# this is an example configuration file for the pam_time module. Its syntax

[0] Fix | Delete

# was initially based heavily on that of the shadow package (shadow-960129).

[1] Fix | Delete

#

[2] Fix | Delete

# the syntax of the lines is as follows:

[3] Fix | Delete

#

[4] Fix | Delete

# services;ttys;users;times

[5] Fix | Delete

#

[6] Fix | Delete

# white space is ignored and lines maybe extended with '\\n' (escaped

[7] Fix | Delete

# newlines). As should be clear from reading these comments,

[8] Fix | Delete

# text following a '#' is ignored to the end of the line.

[9] Fix | Delete

#

[10] Fix | Delete

# the combination of individual users/terminals etc is a logic list

[11] Fix | Delete

# namely individual tokens that are optionally prefixed with '!' (logical

[12] Fix | Delete

# not) and separated with '&' (logical and) and '|' (logical or).

[13] Fix | Delete

#

[14] Fix | Delete

# services

[15] Fix | Delete

# is a logic list of PAM service names that the rule applies to.

[16] Fix | Delete

#

[17] Fix | Delete

# ttys

[18] Fix | Delete

# is a logic list of terminal names that this rule applies to.

[19] Fix | Delete

#

[20] Fix | Delete

# users

[21] Fix | Delete

# is a logic list of users or a netgroup of users to whom this

[22] Fix | Delete

# rule applies.

[23] Fix | Delete

#

[24] Fix | Delete

# NB. For these items the simple wildcard '*' may be used only once.

[25] Fix | Delete

#

[26] Fix | Delete

# times

[27] Fix | Delete

# the format here is a logic list of day/time-range

[28] Fix | Delete

# entries the days are specified by a sequence of two character

[29] Fix | Delete

# entries, MoTuSa for example is Monday Tuesday and Saturday. Note

[30] Fix | Delete

# that repeated days are unset MoMo = no day, and MoWk = all weekdays

[31] Fix | Delete

# bar Monday. The two character combinations accepted are

[32] Fix | Delete

#

[33] Fix | Delete

# Mo Tu We Th Fr Sa Su Wk Wd Al

[34] Fix | Delete

#

[35] Fix | Delete

# the last two being week-end days and all 7 days of the week

[36] Fix | Delete

# respectively. As a final example, AlFr means all days except Friday.

[37] Fix | Delete

#

[38] Fix | Delete

# each day/time-range can be prefixed with a '!' to indicate "anything

[39] Fix | Delete

# but"

[40] Fix | Delete

#

[41] Fix | Delete

# The time-range part is two 24-hour times HHMM separated by a hyphen

[42] Fix | Delete

# indicating the start and finish time (if the finish time is smaller

[43] Fix | Delete

# than the start time it is deemed to apply on the following day).

[44] Fix | Delete

#

[45] Fix | Delete

# for a rule to be active, ALL of service+ttys+users must be satisfied

[46] Fix | Delete

# by the applying process.

[47] Fix | Delete

#

[48] Fix | Delete

[49] Fix | Delete

#

[50] Fix | Delete

# Here is a simple example: running blank on tty* (any ttyXXX device),

[51] Fix | Delete

# the users 'you' and 'me' are denied service all of the time

[52] Fix | Delete

#

[53] Fix | Delete

[54] Fix | Delete

#blank;tty* & !ttyp*;you|me;!Al0000-2400

[55] Fix | Delete

[56] Fix | Delete

# Another silly example, user 'root' is denied xsh access

[57] Fix | Delete

# from pseudo terminals at the weekend and on mondays.

[58] Fix | Delete

[59] Fix | Delete

#xsh;ttyp*;root;!WdMo0000-2400

[60] Fix | Delete

[61] Fix | Delete

#

[62] Fix | Delete

# End of example file.

[63] Fix | Delete

#

[64] Fix | Delete

[65] Fix | Delete