On 07/08/2015 07:16 AM, Carlos O'Donell wrote: > On 06/18/2015 03:22 PM, Michael Kerrisk (man-pages) wrote: >> Hi Carlos, >> >> In this earlier reply, I should have highlighted that there is >> one open question I have about you patch, at the end of the mail >> below. Could you take a look please. > > Certainly. > >>>> +Allow all users with matching local accounts in all hosts in the netgroup except baduser: >>>> +.LP >>>> +.RS 4 >>>> +.PD 0 >>>> +.TP >>>> ++@netgroup -baduser >>>> +.TP >>>> ++@netgroup >>>> +.PD >>>> +.RE >>>> +.TP >>>> +Note: The deny statements must always preceed the allow statements because the file is processed one line at a time. >>> >>> This last explanation feels incomplete. Should it not be something like: >>> >>> The deny statements must always precede the allow statements >>> because the file is processed sequentially until the first >>> matching rule is found. > > Your text is certainly correct and clearer. The processing does stop at > the first match. Okay -- I've made that change to the text. Cheers, Michael -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/ -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
