RSBAC_USERMOD

NAME

DESCRIPTION

-h = this help, -- = no more flags,

-c comment = fullname or comment,

-d dir = homedir of user,

-g group = main / initial Linux group,

-G group1[,group2,...] = add more Linux groups,

-H group1[,group2,...] = remove Linux groups,

-I group1[,group2,...] = set Linux groups,

-p password = password in plaintext,

-P = disable password,

-Q password = encrypted password (from backup),

-s shell = user shell,

-u name = change username,

-n minchange-days = minimum days between password changes,

-x maxchange-days = maximum days between password changes,

-w warnchange-days = warning days before password must be changed,

-f inactive-days = period between password expiry and account disabling,

-e expire-days = days since 1/Jan/1970 when account gets disabled,

-t = set relative time-to-live in secs (role/type comp, admin, assign only)

-T = set absolute time-to-live in secs (role/type comp, admin, assign only)

-D = set relative time-to-live in days (role/type comp, admin, assign only)

-S n = virtual user set n

-N ta = transaction number (default = value of RSBAC_TA, if set, or 0)

***