---
name: "node.perms"
section: "5"
platform: "linux"
package: "ax25-node"
version: "0.3.2-7.4"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/node.perms"
---

# node.perms(5)

LinuxNode permissions file.

## NAME

node.perms - LinuxNode permissions file.

## DESCRIPTION

**Node.perms** file is read at program startup with the knowledge of users username (call), connection type (AX.25, NET/ROM, ROSE, TCP/IP), peers IP address (for TCP/IP) and port name (for AX.25). The first entry matching this information is taken and user is asked for password and given permissions according to it.

The lines within **node.perms** must either be a comment line, which starts with a # in the first column, or a permission entry in the following format, each field being delimited by white space:

username type portname password permissions

The field descriptions are:

- **username**

  This is matched against users username (call) without SSID. An asterisk (\*) matches any username.

- **type**

  This is matched against the type of the connection to user. Possible values for this field are:

  - **\***

    matches any type of connection.

  - **ax25**

    matches users coming in with AX.25.

  - **netrom**

    matches users coming in with NET/ROM.

  - **rose**

    matches users coming in with ROSE.

  - **local**

    matches TCP/IP connections where users host is in "local" network as defined in [node.conf(5)](/node.conf/5.md).

  - **ampr**

    matches TCP/IP connections where users host is in amprnet (44.0.0.0/8).

  - **inet**

    matches TCP/IP connections where users host is neither in "local" network nor in amprnet.

  - **host**

    matches users starting LinuxNode from shell.

- **portname**

  If user is coming in with AX.25 this field is matched against the local port name the user is coming in via. An asterisk (\*) matches any port name.

- **password**

  If the previous tree fields match and this field is not a single asterisk (\*) the user is asked for a password. The password is then matched against this field.

- **permissions**

  This field represents a a bitmask of operations the user is permitted to do. It is a sum of the values listed here:

  - **1**

    permits logging in even if no other permissions are given.

  - **2**

    permits outgoing AX.25 connects.

  - **4**

    permits outgoing NET/ROM connects.

  - **8**

    permits telneting to hosts in the "local" network as defined in [node.conf(5)](/node.conf/5.md).

  - **16**

    permits telneting to hosts in amprnet.

  - **32**

    permits telneting to hosts neither in the "local" network nor in amprnet.

  - **64**

    permits using hidden ports in outgoing AX.25 connections. (See HiddenPorts command in [node.conf(5)](/node.conf/5.md).)

  - **128**

    permits outgoing ROSE connects.

  - **256**

    The no-escape flag. Disables the escape mechanism for this user.

## FILES

/etc/ax25/node.perms

## SEE ALSO

[**node**(8)](/node/8.md), [**node.conf**(5)](/node.conf/5.md), [**axports**(5)](/axports/5.md), [**ax25**(4)](/ax25/4.md).