LOGIN.CONF(5)             OpenBSD Programmer's Manual            LOGIN.CONF(5)

NAME
     login.conf - login class capability database

SYNOPSIS
     /etc/login.conf

DESCRIPTION
     The login.conf file describes the various attributes of login classes.  A
     login class determines session resource limits and environment setup.  It
     is used by various programs in the system to set up a user's login envi-
     ronment and to enforce local policy and restrictions.  At a future date,
     the login class will also determine what styles of authentication are
     available to a user.

     A special record, ``default'', in /etc/login.conf is used for any user
     without a valid login class in /etc/master.passwd.

CAPABILITIES
     Refer to getcap(3) for a description of the file layout.  All entries in
     the login.conf file are either boolean or use a `=' to separate the capa-
     bility from the value.  The types are described after the capability
     table.

     Name               Type         Default         Description
     coredumpsize       size                         Maximum coredump size
                                                     limit.

     cputime            time                         CPU usage limit.

     datasize           size                         Maximum data size limit.

     expire-warn        time         2w              If the user's account
                                                     will expire within this
                                                     length of time then warn
                                                     the user of this.

     filesize           size                         Maximum file size limit.

     hushlogin          bool         false           Same as having a
                                                     $HOME/.hushlogin file.
                                                     See login(8).

     ignorenologin      bool         false           Not affected by nologin
                                                     files.  See login(8).

     stacksize          size                         Maximum stack size limit.

     maxproc            number                       Maximum number of pro-
                                                     cess.

     memorylocked       size                         Maximum locked in core
                                                     memory size limit.

     memoryuse          size                         Maximum in core memoryuse
                                                     size limit.

     nologin            file                         If the file exists it
                                                     will be displayed and the
                                                     login session will be
                                                     terminated.



     openfiles          number                       Maximum number of open
                                                     files per process.

     password-warn      time         2w              If the user's password
                                                     will expire within this
                                                     length of time then warn
                                                     the user of this.

     path               path         value of _PATH_DEFPATH
                                                     Default search path.  See
                                                     /usr/include/paths.h.

     priority           number                       Initial priority (nice)
                                                     level.

     requirehome        bool         false           Require home directory to
                                                     login.

     shell              program                      Session shell to execute
                                                     rather than the shell
                                                     specified in the password
                                                     file.  The SHELL environ-
                                                     ment variable will con-
                                                     tain the shell specified
                                                     in the password file.

     term               string       su              Default terminal type if
                                                     not able to determine
                                                     from other means.

     umask              number       022             Initial umask.  Should
                                                     always have a leading 0
                                                     to assure octal interpre-
                                                     tation.  See umask(2).

     welcome            file         /etc/motd       File containing welcome
                                                     message.

     The resource limit entries (cputime, filesize, datasize, memoryuse,
     memorylocked, maxproc, and openfiles) actually specify both the maximum
     and current limits (see getrlimit(2)). The current limit is the one nor-
     mally used, although the user is permitted to increase the current limit
     to the maximum limit.  The maximum and current limits may be specified
     individually by appending a -max or -cur to the capability name (e.g.,
     openfiles-max and openfiles-cur).

     OpenBSD 2.8 will never define capabilities which start with x- or X-,
     these are reserved for external use (unless included through contributed
     software).

     The argument types are defined as:

     file       Path name to a text file.

     list       A comma separated list of values.

     number     A number.  A leading 0x implies the number is expressed in
                hexadecimal.  A leading 0 implies the number is expressed in
                octal.  Any other number is treated as decimal.

     path       A space separated list of path names.  If a ~ is the first
                character in the path name, the ~ is expanded to the user's
                home directory.



     program    A path name to program.

     size       A number which expresses a size in bytes.  It may have a
                trailing b to multiply the value by 512, a k to multiply the
                value by 1 K (1024), and a m to multiply the value by 1 M
                (1048576).

     time       A time in seconds.  A time may be expressed as a series of
                numbers which are added together.  Each number may have a
                trailing character to represent time units:

                y    Indicates a number of 365 day years.

                w    Indicates a number of 7 day weeks.

                d    Indicates a number of 24 hour days.

                h    Indicates a number of 60 minute hours.

                m    Indicates a number of 60 second minutes.

                s    Indicates a number of seconds.

                For example, to indicate 1 and 1/2 hours, the following string
                could be used: 1h30m.

SEE ALSO
     getcap(3), login_cap(3), passwd(5), ttys(5), ftpd(8), login(8)

OpenBSD 2.8                    February 23, 1995                             3
