On 06/18/2015 03:22 PM, Michael Kerrisk (man-pages) wrote:

Hi Carlos,

In this earlier reply, I should have highlighted that there is
one open question I have about you patch, at the end of the mail
below. Could you take a look please.

Certainly.

quoted

quoted

+Allow all users with matching local accounts in all hosts in the netgroup except baduser:
+.LP
+.RS 4
+.PD 0
+.TP
++@netgroup -baduser
+.TP
++@netgroup
+.PD
+.RE
+.TP
+Note: The deny statements must always preceed the allow statements because the file is processed one line at a time.

This last explanation feels incomplete. Should it not be something like:

   The deny statements must always precede the allow statements 
   because the file is processed sequentially until the first
   matching rule is found.

Your text is certainly correct and clearer. The processing does stop at
the first match.

Cheers,
Carlos.

--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html