|
Packit |
7e982e |
README for pam_console
|
|
Packit |
7e982e |
======================
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
NOTE: This software is very powerful. Incautious use could leave your
|
|
Packit |
7e982e |
system open to attack, or difficult to use.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
pam_console is distributed in the hope that it will be useful,
|
|
Packit |
7e982e |
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
7e982e |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
Because pam_console integrates GPL-licensed code, all of pam_console
|
|
Packit |
7e982e |
is licensed only under the GPL, unlike most PAM modules. See the
|
|
Packit |
7e982e |
file COPYING for the license terms under which this software is
|
|
Packit |
7e982e |
licensed.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
(If this software breaks your system, you get to keep all the pieces.)
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
The pam_console module exists to change file permissions when users
|
|
Packit |
7e982e |
log on at the console, and to change them back when they log out of
|
|
Packit |
7e982e |
the console. It also cooperates with the pam_listfile module to
|
|
Packit |
7e982e |
make it possible to allow users who are at the console to run
|
|
Packit |
7e982e |
various programs that would otherwise be restricted to root only.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
The pam_console.8 and pam_console_apply.8 man pages explain this
|
|
Packit |
7e982e |
software in more detail.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
Please note: the current version depends on too many external tools
|
|
Packit |
7e982e |
and libraries, making it big and hard to evaluate for security.
|
|
Packit |
7e982e |
This is only a bootstrap stage; I'll be fixing it later. I'm using
|
|
Packit |
7e982e |
lex/yacc right now so that it is trivial to change the grammar, and
|
|
Packit |
7e982e |
I'm using glib because I didn't want to write my own hashtables
|
|
Packit |
7e982e |
while I was busy thinking about file locking. Don't report those
|
|
Packit |
7e982e |
as bugs, I'll fix them later once I've ironed out the important
|
|
Packit |
7e982e |
details...
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
Michael K. Johnson
|
|
Packit |
7e982e |
Red Hat Software, Inc.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
Additional note: the current version is improved so that the functionality
|
|
Packit |
7e982e |
of changing the ownership and permissions of the devices is split out
|
|
Packit |
7e982e |
of the pam_console.so module to the pam_console_apply executable,
|
|
Packit |
7e982e |
which is called from the pam_console module when the lock is obtained.
|
|
Packit |
7e982e |
Thus the module doesn't depend on the glib.
|
|
Packit |
7e982e |
|
|
Packit |
7e982e |
Copyright 1999, 2005 Red Hat, Inc.
|