d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5adb21a681
freebsd-dev/lib/libpam/modules/pam_securetty/pam_securetty.8

93 lines
3.1 KiB
Groff
Raw Normal View History

Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.\" Copyright (c) 2001 Mark R V Murray
.\" All rights reserved.
NAI DBA update.
2002-03-14 23:27:59 +00:00
.\" Copyright (c) 2002 Networks Associates Technology, Inc.
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
.\" All rights reserved.
.\"
.\" Portions of this software were developed for the FreeBSD Project by
.\" ThinkSec AS and NAI Labs, the Security Research Division of Network
.\" Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035
.\" ("CBOSS"), as part of the DARPA CHATS research program.
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.\"
.\" Redistribution and use in source and binary forms, with or without
.\" modification, are permitted provided that the following conditions
.\" are met:
.\" 1. Redistributions of source code must retain the above copyright
.\" notice, this list of conditions and the following disclaimer.
.\" 2. Redistributions in binary form must reproduce the above copyright
.\" notice, this list of conditions and the following disclaimer in the
.\" documentation and/or other materials provided with the distribution.
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
.\" 3. The name of the author may not be used to endorse or promote
.\" products derived from this software without specific prior written
.\" permission.
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.\"
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
.\" $FreeBSD$
.\"
.Dd July 8, 2001
.Dt PAM_SECURETTY 8
.Os
.Sh NAME
.Nm pam_securetty
.Nd SecureTTY PAM module
.Sh SYNOPSIS
.Op Ar service-name
.Ar module-type
.Ar control-flag
.Pa pam_securetty
.Op Ar options
.Sh DESCRIPTION
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
The SecureTTY service module for PAM,
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Nm
provides functionality for only one PAM category:
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
account management.
mdoc(7) police: fixed markup, a little bit.
2001-07-11 08:36:26 +00:00
In terms of the
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Ar module-type
parameter, this is the
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
.Dq Li account
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
feature.
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
It also provides null functions for authentication and session
management.
.Ss SecureTTY Account Management Module
The SecureTTY account management component
.Pq Fn pam_sm_acct_mgmt ,
returns failure if the user is attempting to authenticate as superuser,
and the process is attached to an insecure TTY.
In all other cases, the module returns success.
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Pp
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
A TTY is considered secure if it is listed in
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Pa /etc/ttys
Move the code from pam_sm_authenticate() to pam_sm_acct_mgmt(). Simplify it a little and try to make it more resilient to various possible failure conditions. Change the man page accordingly, and take advantage of this opportunity to simplify its language. Sponsored by: DARPA, NAI Labs
2002-01-30 19:03:16 +00:00
and has the
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Dv TTY_SECURE
flag set.
.Pp
The following options may be passed to the authentication module:
Document the no_warn option.
2001-08-15 20:05:33 +00:00
.Bl -tag -width ".Cm no_warn"
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.It Cm debug
.Xr syslog 3
debugging information at
.Dv LOG_DEBUG
level.
Document the no_warn option.
2001-08-15 20:05:33 +00:00
.It Cm no_warn
suppress warning messages to the user.
These messages include
reasons why the user's
authentication attempt was declined.
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.El
.Sh SEE ALSO
mdoc(7) police: fixed markup, a little bit.
2001-07-11 08:36:26 +00:00
.Xr getttynam 3 ,
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Xr syslog 3 ,
.Xr pam.conf 5 ,
mdoc(7) police: fixed markup, a little bit.
2001-07-11 08:36:26 +00:00
.Xr ttys 5 ,
Clean up (and in some cases write) the PAM mudules, using o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
.Xr pam 8
Reference in New Issue Copy Permalink