[Bug 403952] Re: access.conf should mention that it allows side-comments

Steve Langasek steve.langasek at canonical.com
Wed Jun 8 17:03:59 UTC 2011


It's not documented that access.conf allows end-of-line comments because
it *doesn't*; any use of '# text' at the end of the line is in fact
parsed *as part of the 'origins' field*.  This means that trying to
comment out an origin this way does *not* prevent that origin from being
used to get access. E.g.,

       + : root : 192.168.200.1 192.168.200.4 192.168.200.9 # we don't
trust 192.168.200.5

would, in fact, allow access from 192.168.200.5 (as well as any
hypothetical hosts named "we", "don't", "trust", and "#").

Closing this as invalid, therefore, as the documentation is entirely
accurate.

** Changed in: pam (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/403952

Title:
  access.conf should mention that it allows side-comments

Status in “pam” package in Ubuntu:
  Invalid

Bug description:
  /etc/security/access.conf allows comments on the same line, and this
  should be documented in the template (pre-installed?) file and the
  manual.

  Example:

  # This is OK.
  - : nena : ALL # This is OK, too.




More information about the foundations-bugs mailing list