| /l3/users/27-3-2017/NT-Ladm/debian1.net.nt/root :1 :2 :3 :4 :5 :6 :7 :8 |
|
|
#./shell.sh
Changing shell for user user... Changing shell for user ivan... Changing shell for user petr... Changing shell for user anna... |
|
#finger ivan
Login: ivan Name: Directory: /home/ivan Shell: /bin/bash Last login Wed Mar 29 09:27 (EEST) on pts/0 from 192.168.16.154 No mail. No Plan. |
|
#vi shell.sh
|
|
# 9 done
|
|
#echo $?
0 |
|
#test 5 -eq 6
|
|
#echo $?
1 |
|
#[ 5 -eq 6 ]
|
|
#echo $?
1 |
|
#[ 5 -eq 5 ]
|
|
#echo $?
0 |
|
#vi shell.sh
--- /tmp/l3-saved-13994.29037.12807 2017-03-29 14:52:49.359210863 +0300
+++ shell.sh 2017-03-29 14:54:50.671133253 +0300
@@ -1,5 +1,9 @@
#!/bin/bash
+if [ $# -gt 1 ]
+ then
+ exit 2
+ fi
users=`awk -F: '$3>=1000&&$3!=65534{print $1}' /etc/passwd | tr "\n" " " `
for user in $users
do
|
|
#vi shell.sh sh
|
|
#~
l3script: ./: Это каталог |
|
#./shell.sh sh
Changing shell for user user... Changing shell for user ivan... Changing shell for user petr... Changing shell for user anna... |
|
#./shell.sh
Changing shell for user user... Changing shell for user ivan... Changing shell for user petr... Changing shell for user anna... |
|
#./shell.sh sh gre
|
|
#./shell.sh sh ry
|
|
#echo $?
2 |
|
#jobs
|
|
#pwd
/root/scripts |
|
#vi proc.sh
--- /dev/null 2017-03-24 16:46:11.415999982 +0200
+++ proc.sh 2017-03-29 15:44:47.903149200 +0300
@@ -0,0 +1,9 @@
+#! /bin/bash
+
+i=1
+while [$i -lt 1000000]
+ do
+ echo $i > /dev/`who | awk '$1~/ivan/{print $2}'`
+ clear > /dev/`who | awk '$1~/ivan/{print $2}'`
+ i=$[$i+1]
+ done
|
|
#chmod u+x proc.sh
|
|
#./proc.sh
./proc.sh: line 4: [1: команда не найдена |
|
#./ proc.sh
l3script: ./: Это каталог |
|
#vi proc.sh
--- /tmp/l3-saved-13994.9482.16217 2017-03-29 15:46:18.815130486 +0300
+++ proc.sh 2017-03-29 15:47:39.531147640 +0300
@@ -1,7 +1,7 @@
#! /bin/bash
i=1
-while [$i -lt 1000000]
+while [ $i -lt 1000000 ]
do
echo $i > /dev/`who | awk '$1~/ivan/{print $2}'`
clear > /dev/`who | awk '$1~/ivan/{print $2}'`
|
|
#./ proc.sh
l3script: ./: Это каталог |
|
#./proc.sh
^D ^C |
|
#vi proc.sh
|
|
#~
|
|
#cd ..
|
|
#cd ..
