HP-UX Reference (11i v2 04/09) - 4 File Formats (vol 8)

security(4) security(4)

SU_ROOT_GROUP=

group_name

The root group name is set to the speciﬁed symbolic group name. The

su command

enforces the restriction that a non-superuser must be a member of the speciﬁed root

group to be allowed to

su to root. This does not alter password checking.

Default value: If this parameter is not deﬁned or if it is commented out, there is no default

value. In this case, a non-superuser is allowed to

su to root without being bound by root group

restrictions.

UMASK This parameter controls umask(2) of all sessions initiated via pam_unix (5) and/or

pam_hpsec (5). It accepts values from 0 to 0777 as an unsigned octal integer (leading zero can

be omitted).

UMASK=default_umask

The umask is set or restricted further with the value of default_umask. For trusted sys-

tems, the

umask is also restricted so as not to exceed

SEC_DEFAULT_MODE

deﬁned in

/usr/include/hpsecurity.h

Default value:

UMASK=0

Notes

Use the functions deﬁned in secdef (3) to read the values of the parameters deﬁned in this ﬁle.

AUTHOR

The

security ﬁle was developed by HP.

FILES

/etc/default/security