Section 5: file formats
Sudo 1.9.9 Name sudoers_timestamp – Sudoers Time Stamp Format Description The sudoers plugin uses per-user time stamp files for credential caching. Once a user has been authenticated, they may use sudo without a password for a short period of time Po 15 minutes unless overridden by the timestamp_timeout option Pc . By default, sudoers uses…
Sudo 1.9.9 Name sudoers – default sudo security policy plugin Description The sudoers policy plugin determines a user’s sudo privileges. It is the default sudo policy plugin. The policy is driven by the /etc/sudoers file or, optionally, in LDAP. The policy format is described in detail in the Sx SUDOERS FILE FORMAT section. For information…
sudoers.ldap – sudo LDAP configuration Description In addition to the standard sudoers file, sudo may be configured via LDAP. This can be especially useful for synchronizing sudoers in a large, distributed environment. Using LDAP for sudoers has several benefits: sudo no longer needs to read sudoers in its entirety. When LDAP is used, there are…
Sudo 1.9.9 Name sudo_logsrvd.conf – configuration for sudo_logsrvd Description The sudo_logsrvd.conf file is used to configure the sudo_logsrvd log server. It uses an INI-style format made up of sections in square brackets and “key = value” pairs specific to each section below the section name. Depending on the key, values may be integers, booleans, or…
Sudo 1.9.9 Name sudo_logsrv.proto – Sudo log server protocol Description Starting with version 1.9.0, sudo supports sending event and I/O logs to a log server. The protocol used is written in Google’s Protocol Buffers domain specific language. The Sx EXAMPLES section includes a complete description of the protocol in Protocol Buffers format. Because there is…
sudo.conf – configuration for sudo front end Description The sudo.conf file is used to configure the sudo front end. It specifies the security policy and I/O logging plugins, debug flags as well as plugin-agnostic path names and settings. The sudo.conf file supports the following directives, described in detail below. Plugin a security policy or I/O…
Sudo 1.9.9 Name sudo.conf – configuration for sudo front-end Description The sudo.conf file is used to configure the sudo front-end. It is used to configure sudo plugins, plugin-agnostic path names, debug flags, and other settings. The sudo.conf file supports the following directives, described in detail below. Plugin an approval, audit, I/O logging, or security policy…
subuid – the subordinate uid file Description Each line in /etc/subuid contains a user name and a range of subordinate user ids that user is allowed to use. This is specified with three fields delimited by colons (“:”). These fields are: • login name or UID • numerical subordinate user ID • numerical subordinate user…
subscriptions – Default recommended subscriptions Description The pathetc/subscriptions file contains a list of newsgroups that is returned by the NNTP command LIST SUBSCRIPTIONS. Clients that support this command usually send it the first time they connect to a new news server. They use the returned list to initialize the list of subscribed newsgroups. The subscriptions…
subscriptions.conf – subscription configuration file for cups Description The subscriptions.conf file defines the local event notification subscriptions that are active. It is normally located in the /etc/cups directory and is maintained by the cupsd(8) program. This file is not intended to be edited or managed manually. Notes The name, location, and format of this file…
subgid – the subordinate gid file Description Each line in /etc/subgid contains a user name and a range of subordinate group ids that user is allowed to use. This is specified with three fields delimited by colons (“:”). These fields are: • login name or UID • numerical subordinate group ID • numerical subordinate group…
/etc/apparmor/subdomain.conf – configuration file for fine-tuning the behavior of the AppArmor security tool. Description The AppArmor security tool can be configured to have certain default behaviors based on configuration options set in subdomain.conf. There are two variables that can be set in subdomain.conf: SUBDOMAIN_PATH, and SUBDOMAIN_MODULE_PANIC. SUBDOMAIN_PATH This variable accepts a string (path), and is…
swanctl.conf – swanctl configuration file Description swanctl.conf is the configuration file used by the swanctl(8) tool to load configurations and credentials into the strongSwan IKE daemon. For a description of the basic file syntax, including how to split the configuration in multiple files by including other files, refer to strongswan.conf(5). Time Formats For all options…
ipsec.secrets – secrets for IKE/IPsec authentication Description The file ipsec.secrets holds a table of secrets. These secrets are used by the strongSwan Internet Key Exchange (IKE) daemons pluto (IKEv1) and charon (IKEv2) to authenticate other hosts. It is vital that these secrets be protected. The file should be owned by the super-user, and its permissions…
ipsec.conf – IPsec configuration and connections Description The optional ipsec.conf file specifies most configuration and control information for the strongSwan IPsec subsystem. The major exception is secrets for authentication; see ipsec.secrets(5). Its contents are not security-sensitive. The file is a text file, consisting of one or more sections. White space followed by # followed by…
strongswan.conf – strongSwan configuration file Description While the ipsec.conf(5) configuration file is well suited to define IPsec related configuration parameters, it is not useful for other strongSwan applications to read options from this file. The file is hard to parse and only ipsec starter is capable of doing so. As the number of components of…
strongswan.conf – strongSwan configuration file Description While the ipsec.conf(5) configuration file is well suited to define IPsec related configuration parameters, it is not useful for other strongSwan applications to read options from this file. The file is hard to parse and only ipsec starter is capable of doing so. As the number of components of…
storaged.conf – The storaged configuration file Description The storaged project provides additional functionality via pluggable modules. These plugins can be inserted into the daemon either by D-Bus call org.storaged.Storaged.Manager.EnableModules() or by running the storaged daemon with –force-load-modules command line option. It is also possible to configure the modules loading behavior via the configuration file placed…
storage.conf – Configuration file for storage manager Description The file pathetc/storage.conf contains the rules to be used in assigning articles to different storage methods. These rules determine where incoming articles will be stored. The storage manager is a unified interface between INN and a variety of different storage methods, allowing the news administrator to choose…
storage.conf – Configuration file for storage manager Description The file pathetc/storage.conf contains the rules to be used in assigning articles to different storage methods. These rules determine where incoming articles will be stored. The storage manager is a unified interface between INN and a variety of different storage methods, allowing the news administrator to choose…