|
|
#cd etc/
|
|
#tree
. ├── acpi │ ├── events │ │ └── powerbtn-acpi-support │ └── powerbtn-acpi-support.sh ├── adduser.conf ├── adjtime ├── aliases ├── alternatives │ ├── aptitude -> /usr/bin/aptitude-curses ... │ └── mailcap ├── wgetrc ├── X11 │ └── xkb └── xml ├── catalog ├── catalog.old ├── xml-core.xml └── xml-core.xml.old 118 directories, 1074 files |
|
#ls -l
итого 664 drwxr-xr-x 3 root root 4096 Окт 13 2014 acpi -rw-r--r-- 1 root root 2981 Июн 27 2014 adduser.conf -rw-r--r-- 1 root root 44 Окт 15 2014 adjtime -rw-r--r-- 1 root root 196 Июн 27 2014 aliases drwxr-xr-x 2 root root 4096 Окт 13 2014 alternatives drwxr-xr-x 6 root root 4096 Окт 13 2014 apt -rw-r--r-- 1 root root 1895 Дек 30 2012 bash.bashrc -rw-r--r-- 1 root root 45 Июн 17 2012 bash_completion drwxr-xr-x 2 root root 4096 Июн 27 2014 bash_completion.d ... -rw-r--r-- 1 root root 12 Июн 27 2014 timezone -rw-r--r-- 1 root root 1552 Окт 19 2012 trafshow -rw-r--r-- 1 root root 1260 Май 30 2008 ucf.conf drwxr-xr-x 4 root root 4096 Июн 27 2014 udev drwxr-xr-x 3 root root 4096 Июн 27 2014 ufw drwxr-xr-x 2 root root 4096 Июн 27 2014 vim drwxr-xr-x 2 root root 4096 Июн 27 2014 w3m -rw-r--r-- 1 root root 4496 Фев 1 2014 wgetrc drwxr-xr-x 3 root root 4096 Июн 27 2014 X11 drwxr-xr-x 2 root root 4096 Июн 27 2014 xml |
|
#chfn ivan
Изменение информации о пользователе ivan
Введите новое значение или нажмите ENTER для выбора значения по умолчанию
Полное имя []: Ivan Ivanov
Номер комнаты []: 9D
Рабочий телефон []: 111
Домашний телефон []: 123 123 123
Другое []:
|
|
#cat /etc/passwd
root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/bin/sh bin:x:2:2:bin:/bin:/bin/sh sys:x:3:3:sys:/dev:/bin/sh sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/bin/sh man:x:6:12:man:/var/cache/man:/bin/sh lp:x:7:7:lp:/var/spool/lpd:/bin/sh mail:x:8:8:mail:/var/mail:/bin/sh news:x:9:9:news:/var/spool/news:/bin/sh ... irc:x:39:39:ircd:/var/run/ircd:/bin/sh gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh nobody:x:65534:65534:nobody:/nonexistent:/bin/sh libuuid:x:100:101::/var/lib/libuuid:/bin/sh Debian-exim:x:101:103::/var/spool/exim4:/bin/false user:x:1000:1000:user,,,:/home/user:/bin/bash sshd:x:102:65534::/var/run/sshd:/usr/sbin/nologin ivan:x:1001:1001:Ivan Ivanov,9D,111,123 123 123:/home/ivan:/bin/bash petr:x:1002:1002::/home/petr:/bin/bash anna:x:1003:1003::/home/anna:/bin/bash |
|
#finger ivan
Login: ivan Name: Ivan Ivanov Directory: /home/ivan Shell: /bin/bash Office: 9D, 111 Home Phone: 123 123 123 Last login Wed Mar 29 15:45 (EEST) on pts/8 from 192.168.16.154 No mail. No Plan. |
|
#cat /etc/shadow
root:$6$ppY7xZxX$CnutMU4XxetHko6DW5K/ckfiA6CFeC0cbV/d6rrWE6F5iszqxAaQTwekH3.vBTQPNCakvqusvPcBecndLcbX8.:16248:0:99999:7::: daemon:*:16248:0:99999:7::: bin:*:16248:0:99999:7::: sys:*:16248:0:99999:7::: sync:*:16248:0:99999:7::: games:*:16248:0:99999:7::: man:*:16248:0:99999:7::: lp:*:16248:0:99999:7::: mail:*:16248:0:99999:7::: news:*:16248:0:99999:7::: ... irc:*:16248:0:99999:7::: gnats:*:16248:0:99999:7::: nobody:*:16248:0:99999:7::: libuuid:!:16248:0:99999:7::: Debian-exim:!:16248:0:99999:7::: user:$6$CkJHVC8E$ykTJUix/7qmcPBJgqnJtCHlWhYfEaImqXcQyeRrwYm6Xi4KaZSfb4FB20ocZ/VlrQzTR2wiEobMxT/OM/FXgd0:16248:0:99999:7::: sshd:*:16248:0:99999:7::: ivan:$6$7U2LEQ1T$JQXvtkdtcKRK4odSzRuJSYvJmq.ztTRGvquROzbKQDSXFolKEMowGL69kbt4wvzo7AOLxUPeFDpqlJJodXgHg0:17252:0:99999:7::: petr:$6$qgm7uKhh$O3Pq3Z.lhgBgM.xgEUbbeqAGtFsSlhhCMttP9BS4//EweaepWTGpVcdoQOofAFf9RiVFZg.GEGrJwlQQiFOiH0:17252:0:99999:7::: anna:!:17254:0:99999:7::: |
|
#chage -l
, --lastday ÐÐСÐÑÐ¼ÐµÐ½Ñ Ð¿Ð°ÑолѰмеÑÑÑ] ÐÐÐ
в ÐÐСÐ
, --expiredate ÐÐТÐ_УСТ ÑÑÑановиÑÑ Ð´Ð°ÑÑ Ð¾ÐºÐ¾Ð½ÑÐ°Ð½Ð¸Ñ Ð´ÐµÐ¹ÑÑвиÑ
ÑÑÑÑной запиÑи в ÐÐТÐ_УСТ
-h, --help показаÑÑ Ð´Ð°Ð½Ð½Ð¾Ðµ ÑообÑение и законÑиÑÑ ÑабоÑÑ
-I, --inactive ÐÐÐÐТÐÐÐÐСТЬ ÑÑÑановиÑÑ Ð½ÐµÐ°ÐºÑивноÑÑÑ Ð¿Ð°ÑÐ¾Ð»Ñ Ð¿Ð¾Ñле
ÑÑÑаÑÐµÐ²Ð°Ð½Ð¸Ñ Ð² знаÑение ÐÐÐÐТÐÐÐÐСТЬ
-l, --list показаÑÑ Â«Ð²Ð¾Ð·ÑаÑÑ» ÑÑÑÑной запиÑи
-m, --mindays ÐÐÐ_ÐÐÐÐ ÑÑÑановиÑÑ Ð¼Ð¸Ð½Ð¸Ð¼Ð°Ð»Ñное ÑиÑло дней пеÑед
Ñменой паÑÐ¾Ð»Ñ Ð² ÐÐÐ_ÐÐÐÐ
-M, --maxdays ÐÐÐС_ÐÐÐÐ ÑÑÑановиÑÑ Ð¼Ð°ÐºÑималÑное ÑиÑло дней пеÑед
Ñменой паÑÐ¾Ð»Ñ Ð² ÐÐÐС_ÐÐÐÐ
-R, --root ÐÐТ_CHROOT каÑалог, в коÑоÑÑй вÑполнÑеÑÑÑ chroot
-W, --warndays ÐÐ ÐÐУÐ_ÐÐÐÐ ÑÑÑановиÑÑ ÐºÐ¾Ð»Ð¸ÑеÑÑво дней Ñ Ð²ÑдаÑей
пÑедÑпÑÐµÐ¶Ð´ÐµÐ½Ð¸Ñ Ð² ÐÐ ÐÐУÐ_ÐÐÐÐ
|
|
#chage -l
, --lastday ÐÐСÐÑÐ¼ÐµÐ½Ñ Ð¿Ð°ÑолѰмеÑÑÑ] ÐÐÐ
в ÐÐСÐ
, --expiredate ÐÐТÐ_УСТ ÑÑÑановиÑÑ Ð´Ð°ÑÑ Ð¾ÐºÐ¾Ð½ÑÐ°Ð½Ð¸Ñ Ð´ÐµÐ¹ÑÑвиÑ
ÑÑÑÑной запиÑи в ÐÐТÐ_УСТ
-h, --help показаÑÑ Ð´Ð°Ð½Ð½Ð¾Ðµ ÑообÑение и законÑиÑÑ ÑабоÑÑ
-I, --inactive ÐÐÐÐТÐÐÐÐСТЬ ÑÑÑановиÑÑ Ð½ÐµÐ°ÐºÑивноÑÑÑ Ð¿Ð°ÑÐ¾Ð»Ñ Ð¿Ð¾Ñле
ÑÑÑаÑÐµÐ²Ð°Ð½Ð¸Ñ Ð² знаÑение ÐÐÐÐТÐÐÐÐСТЬ
-l, --list показаÑÑ Â«Ð²Ð¾Ð·ÑаÑÑ» ÑÑÑÑной запиÑи
-m, --mindays ÐÐÐ_ÐÐÐÐ ÑÑÑановиÑÑ Ð¼Ð¸Ð½Ð¸Ð¼Ð°Ð»Ñное ÑиÑло дней пеÑед
Ñменой паÑÐ¾Ð»Ñ Ð² ÐÐÐ_ÐÐÐÐ
-M, --maxdays ÐÐÐС_ÐÐÐÐ ÑÑÑановиÑÑ Ð¼Ð°ÐºÑималÑное ÑиÑло дней пеÑед
Ñменой паÑÐ¾Ð»Ñ Ð² ÐÐÐС_ÐÐÐÐ
-R, --root ÐÐТ_CHROOT каÑалог, в коÑоÑÑй вÑполнÑеÑÑÑ chroot
-W, --warndays ÐÐ ÐÐУÐ_ÐÐÐÐ ÑÑÑановиÑÑ ÐºÐ¾Ð»Ð¸ÑеÑÑво дней Ñ Ð²ÑдаÑей
пÑедÑпÑÐµÐ¶Ð´ÐµÐ½Ð¸Ñ Ð² ÐÐ ÐÐУÐ_ÐÐÐÐ
|
|
#chage -l ivan
Последний раз пароль был изменён : Мар 27, 2017 Срок действия пароля истекает : никогда Пароль будет деактивирован через : никогда Срок действия учётной записи истекает : никогда Минимальное количество дней между сменой пароля : 0 Максимальное количество дней между сменой пароля : 99999 Количество дней с предупреждением перед деактивацией пароля : 7 |
|
#cat /etc/default/useradd
# Default values for useradd(8) # # The SHELL variable specifies the default login shell on your # system. # Similar to DHSELL in adduser. However, we use "sh" here because # useradd is a low level utility and should be as general # as possible SHELL=/bin/sh # # The default group for users ... # EXPIRE= # # The SKEL variable specifies the directory containing "skeletal" user # files; in other words, files such as a sample .profile that will be # copied to the new user's home directory when it is created. # SKEL=/etc/skel # # Defines whether the mail spool should be created while # creating the account # CREATE_MAIL_SPOOL=yes |
|
#cat /etc/login.defs
