shadow: set default group for useradd to users, login.defs tweaks.
This commit is contained in:
parent
98b459021c
commit
41cb3f1f01
@ -1,9 +1,7 @@
|
|||||||
# *REQUIRED*
|
# *REQUIRED*
|
||||||
# Directory where mailboxes reside, _or_ name of file, relative to the
|
# Directory where mailboxes reside, _or_ name of file, relative to the
|
||||||
# home directory. If you _do_ define both, MAIL_DIR takes precedence.
|
# home directory. If you _do_ define both, MAIL_DIR takes precedence.
|
||||||
# QMAIL_DIR is for Qmail
|
|
||||||
#
|
#
|
||||||
#QMAIL_DIR Maildir
|
|
||||||
MAIL_DIR /var/mail
|
MAIL_DIR /var/mail
|
||||||
#MAIL_FILE .mail
|
#MAIL_FILE .mail
|
||||||
|
|
||||||
@ -13,41 +11,27 @@ MAIL_DIR /var/mail
|
|||||||
# PASS_MIN_DAYS Minimum number of days allowed between password changes.
|
# PASS_MIN_DAYS Minimum number of days allowed between password changes.
|
||||||
# PASS_MIN_LEN Minimum acceptable password length.
|
# PASS_MIN_LEN Minimum acceptable password length.
|
||||||
# PASS_WARN_AGE Number of days warning given before a password expires.
|
# PASS_WARN_AGE Number of days warning given before a password expires.
|
||||||
#
|
|
||||||
PASS_MAX_DAYS 99999
|
PASS_MAX_DAYS 99999
|
||||||
PASS_MIN_DAYS 0
|
PASS_MIN_DAYS 0
|
||||||
PASS_WARN_AGE 7
|
PASS_WARN_AGE 7
|
||||||
|
|
||||||
#
|
|
||||||
# Min/max values for automatic uid selection in useradd
|
# Min/max values for automatic uid selection in useradd
|
||||||
#
|
|
||||||
UID_MIN 1000
|
UID_MIN 1000
|
||||||
UID_MAX 60000
|
UID_MAX 60000
|
||||||
# System accounts
|
# System accounts
|
||||||
SYS_UID_MIN 100
|
SYS_UID_MIN 100
|
||||||
SYS_UID_MAX 999
|
SYS_UID_MAX 999
|
||||||
|
|
||||||
#
|
|
||||||
# Min/max values for automatic gid selection in groupadd
|
# Min/max values for automatic gid selection in groupadd
|
||||||
#
|
|
||||||
GID_MIN 1000
|
GID_MIN 1000
|
||||||
GID_MAX 60000
|
GID_MAX 60000
|
||||||
# System accounts
|
# System accounts
|
||||||
SYS_GID_MIN 100
|
SYS_GID_MIN 100
|
||||||
SYS_GID_MAX 999
|
SYS_GID_MAX 999
|
||||||
|
|
||||||
#
|
|
||||||
# If defined, this command is run when removing a user.
|
|
||||||
# It should remove any at/cron/print jobs etc. owned by
|
|
||||||
# the user to be removed (passed as the first argument).
|
|
||||||
#
|
|
||||||
#USERDEL_CMD /usr/sbin/userdel_local
|
|
||||||
|
|
||||||
#
|
|
||||||
# If useradd should create home directories for users by default
|
# If useradd should create home directories for users by default
|
||||||
# On RH systems, we do. This option is overridden with the -m flag on
|
# On RH systems, we do. This option is overridden with the -m flag on
|
||||||
# useradd command line.
|
# useradd command line.
|
||||||
#
|
|
||||||
CREATE_HOME yes
|
CREATE_HOME yes
|
||||||
|
|
||||||
# The permission mask is initialized to this value. If not specified,
|
# The permission mask is initialized to this value. If not specified,
|
||||||
@ -55,9 +39,8 @@ CREATE_HOME yes
|
|||||||
UMASK 077
|
UMASK 077
|
||||||
|
|
||||||
# This enables userdel to remove user groups if no members exist.
|
# This enables userdel to remove user groups if no members exist.
|
||||||
#
|
|
||||||
USERGROUPS_ENAB yes
|
USERGROUPS_ENAB yes
|
||||||
|
|
||||||
# Disable MD5 and use SHA512 by default.
|
# Use SHA512 encryption for passwords by default.
|
||||||
MD5_CRYPT_ENAB no
|
|
||||||
ENCRYPT_METHOD SHA512
|
ENCRYPT_METHOD SHA512
|
||||||
|
SHA_CRYPT_MIN_ROUNDS 66666
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
# Template file for 'shadow'
|
# Template file for 'shadow'
|
||||||
pkgname=shadow
|
pkgname=shadow
|
||||||
version=4.1.5.1
|
version=4.1.5.1
|
||||||
revision=7
|
revision=8
|
||||||
build_style=gnu-configure
|
build_style=gnu-configure
|
||||||
configure_args="--bindir=/usr/bin --sbindir=/usr/sbin
|
configure_args="--bindir=/usr/bin --sbindir=/usr/sbin
|
||||||
--libdir=/usr/lib --enable-shared --disable-static
|
--libdir=/usr/lib --enable-shared --disable-static
|
||||||
@ -59,6 +59,8 @@ post_install() {
|
|||||||
|
|
||||||
# Disable creating mailbox files by default.
|
# Disable creating mailbox files by default.
|
||||||
sed -i -e 's/yes/no/' $DESTDIR/etc/default/useradd
|
sed -i -e 's/yes/no/' $DESTDIR/etc/default/useradd
|
||||||
|
# Change default group to the users gid (100).
|
||||||
|
sed -i -e 's/^\(GROUP\)=\(.*\)$/\1=100/' ${DESTDIR}/etc/default/useradd
|
||||||
|
|
||||||
# Install the cron daily job.
|
# Install the cron daily job.
|
||||||
install -D -m744 ${FILESDIR}/shadow.cron-daily \
|
install -D -m744 ${FILESDIR}/shadow.cron-daily \
|
||||||
|
Loading…
x
Reference in New Issue
Block a user