1¡¢vim /etc/login.defs

ÓʼþÑ¡Ïî

REQUIRED

Directory where mailboxes reside, or name of file, relative to the

home directory. If you do define both, MAIL_DIR takes precedence.

QMAIL_DIR is for Qmail

#

QMAIL_DIR Maildir

MAIL_DIR /var/spool/mail

MAIL_FILE .mail

ÃÜÂë¿ØÖƲßÂÔ

Password aging controls:

#

PASS_MAX_DAYS Maximum number of days a password may be used.

PASS_MIN_DAYS Minimum number of days allowed between password changes.

PASS_MIN_LEN Minimum acceptable password length.

PASS_WARN_AGE Number of days warning given before a password expires.

#
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 0
PASS_MIN_LEN 5
PASS_WARN_AGE 7

UIDÆðÖ¹·¶Î§ÉèÖ㬴˴¦×îСֵ±»ÎÒÐÞ¸ÄΪ5000£¬×î´óֵΪ60000.

#

Min/max values for automatic uid selection in useradd

#
UID_MIN 5000
UID_MAX 60000

System accounts

SYS_UID_MIN 201
SYS_UID_MAX 999

GIDÆðÖ¹·¶Î§ÉèÖ㬴˴¦×îСֵ±»ÎÒÐÞ¸ÄΪ5000£¬×î´óֵΪ60000.

#

Min/max values for automatic gid selection in groupadd

#
GID_MIN 5000
GID_MAX 60000

System accounts

SYS_GID_MIN 201
SYS_GID_MAX 999

ɾ³ýÓû§Ñ¡Ïî

#

If defined, this command is run when removing a user.

It should remove any at/cron/print jobs etc. owned by

the user to be removed (passed as the first argument).

#

USERDEL_CMD /usr/sbin/userdel_local

ÊÇ·ñ´´½¨Óû§Ä¿Â¼

#

If useradd should create home directories for users by default

On RH systems, we do. This option is overridden with the -m flag on

useradd command line.

#
CREATE_HOME yes

umaskÉèÖÃ

The permission mask is initialized to this value. If not specified,

the permission mask will be initialized to 022.

UMASK 077

ÒƳýÓû§Í¬Ê±ÒƳý¸ÃÓû§Ô­À´ËùÔÚ³ýÁËÔ­Óû§Ö®ÍâûÓÐÆäËûûÓгÉÔ±µÄ×é¡£

This enables userdel to remove user groups if no members exist.

#
USERGROUPS_ENAB yes

Use SHA512 to encrypt password.

È«²¿µÄ×¢½â

ÃÜÂë²ßÂÔÏà¹Ø
PASS_MAX_DAYS 90 ¡¡¡¡ # ÃÜÂë×¹ýÆÚÌìÊý
PASS_MIN_DAYS 80 ¡¡¡¡¡¡ # ÃÜÂë×îС¹ýÆÚÌìÊý
PASS_MIN_LEN 10 ¡¡¡¡¡¡¡¡# ÃÜÂë×îС³¤¶È
PASS_WARN_AGE 7 ¡¡¡¡¡¡ # ÃÜÂë¹ýÆÚ¾¯¸æÌìÊý