# # /etc/login.defs - Configuration control definitions for the login package. # # Three items must be defined: MAIL_DIR, ENV_SUPATH, and ENV_PATH. # If unspecified, some arbitrary (and possibly incorrect) value will # be assumed. All other items are optional - if not specified then # the described action or option will be inhibited. # # Comment lines (lines beginning with "#") and blank lines are ignored. # ... # These options are no more handled by shadow. # # # # Shadow utilities will display a warning if they # # still appear. # # # ################################################### # CLOSE_SESSIONS # LOGIN_STRING # NO_PASSWORD_CONSOLE # QMAIL_DIR |
|
#groupadd developers
|
|
#usermod -G developers ivan
|
|
#id ivan
uid=1001(ivan) gid=1001(ivan) группы=1001(ivan),1004(developers) |
|
#gpaswd -a petr developers
l3script: gpaswd: команда не найдена |
|
#gpasswd -a petr developers
Добавление пользователя petr в группу developers |
|
#gpasswd -A anna developers
|
|
#$LANG
l3script: ru_RU.UTF-8: команда не найдена |
|
#LANG+en_US.UTF
l3script: LANG+en_US.UTF: команда не найдена |
|
#LANG=en_US.UTF
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#LANG+ru_RU.UTF-8
l3script: LANG+ru_RU.UTF-8: команда не найдена
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#LANG=en_US.UTF
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#LANG=en_US.UTF
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "en_US.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#LANG=ru_RU.UTF
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "ru_RU.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#cd /opt/
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "ru_UA:ru",
LC_ALL = (unset),
LANG = "ru_RU.UTF"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
|
|
#LANG=ru_RU.UTF-8
|
|
#cd /opt/
|
|
#mkdir public
|
|
#ls -l
итого 4 drwxr-xr-x 2 root root 4096 Мар 30 11:48 public |
|
#chmod o+w public/
|
|
#>public/f1
|
|
#> public/f1
|
|
#chmod +t public/
|
|
#ls -l
итого 4 drwxr-xrwt 2 root root 4096 Мар 30 11:50 public |
|
#> public/f1
|
|
#who
root pts/0 2017-03-30 09:28 (192.168.16.154) user pts/6 2017-03-30 09:28 (192.168.16.154) ivan pts/8 2017-03-30 11:23 (192.168.16.154) |
|
#ls -l /dev/pts/0
crw--w---- 1 root tty 136, 0 Мар 30 12:03 /dev/pts/0 |
|
#ls -l `which write`
lrwxrwxrwx 1 root root 23 Июн 27 2014 /usr/bin/write -> /etc/alternatives/write |
|
#ls -lL `which write`
-rwxr-sr-x 1 root tty 14624 Июн 11 2012 /usr/bin/write |
|
#mkdir project
|
|
#ls -l
итого 8 drwxr-xr-x 2 root root 4096 Мар 30 12:08 project drwxr-xrwt 2 root root 4096 Мар 30 11:52 public |
|
#chgrp developers project
|
|
#chmod 770 project/
|
|
#ls -l
итого 8 drwxrwx--- 2 root developers 4096 Мар 30 12:08 project drwxr-xrwt 2 root root 4096 Мар 30 11:52 public |
|
#chmod g+s project
|
|
#find / -perm -4000 2> /dev/null
/usr/lib/openssh/ssh-keysign /usr/lib/pt_chown /usr/lib/eject/dmcrypt-get-device /usr/bin/passwd /usr/bin/chfn /usr/bin/gpasswd /usr/bin/chsh /usr/bin/newgrp /usr/sbin/exim4 /bin/mount /bin/su /bin/ping6 /bin/umount /bin/ping |
|
#cd..
