[nss_nonlocal.git] / README

This is nss_nonlocal, an nsswitch module that acts as a proxy for other 
nsswitch modules like hesiod, but prevents non-local users from 
potentially gaining local privileges by spoofing local UIDs and GIDs.

To use it, configure /etc/nsswitch.conf as follows:

passwd:         compat nonlocal
passwd_nonlocal: hesiod
group:          compat nonlocal
group_nonlocal: hesiod
Commit	Line	Data
f6903667 AK	1	This is nss_nonlocal, an nsswitch module that acts as a proxy for other
	2	nsswitch modules like hesiod, but prevents non-local users from
	3	potentially gaining local privileges by spoofing local UIDs and GIDs.
	4
	5	To use it, configure /etc/nsswitch.conf as follows:
	6
	7	passwd: compat nonlocal
	8	passwd_nonlocal: hesiod
	9	group: compat nonlocal
	10	group_nonlocal: hesiod