source: branches/fc11-dev/server/common/oursrc/nss_nonlocal/README @ 2438

Last change on this file since 2438 was 750, checked in by andersk, 15 years ago
Add nss_nonlocal.
File size: 373 bytes
1This is nss_nonlocal, an nsswitch module that acts as a proxy for other
2nsswitch modules like hesiod, but prevents non-local users from
3potentially gaining local privileges by spoofing local UIDs and GIDs.
5To use it, configure /etc/nsswitch.conf as follows:
7passwd:         compat nonlocal
8passwd_nonlocal: hesiod
9group:          compat nonlocal
10group_nonlocal: hesiod
Note: See TracBrowser for help on using the repository browser.