlinks=NO
42687107d3Sjhawk
431c35d39aSjnemethcheck_passwd_nowarn_shells="/sbin/nologin"
441a4c8c02Sjhawkcheck_passwd_nowarn_users=""
45c6302b74Sspzcheck_passwd_permit_dups="toor"
461a4c8c02Sjhawkcheck_passwd_permit_star=NO
478e401e6cSjdolecekcheck_passwd_permit_nonalpha=NO
489e84da17Sperrymax_loginlen=16
499e84da17Sperrymax_grouplen=16
50c91905c4Sriastradh
51c91905c4Sriastradhrandom_file=/var/db/entropy-file
52