The –NOREAD and –NOWRITE options specify exceptions to the –READ and –WRITE options or defaults. The following entry permits reading any file except those files in the /etc directory (and its subdirectories) Remember, these options are prefixes.
READ=/ NOREAD=/etc WRITE=/var/spool/uucppublic
This entry permits writing only to the default /var/spool/uucppublic directory. –NOWRITE works in the same manner as the –NOREAD option. You can use the –NOREAD and –NOWRITE options in both LOGNAME and MACHINE entries.