1pam_console_apply(8)     System Administrator's Manual    pam_console_apply(8)
2
3
4

NAME

6       pam_console_apply  -  set or revoke permissions for users at the system
7       console
8

SYNOPSIS

10       pam_console_apply [-f <fstab file>] [-c <console.perms file>] [-r]  [-t
11       <tty>] [-s] [-d] [<device file> ...]
12

DESCRIPTION

14       pam_console_apply  is  a helper executable which sets or resets permis‐
15       sions on device nodes.
16       If /var/run/console.lock exists, pam_console_apply will  grant  permis‐
17       sions  to  the  user  listed therein.  If the lock file does not exist,
18       permissions are reset according to defaults set in console.perms files,
19       normally  configured  to  set  permissions on devices so that root owns
20       them.
21
22       When initializing its configuration  it  first  parses  the  /etc/secu‐
23       rity/console.perms  file and then it searches for files ending with the
24       .perms suffix in  the  /etc/security/console.perms.d  directory.  These
25       files  are parsed in the lexical order in "C" locale.  Permission rules
26       are appended to a global list, console  and  device  class  definitions
27       override previous definitions of the same class.
28

ARGUMENTS

30       -c     Load other console.perms file than the default one.
31
32       -f     Load other fstab file than the default one (/etc/fstab).
33
34       -r     Signals  pam_console_apply to reset permissions.  The default is
35              to set permissions so that  the  user  listed  in  /var/run/con‐
36              sole.lock has access to the devices, and to reset permissions if
37              no such file exists.
38
39       -t     Use <tty> to match console class in console.perms file. The  de‐
40              fault is tty0.
41
42       -s     Write error messages to the system log instead of stderr.
43
44       -d     Log/display messages useful for debugging.
45
46       The optional <device file> arguments constrain what files should be af‐
47       fected by pam_console_apply. If they aren't specified  permissions  are
48       changed on all files specified in the console.perms file.
49

FILES

51       /var/run/console.lock
52       /etc/security/console.perms
53       /etc/security/console.perms.d/50-default.perms
54

SEE ALSO

56       pam_console(8)
57       console.perms(5)
58

BUGS

60       Let's  hope  not,  but if you find any, please report them via the "Bug
61       Track" link at http://bugzilla.redhat.com/bugzilla/
62

AUTHORS

64       Nalin Dahyabhai <nalin@redhat.com>, using code shamelessly stolen  from
65       parts of pam_console.
66       Support  of  console.perms.d  and other improvements by Tomas Mraz <tm‐
67       raz@redhat.com>.
68
69
70
71Red Hat                            2005/5/2               pam_console_apply(8)
Impressum