l3script: cd..: команда не найдена |
|
#cd..
l3script: cd..: команда не найдена |
|
#cd ..
|
|
#cd ..
|
|
#~
l3script: /root: Это каталог |
|
#cd
|
|
#cp ~/mymotd /etc/motd
cp: не удалось выполнить stat для «/root/mymotd»: Нет такого файла или каталога |
|
#ls -l
итого 48 drwxr-xr-x 2 root root 4096 Мар 27 14:14 d1 drwxr-xr-x 3 root root 4096 Мар 28 12:47 d2 -rw-r--r-- 1 root root 36 Мар 28 14:17 err.txt lrwxrwxrwx 1 root root 11 Мар 27 14:57 f2 -> /root/d2/f2 -rw-r--r-- 1 root root 5268 Окт 13 2014 install -rw-r--r-- 1 root root 33 Мар 28 16:37 ip.txt -rw-r--r-- 2 root root 512 Мар 27 14:05 MBR -rw-r--r-- 2 root root 512 Мар 27 14:05 MBR2 -rw-r--r-- 1 root root 986 Мар 28 16:10 passwd -rw-r--r-- 1 root root 5449 Мар 27 17:11 proc.txt -rw-r--r-- 1 root root 0 Мар 28 14:16 ps.txt drwxr-xr-x 2 root root 4096 Мар 29 16:54 scripts |
|
#> mymotd
|
|
#> motd
|
|
#vi motd
--- /tmp/l3-saved-32640.14617.13317 2017-03-30 12:27:11.771133948 +0300 +++ motd 2017-03-30 12:27:28.359174286 +0300 @@ -0,0 +1 @@ +HELLO!!!! |
|
#vi mymotd
--- /tmp/l3-saved-32640.28963.18036 2017-03-30 12:27:40.027131883 +0300 +++ mymotd 2017-03-30 12:27:57.171140448 +0300 @@ -0,0 +1,2 @@ + +Zdarova |
|
#cp ~/mymotd /etc/motd
|
|
#cp ~/mynologin /etc/nologin
|
# Default values for useradd(8) # # The SHELL variable specifies the default login shell on your # system. # Similar to DHSELL in adduser. However, we use "sh" here because # useradd is a low level utility and should be as general # as possible SHELL=/bin/sh # # The default group for users # 100=users on Debian systems # Same as USERS_GID in adduser # This argument is used when the -n flag is specified. # The default behavior (when -n and -g are not specified) is to create a # primary user group with the same name as the user being added to the # system. # GROUP=100 # # The default home directory. Same as DHOME for adduser # HOME=/home # # The number of days after a password expires until the account # is permanently disabled # INACTIVE=-1 # # The default expire date # EXPIRE= # # The SKEL variable specifies the directory containing "skeletal" user # files; in other words, files such as a sample .profile that will be # copied to the new user's home directory when it is created. # SKEL=/etc/skel # # Defines whether the mail spool should be created while # creating the account # CREATE_MAIL_SPOOL=yes
root:x:0: daemon:x:1: bin:x:2: sys:x:3: adm:x:4: tty:x:5: disk:x:6: lp:x:7: mail:x:8: news:x:9: uucp:x:10: man:x:12: proxy:x:13: kmem:x:15: dialout:x:20: fax:x:21: voice:x:22: cdrom:x:24:user floppy:x:25:user tape:x:26: sudo:x:27: audio:x:29:user dip:x:30:user www-data:x:33: backup:x:34: operator:x:37: list:x:38: irc:x:39: src:x:40: gnats:x:41: shadow:x:42: utmp:x:43: video:x:44:user sasl:x:45: plugdev:x:46:user staff:x:50: games:x:60: users:x:100: nogroup:x:65534: libuuid:x:101: crontab:x:102: Debian-exim:x:103: ssh:x:104: user:x:1000: ivan:x:1001: petr:x:1002: anna:x:1003: developers:x:1004:
root:*:: daemon:*:: bin:*:: sys:*:: adm:*:: tty:*:: disk:*:: lp:*:: mail:*:: news:*:: uucp:*:: man:*:: proxy:*:: kmem:*:: dialout:*:: fax:*:: voice:*:: cdrom:*::user floppy:*::user tape:*:: sudo:*:: audio:*::user dip:*::user www-data:*:: backup:*:: operator:*:: list:*:: irc:*:: src:*:: gnats:*:: shadow:*:: utmp:*:: video:*::user sasl:*:: plugdev:*::user staff:*:: games:*:: users:*:: nogroup:*:: libuuid:!:: crontab:!:: Debian-exim:!:: ssh:!:: user:!:: ivan:!:: petr:!:: anna:!:: developers:!::ivan,petr
