Trusted Extensions Configuration and Administration

Exit Print View

Updated: July 2014
 
 

policy.conf File Defaults in Trusted Extensions

The /etc/security/policy.conf file contains the default security values for the system. Trusted Extensions adds two keywords to this file. To change the values system-wide, add these keyword=value pairs to the file. The following table shows the default values and the possible values for these keywords.

Table 10-1  Trusted Extensions Security Defaults in policy.conf File
Keyword
Default Value
Possible Values
Notes
IDLECMD
LOCK
LOCK | LOGOUT
Applies to the login user.
IDLETIME
15
0 to 120 minutes
Applies to the login user.

The authorizations and rights profiles that are defined in the policy.conf file are in addition to any authorizations and profiles that are assigned to individual accounts. For the other fields, the individual user's value overrides the system value.

Planning User Security in Trusted Extensions includes a table of every policy.conf keyword. See also the policy.conf(4) man page.