1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
#
# HOW LONG TO SLEEP BETWEEN CHECKS (in seconds):
#
sleep 120
#
# NUMBER OF SECONDS TO ALLOW FOR IDLE WARNING BEFORE LOGOUT:
#
warn 100
#
# NUMBER OF MINUTES TO ALLOW FOR IDLE/MULTIPLE/SESSION TIME FOR
# TERMINALS OWNED BY THE PERSON CURRENTLY LOGGED IN ON CONSOLE:
#
# If these are not set at all, or are set to 'normal', then normal
# idle logouts, multiple login logouts, and session limit logouts
# will be in effect. If set to OFF, then idle logouts, multiple
# login logouts, and session limit logouts will be disabled for
# these terminals. If they are set, they override the 'timeout',
# 'session', and 'multiples' commands for these terminals.
#
conswins idle off
conswins multiple off
conswins session off
#
# THRESHOLDS FOR MULTIPLE LOGINS AND SESSIONS:
#
# 64 users must be logged on before multiple login checks
threshold multiple 64
# 10 sessions amongst all users must be active before idled
# will be active for session limits
threshold session 10
#
# SPECIFY MULTIPLE LOGIN REMOVAL BEHAVIOR
#
# Set to -1 for proportional logouts, being the floor of
# the threshold for multiple divided by the number of different
# users logged on.
# Set to some other number to specify that each user should
# be able to keep that many tty's.
multiples -1
#
# IDLE METHOD DETERMINATION:
#
# Set to "userinput" requires that user interact with the tty
# to be determined not idle. "inputoutput" allows tty output
# to also consider the tty not idle. If not set, idlemethod
# defaults to userinput.
#
# idlemethod inputoutput
#
# TIMEOUT RULES:
#
# Set the console idle timeout to 15 minutes before warning
# the user and killing the main login shell 'warn' time
# seconds later if no action is performed by the user.
# (Killing the login shell has everything else cascade
# afterwards).
# Default idle timeout = 60 minutes for normal users.
# Default idle timeout = 120 minutes for group staff
#
timeout tty console 15
timeout default 30
# timeout group staff 120
# timeout login crider 60
# timeout file /usr/local/lib/someusers 45
# Timeout for users logged in from 'dopey' will be 15 minutes
# timeout host dopey 15
#
# REFUSALS:
#
# Immediately kill any logins by user 'stupid'
# refuse login stupid
# The users listed in the file "idiots" will be refused.
# refuse file idiots
#
#
# SESSION LIMITS:
#
# The number of minutes to refuse users who have been warned/logged
# out due to a session limit. 30 minutes, if uncommented (default 0)
# session refuse 30
# No default session limit (will be set to 2 hours if uncommented)
# session default 120
# Students must not remain logged in for longer than 120 minutes
# session group student 120
#
#
# EXEMPTIONS:
#
exempt tty console session
# exempt group staff all
exempt login root all
# exempt login crider all
# Note that the console stuff does not work under Linux. idled assumes
# that there is only one console which is not true.
exempt tty tty1 all
exempt tty tty2 all
exempt tty tty3 all
exempt tty tty4 all
exempt tty tty5 all
exempt tty tty6 all
exempt tty tty7 all
exempt tty tty8 all
|