#
# /etc/login.defs - Configuration control definitions for the login package.
#
# Three items must be defined: MAIL_DIR, ENV_SUPATH, and ENV_PATH.
# If unspecified, some arbitrary (and possibly incorrect) value will
# be assumed. All other items are optional - if not specified then
# the described action or option will be inhibited.
#
# Comment lines (lines beginning with "#") and blank lines are ignored.
#
# Modified for Linux. --marekm
# REQUIRED for useradd/userdel/usermod
# Directory where mailboxes reside, _or_ name of file, relative to the
# home directory. If you _do_ define MAIL_DIR and MAIL_FILE,
# MAIL_DIR takes precedence.
#
# Essentially:
# - MAIL_DIR defines the location of users mail spool files
# (for mbox use) by appending the username to MAIL_DIR as defined
# below.
# - MAIL_FILE defines the location of the users mail spool files as the
# fully-qualified filename obtained by prepending the user home
# directory before $MAIL_FILE
#
# NOTE: This is no more used for setting up users MAIL environment variable
# which is, starting from shadow 4.0.12-1 in Debian, entirely the
# job of the pam_mail PAM modules
# See default PAM configuration files provided for
# login, su, etc.
#
# This is a temporary situation: setting these variables will soon
# move to /etc/default/useradd and the variables will then be
# no more supported
MAIL_DIR /var/mail
#MAIL_FILE .mail
#
# Enable logging and display of /var/log/faillog login failure info.
# This option conflicts with the pam_tally PAM module.
#
FAILLOG_ENAB yes
#
# Enable display of unknown usernames when login failures are recorded.
#
# WARNING: Unknown usernames may become world readable.
# See #290803 and #298773 for details about how this could become a security
# concern
LOG_UNKFAIL_ENAB no
#
# Enable logging of successful logins
#
LOG_OK_LOGINS no
#
# Enable "syslog" logging of su activity - in addition to sulog file logging.
# SYSLOG_SG_ENAB does the same for newgrp and sg.
#
SYSLOG_SU_ENAB yes
SYSLOG_SG_ENAB yes
#
# If defined, all su activity is logged to this file.
#
#SULOG_FILE /var/log/sulog
#
# If defined, file which maps tty line to TERM environment parameter.
# Each line of the file is in a format something like "vt100 tty01".
#
#TTYTYPE_FILE /etc/ttytype
#
# If defined, login failures will be logged here in a utmp format
# last, when invoked as lastb, will read /var/log/btmp, so...
#
FTMP_FILE /var/log/btmp
#
# If defined, the command name to display when running "su -". For
# example, if this is defined as "su" then a "ps" will display the
# command is "-su". If not defined, then "ps" would display the
# name of the shell actually being run, e.g. something like "-sh".
#
SU_NAME su
#
# If defined, file which inhibits all the usual chatter during the login
# sequence. If a full pathname, then hushed mode will be enabled if the
# user's name or shell are found in the file. If not a full pathname, then
# hushed mode will be enabled if the file exists in the user's home directory.
#
HUSHLOGIN_FILE .hushlogin
#HUSHLOGIN_FILE /etc/hushlogins
#
# *REQUIRED* The default PATH settings, for superuser and normal users.
#
# (they are minimal, add the rest in the shell startup files)
ENV_SUPATH PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ENV_PATH PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
#
# Terminal permissions
#
# TTYGROUP Login tty will be assigned this group ownership.
# TTYPERM Login tty will be set to this permission.
#
# If you have a "write" program which is "setgid" to a special group
# which owns the terminals, define TTYGROUP to the group number and
# TTYPERM to 0620. Otherwise leave TTYGROUP commented out and assign
# TTYPERM to either 622 or 600.
#
# In Debian /usr/bin/bsd-write or similar programs are setgid tty
# However, the default and recommended value for TTYPERM is still 0600
# to not allow anyone to write to anyone else console or terminal
# Users can still allow other people to write them by issuing
# the "mesg y" command.
TTYGROUP tty
TTYPERM 0600
#
# Login configuration initializations:
#
# ERASECHAR Terminal ERASE character ('\010' = backspace).
# KILLCHAR Terminal KILL character ('\025' = CTRL/U).
# UMASK Default "umask" value.
#
# The ERASECHAR and KILLCHAR are used only on System V machines.
#
# UMASK is the default umask value for pam_umask and is used by
# useradd and newusers to set the mode of the new home directories.
# 022 is the "historical" value in Debian for UMASK
# 027, or even 077, could be considered better for privacy
# There is no One True Answer here : each sysadmin must make up his/her
# mind.
#
# Prefix these values with "0" to get octal, "0x" to get hexadecimal.
#
ERASECHAR 0177
KILLCHAR 025
UMASK 022
#
# Password aging controls:
#
# PASS_MAX_DAYS Maximum number of days a password may be used.
# PASS_MIN_DAYS Minimum number of days allowed between password changes.
# PASS_WARN_AGE Number of days warning given before a password expires.
#
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 0
PASS_WARN_AGE 7
#
# Min/max values for automatic uid selection in useradd
#
UID_MIN 1000
UID_MAX 60000
# System accounts
#SYS_UID_MIN 100
#SYS_UID_MAX 999
#
# Min/max values for automatic gid selection in groupadd
#
GID_MIN 1000
GID_MAX 60000
# System accounts
#SYS_GID_MIN 100
#SYS_GID_MAX 999
#
# Max number of login retries if password is bad. This will most likely be
# overriden by PAM, since the default pam_unix module has it's own built
# in of 3 retries. However, this is a safe fallback in case you are using
# an authentication module that does not enforce PAM_MAXTRIES.
#
LOGIN_RETRIES 5
#
# Max time in seconds for login
#
LOGIN_TIMEOUT 60
#
# Which fields may be changed by regular users using chfn - use
# any combination of letters "frwh" (full name, room number, work
# phone, home phone). If not defined, no changes are allowed.
# For backward compatibility, "yes" = "rwh" and "no" = "frwh".
#
CHFN_RESTRICT rwh
#
# Should login be allowed if we can't cd to the home directory?
# Default in no.
#
DEFAULT_HOME yes
#
# If defined, this command is run when removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed (passed as the first argument).
#
#USERDEL_CMD /usr/sbin/userdel_local
#
# If set to yes, userdel will remove the user´s group if it contains no
# more members, and useradd will create by default a group with the name
# of the user.
#
# Other former uses of this variable such as setting the umask when
# user==primary group are not used in PAM environments, such as Debian
#
USERGROUPS_ENAB yes
#
# Instead of the real user shell, the program specified by this parameter
# will be launched, although its visible name (argv[0]) will be the shell's.
# The program may do whatever it wants (logging, additional authentification,
# banner, ...) before running the actual shell.
#
# FAKE_SHELL /bin/fakeshell
#
# If defined, either full pathname of a file containing device names or
# a ":" delimited list of device names. Root logins will be allowed only
# upon these devices.
#
# This variable is used by login and su.
#
#CONSOLE /etc/consoles
#CONSOLE console:tty01:tty02:tty03:tty04
#
# List of groups to add to the user's supplementary group set
# when logging in on the cons