On 06/18/2015 03:22 PM, Michael Kerrisk (man-pages) wrote: > Hi Carlos, > > In this earlier reply, I should have highlighted that there is > one open question I have about you patch, at the end of the mail > below. Could you take a look please. Certainly. >>> +Allow all users with matching local accounts in all hosts in the netgroup except baduser: >>> +.LP >>> +.RS 4 >>> +.PD 0 >>> +.TP >>> ++@netgroup -baduser >>> +.TP >>> ++@netgroup >>> +.PD >>> +.RE >>> +.TP >>> +Note: The deny statements must always preceed the allow statements because the file is processed one line at a time. >> >> This last explanation feels incomplete. Should it not be something like: >> >> The deny statements must always precede the allow statements >> because the file is processed sequentially until the first >> matching rule is found. Your text is certainly correct and clearer. The processing does stop at the first match. Cheers, Carlos. -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
