Updated: 05/18/04

These settings, along with several others, can be configured via the
security defaults configuration file /etc/default/security.

The 'security' file was introduced, undocumented, by patches to 11.00, the
latest iterations being:

  o PHCO_16127 (su(1) cumulative patch)
  o PHCO_24083 (login(1) cumulative patch)
  o PHCO_24390 (libpam and libpam_unix cumulative patch)

The functionality added by these patches is included in 11i.  It is also
fully documented via the security(4) manpage, available online at:

  o <http://docs.hp.com/en/B2355-60103/security.4.html>

The following summarizes in which release each of the 'security' settings
were introduced:

  o ABORT_LOGIN_ON_MISSING_HOMEDIR
    (introduced in 11.00 via PHCO_24083)

  o BOOT_AUTH
    (introduced in 11.23)

  o BOOT_USERS
    (introduced in 11.23)

  o MIN_PASSWORD_LENGTH
    (introduced in 11.00 via PHCO_24390)

  o NOLOGIN
    (introduced in 11.00 via PHCO_24083)

  o NUMBER_OF_LOGINS_ALLOWED
    (introduced in 11.00 via PHCO_24083)

  o PASSWORD_HISTORY_DEPTH
    (introduced in 11.00 via PHCO_24390)

  o PASSWORD_MAXDAYS
    (introduced in 11.22)

  o PASSWORD_MINDAYS
    (introduced in 11.22)

  o PASSWORD_MIN_<type>_CHARS
    (introduced in 11.23)

  o PASSWORD_WARNDAYS
    (introduced in 11.22)

  o SU_DEFAULT_PATH
    (introduced in 11.11)

  o SU_KEEP_ENV_VARS
    (introduced in 11.23)

  o SU_ROOT_GROUP
    (introduced in 11.00 via PHCO_16127)

  o UMASK
    (introduced in 11.22)