NETGROUP(5)
π NETGROUP π
okay so bestie, welcome to netgroup from the NIS Reference Manual, section 5 π this is the girlies' guide to network groups and honestly it's giving permission-checking main character energy β¨
β¨ NAME β¨
netgroup β specify network groups π«Ά
πΈ DESCRIPTION πΈ
so like, the netgroup file defines "netgroups", which are literally sets of (host, user, domain) tuples, and they're used for permission checking when you're doing remote mounts, remote logins and remote shells. periodt π
every single line in the file is a netgroup name followed by a list of members, and a member is either another netgroup name, or a triple:
(host, user, domain)
where host, user, and domain are character strings for the corresponding components. ngl, any of the three fields can be empty, and when it is, that specifies a "wildcard" π¦ or it can be the string - to specify "no valid value". and here's the tea: the domain field must either be the local domain name or empty for the netgroup entry to be used at all. this field does not limit the netgroup or provide security, bestie, it's not that kind of field π the domain field refers to the domain in which the triple is valid, not the domain containing the trusted host.
a gateway machine should be listed under all possible hostnames by which it may be recognized π
gateway (server, , ) (server-sn, , ) (server-bb, , )
and the getnetgrent(3) function should normally be used to access the netgroup database, iykyk π
π FILES π
/etc/netgroup
π SEE ALSO π
π WARNINGS π
not me having to say this but the triple(,,domain)allows all users and machines trusted access, and has the same effect as the triple(,,). that is highkey a lot of trust to be handing out π use thehostanduserfields of the triple to restrict the access correctly to a specific set of members. protect your peace fr fr π₯
π AUTHOR π
Thorsten Kukuk <kukuk@thkukuk.de>
and that's the whole vibe, bestie π this was NIS Reference Manual, dated 04/06/2006, serving NETGROUP(5) realness β¨ slay, go read your netgroup file responsibly πΈπ¦π
π¦ where this page comes from
- debian bookworm: ypserv 4.2-1+b2 Β· GPL-2.0-only
- debian trixie: ypserv 4.2-2+b2 Β· GPL-2.0-only
- ubuntu jammy: ypserv 4.1-2 Β· GPL-2.0-only
- ubuntu noble: ypserv 4.2-2build2 Β· GPL-2.0-only
- ubuntu questing: ypserv 4.2-2build2
- ubuntu resolute: ypserv 4.2-3 Β· GPL-2.0-only
- ubuntu stonking: ypserv 4.2-3build1 Β· GPL-2.0-only
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms