shadow: set default group for useradd to users, login.defs tweaks.

This commit is contained in:
Juan RP 2012-07-31 20:57:57 +02:00
parent 98b459021c
commit 41cb3f1f01
2 changed files with 13 additions and 28 deletions

View File

@ -1,10 +1,8 @@
# *REQUIRED* # *REQUIRED*
# Directory where mailboxes reside, _or_ name of file, relative to the # Directory where mailboxes reside, _or_ name of file, relative to the
# home directory. If you _do_ define both, MAIL_DIR takes precedence. # home directory. If you _do_ define both, MAIL_DIR takes precedence.
# QMAIL_DIR is for Qmail
# #
#QMAIL_DIR Maildir MAIL_DIR /var/mail
MAIL_DIR /var/mail
#MAIL_FILE .mail #MAIL_FILE .mail
# Password aging controls: # Password aging controls:
@ -13,51 +11,36 @@ MAIL_DIR /var/mail
# PASS_MIN_DAYS Minimum number of days allowed between password changes. # PASS_MIN_DAYS Minimum number of days allowed between password changes.
# PASS_MIN_LEN Minimum acceptable password length. # PASS_MIN_LEN Minimum acceptable password length.
# PASS_WARN_AGE Number of days warning given before a password expires. # PASS_WARN_AGE Number of days warning given before a password expires.
# PASS_MAX_DAYS 99999
PASS_MAX_DAYS 99999 PASS_MIN_DAYS 0
PASS_MIN_DAYS 0 PASS_WARN_AGE 7
PASS_WARN_AGE 7
#
# Min/max values for automatic uid selection in useradd # Min/max values for automatic uid selection in useradd
#
UID_MIN 1000 UID_MIN 1000
UID_MAX 60000 UID_MAX 60000
# System accounts # System accounts
SYS_UID_MIN 100 SYS_UID_MIN 100
SYS_UID_MAX 999 SYS_UID_MAX 999
#
# Min/max values for automatic gid selection in groupadd # Min/max values for automatic gid selection in groupadd
#
GID_MIN 1000 GID_MIN 1000
GID_MAX 60000 GID_MAX 60000
# System accounts # System accounts
SYS_GID_MIN 100 SYS_GID_MIN 100
SYS_GID_MAX 999 SYS_GID_MAX 999
#
# If defined, this command is run when removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed (passed as the first argument).
#
#USERDEL_CMD /usr/sbin/userdel_local
#
# If useradd should create home directories for users by default # If useradd should create home directories for users by default
# On RH systems, we do. This option is overridden with the -m flag on # On RH systems, we do. This option is overridden with the -m flag on
# useradd command line. # useradd command line.
# CREATE_HOME yes
CREATE_HOME yes
# The permission mask is initialized to this value. If not specified, # The permission mask is initialized to this value. If not specified,
# the permission mask will be initialized to 022. # the permission mask will be initialized to 022.
UMASK 077 UMASK 077
# This enables userdel to remove user groups if no members exist. # This enables userdel to remove user groups if no members exist.
# USERGROUPS_ENAB yes
USERGROUPS_ENAB yes
# Disable MD5 and use SHA512 by default. # Use SHA512 encryption for passwords by default.
MD5_CRYPT_ENAB no ENCRYPT_METHOD SHA512
ENCRYPT_METHOD SHA512 SHA_CRYPT_MIN_ROUNDS 66666

View File

@ -1,7 +1,7 @@
# Template file for 'shadow' # Template file for 'shadow'
pkgname=shadow pkgname=shadow
version=4.1.5.1 version=4.1.5.1
revision=7 revision=8
build_style=gnu-configure build_style=gnu-configure
configure_args="--bindir=/usr/bin --sbindir=/usr/sbin configure_args="--bindir=/usr/bin --sbindir=/usr/sbin
--libdir=/usr/lib --enable-shared --disable-static --libdir=/usr/lib --enable-shared --disable-static
@ -59,6 +59,8 @@ post_install() {
# Disable creating mailbox files by default. # Disable creating mailbox files by default.
sed -i -e 's/yes/no/' $DESTDIR/etc/default/useradd sed -i -e 's/yes/no/' $DESTDIR/etc/default/useradd
# Change default group to the users gid (100).
sed -i -e 's/^\(GROUP\)=\(.*\)$/\1=100/' ${DESTDIR}/etc/default/useradd
# Install the cron daily job. # Install the cron daily job.
install -D -m744 ${FILESDIR}/shadow.cron-daily \ install -D -m744 ${FILESDIR}/shadow.cron-daily \