Figure 2b: Sample passwd file restricting staff netgroup access

root:x:0:1:Super-User:/:/sbin/sh
daemon:x:1:1::/:
.
.
.
-@staff
+:*:0:0:::