1console.handlers(5) System Administrator's Manual console.handlers(5)
2
3
4
6 console.handlers - file specifying handlers of console lock and unlock
7 events
8
10 /etc/security/console.handlers determines which programs will be run
11 when an user obtains the console lock at login time, and when the user
12 loses it on log out. It is read by the pam_console module.
13
14 The format is:
15
16 handler-filename lock|unlock [flag ...]
17
18 Where handler-filename is a name of the executable to be run, lock or
19 unlock specifies on which event it should be run, and flags specify how
20 should pam_console call it.
21
22 Additionally there should be a line which specifies glob patterns of
23 console devices.
24
25 The format of this line is: console-name consoledevs regex [regex ...]
26
27 Where console-name is a name of the console class - currently ignored -
28 and regexes are regular expression patterns which specify the name of
29 the tty device. Only the first such line is consulted.
30
31
33 logfail
34 The pam_console module should log error to the system log if the
35 return value of the handler is not zero or if the handler can
36 not be executed.
37
38 wait The pam_console should wait for the handler to exit before con‐
39 tinuing.
40
41 setuid The handler should be executed with uid/gid of the user which
42 obtained the console lock.
43
44 tty The handler will get a tty name as obtained from PAM as a param‐
45 eter.
46
47 user The handler will get an user name as obtained from PAM as a
48 parameter.
49
50 Anything else will be added directly as a parameter to the handler exe‐
51 cutable.
52
54 pam_console(8)
55
57 Tomas Mraz <tmraz@redhat.com>
58
59
60
61Red Hat 2005/3/18 console.handlers(5)