版本:Linux moban 2.6.32-431.el6.x86_64 #1 SMP Fri Nov 22 03:15:09 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux;
系统:centos 6.5
大概内容是创建用户帐号时的文件控制;注意:对root用户是没有作用的;
[root@moban ~]# cat /etc/login.defs
#
# Please note that the parameters in this configuration file control the
# behavior of the tools from the shadow-utils component. None of these
# tools uses the PAM mechanism, and the utilities that use PAM (such as the
# passwd command) should therefore be configured elsewhere. Refer to
# /etc/pam.d/system-auth for more information.
#
总体意思:请注意控制配置文件的参数;passwd命令在其它地方;参照/etc/pam.d/system-auth
# *REQUIRED*
# Directory where mailboxes reside, _or_ name of file, relative to the
# home directory. If you _do_ define both, MAIL_DIR takes precedence.
# QMAIL_DIR is for Qmail
#
#QMAIL_DIR Maildir
MAIL_DIR /var/spool/mail 当你在创建用户的同时,在/var/spool/mail目录下创建mail文件;
#MAIL_FILE .mail
# Password aging controls:
#
# PASS_MAX_DAYS Maximum number of days a password may be used.
# PASS_MIN_DAYS Minimum number of days allowed between password changes.
# PASS_MIN_LEN Minimum acceptable password length.
# PASS_WARN_AGE Number of days warning given before a password expires.
#
PASS_MAX_DAYS 99999 用户密码的过期天数;
PASS_MIN_DAYS 0 需要修改密码的最小天数;
PASS_MIN_LEN 5 密码的最小长度;
PASS_WARN_AGE 7 密码过期提前的警告天数;
#
# Min/max values for automatic uid selection in useradd
#
UID_MIN 500
UID_MAX 60000
此处是创建用户的最小uid和最大uid的范围,当然是你不指定的前提下!!
#
# Min/max values for automatic gid selection in groupadd
#
GID_MIN 500
GID_MAX 60000
此处是gid
#
# If defined, this command is run when removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed (passed as the first argument).
#
#USERDEL_CMD /usr/sbin/userdel_local
此处我认为是当删除一个用户时,应解除对他的占用?
别处看的是#当删除用户的时候执行的脚本
#
# If useradd should create home directories for users by default
# On RH systems, we do. This option is overridden with the -m flag on
# useradd command line.
#
CREATE_HOME yes
创建用户的时候是否创建用户的家目录;此处是yes;
# The permission mask is initialized to this value. If not specified,
# the permission mask will be initialized to 022.
UMASK 077
家目录的权限初始值
查看用户家目录:drwx------ 3 kong kong 4096 8月 16 11:27 kong
# This enables userdel to remove user groups if no members exist.
#
USERGROUPS_ENAB yes
当一个组只有一个用户存在的时候,删除用户同时删除组;
# Use SHA512 to encrypt password.
ENCRYPT_METHOD SHA512
指定的passwd的加密方法;
[root@moban ~]#