policy.conf(4)

NAME | SYNOPSIS | DESCRIPTION | EXAMPLES | FILES | SUMMARY OF TRUSTED SOLARIS CHANGES | SEE ALSO

NAME

policy.conf- Configuration file for security policy

SYNOPSIS

/etc/security/policy.conf

DESCRIPTION

The policy.conf file provides the security policy configuration for user-level attributes. Each entry consists of a key/value pair in the form:

---

key=value

---

The key/value pair must appear on a single line, and the key must start the line. Lines starting with # are taken as comments and ignored. Option name comparisons are case-insensitive.

The following keys are defined:

AUTHS_GRANTED

Specifies the default set of authorizations granted to all users. This entry is interpreted by chkauthattr(3SECDB). The value is one or more comma-separated authorizations defined in auth_attr(4).

IDLECMD=logout|lock

Specifies the action to take after the user has been idle for IDLETIME minutes. The default value is lock.

IDLETIME=minutes

Specifies the number of minutes before the specified IDLECMD gets executed. Any integer value between 1 and 120 is valid. The default value is 30 minutes.

LABELVIEW=hidesl|showsl

Specifies whether window labels are visible to the user (showsl), or not visible (hidesl). The default value is showsl.

LOCK_AFTER_RETRIES=yes|no

Specifies whether or not an account is locked after the count of failed logins for a user equals or exceeds the allowed number of retries as defined by RETRIES in /etc/default/login. The default value for users is yes. The default value for roles is no.

PASSWORD=auto|manual

Specifies how the user's password is changed. If auto is specified, the user is given a list of random passwords from which to choose. If manual is specified, the user creates a password. The default value is manual.

PROFS_GRANTED

Specifies the default set of profiles granted to all users. This entry is interpreted by chkauthattr(3SECDB) and getexecuser(3SECDB). The value is one or more comma-separated profiles defined in the prof_attr(4) file.

EXAMPLES

---

Example 1 Defining a key/value pair




AUTHS_GRANTED=com.sun.date

---

FILES

/etc/user_attr

Defines extended user attributes.

/etc/security/auth_attr

Defines authorizations.

/etc/security/prof_attr

Defines profiles.

/etc/security/policy.conf

Defines policy for the system.

SUMMARY OF TRUSTED SOLARIS CHANGES

The IDLECMD, IDLETIME, LABELVIEW, LOCK_AFTER_RETRIES, and PASSWORD keys are added.

SEE ALSO

Trusted Solaris 8 Reference Manual

chkauthattr(3SECDB), prof_attr(4), user_attr(4)

SunOS 5.8 Reference Manual

pfexec(1), getexecuser(3SECDB), auth_attr(4)

Trusted Solaris 8  Last Revised 22 Sep 2000

NAME | SYNOPSIS | DESCRIPTION | EXAMPLES | FILES | SUMMARY OF TRUSTED SOLARIS CHANGES | SEE ALSO