HardenedBSD/etc/nsswitch.conf

#
# nsswitch.conf(5) - name service switch configuration file
# $FreeBSD$
#
group: compat
group_compat: nis
hosts: files dns
netgroup: compat
networks: files
passwd: compat
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`#`
Revert r224760, and enhance the sed patterns from r224659 to comment out the _compat entries in the WITHOUT_NIS case rather then delete them. Approved by: re (kib) 2011-08-10 22:52:02 +02:00			`# nsswitch.conf(5) - name service switch configuration file`
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`# $FreeBSD$`
			`#`
Revert r224760, and enhance the sed patterns from r224659 to comment out the _compat entries in the WITHOUT_NIS case rather then delete them. Approved by: re (kib) 2011-08-10 22:52:02 +02:00			`group: compat`
			`group_compat: nis`
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`hosts: files dns`
Implement an NSS backend for netgroups and add getnetgrent_r(3). This support appears to have been documented in nsswitch.conf(5) for some time. The implementation adds two NSS netgroup providers to libc. The default, compat, provides the behaviour documented in netgroup(5), so this change does not make any user-visible behaviour changes. A files provider is also implemented. innetgr(3) is implemented as an optional NSS method so that providers such as NIS which are able to implement efficient reverse lookup can do so. A fallback implementation is used otherwise. getnetgrent_r(3) is added for convenience and to provide compatibility with glibc and Solaris. With a small patch to net/nss_ldap, it's possible to specify an ldap netgroup provider, allowing one to query nisNetgroupTriple entries. Sponsored by: EMC / Isilon Storage Division 2016-06-09 03:28:44 +02:00			`netgroup: compat`
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`networks: files`
Revert r224760, and enhance the sed patterns from r224659 to comment out the _compat entries in the WITHOUT_NIS case rather then delete them. Approved by: re (kib) 2011-08-10 22:52:02 +02:00			`passwd: compat`
			`passwd_compat: nis`
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`shells: files`
Revert r224760, and enhance the sed patterns from r224659 to comment out the _compat entries in the WITHOUT_NIS case rather then delete them. Approved by: re (kib) 2011-08-10 22:52:02 +02:00			`services: compat`
			`services_compat: nis`
Install /etc/nsswitch.conf statically rather than generating it at boot. Autogeneration of nsswitch.conf doesn't makes sense in 7.0 since it's not permitted to upgrade from a pre-nss release without passing through an intermediate release. Suggested by: brooks 2006-05-03 17:14:47 +02:00			`protocols: files`
			`rpc: files`