1pam_console_apply(8)     System Administrator's Manual    pam_console_apply(8)
2
3
4

NAME

6       pam_console_apply  -  set or revoke permissions for users at the system
7       console
8

SYNOPSIS

10       pam_console_apply [-f <fstab file>] [-c <console.perms file>] [-r]  [-t
11       <tty>] [-s] [-d] [<device file> ...]
12

DESCRIPTION

14       pam_console_apply  is  a helper executable which sets or resets permis‐
15       sions on device nodes.
16       If /var/run/console.lock exists, pam_console_apply will  grant  permis‐
17       sions  to  the  user  listed therein.  If the lock file does not exist,
18       permissions are reset according to defaults set in console.perms files,
19       normally  configured  to  set  permissions on devices so that root owns
20       them.
21
22       When initializing its configuration  it  first  parses  the  /etc/secu‐
23       rity/console.perms  file and then it searches for files ending with the
24       .perms suffix in  the  /etc/security/console.perms.d  directory.  These
25       files  are parsed in the lexical order in "C" locale.  Permission rules
26       are appended to a global list, console  and  device  class  definitions
27       override previous definitions of the same class.
28

ARGUMENTS

30       -c     Load other console.perms file than the default one.
31
32       -f     Load other fstab file than the default one (/etc/fstab).
33
34       -r     Signals  pam_console_apply to reset permissions.  The default is
35              to set permissions so that  the  user  listed  in  /var/run/con‐
36              sole.lock has access to the devices, and to reset permissions if
37              no such file exists.
38
39       -t     Use <tty> to match console  class  in  console.perms  file.  The
40              default is tty0.
41
42       -s     Write error messages to the system log instead of stderr.
43
44       -d     Log/display messages useful for debugging.
45
46       The  optional  <device  file>  arguments constrain what files should be
47       affected by pam_console_apply. If they aren't specified permissions are
48       changed on all files specified in the console.perms file.
49

FILES

51       /var/run/console.lock
52       /etc/security/console.perms
53       /etc/security/console.perms.d/50-default.perms
54

SEE ALSO

56       pam_console(8)
57       console.perms(5)
58

BUGS

60       Let's  hope  not,  but if you find any, please report them via the "Bug
61       Track" link at http://bugzilla.redhat.com/bugzilla/
62

AUTHORS

64       Nalin Dahyabhai <nalin@redhat.com>, using code shamelessly stolen  from
65       parts of pam_console.
66       Support  of  console.perms.d  and  other  improvements  by  Tomas  Mraz
67       <tmraz@redhat.com>.
68
69
70
71Red Hat                            2005/5/2               pam_console_apply(8)
Impressum