pam_console_apply(8) [redhat man page]

pam_console_appy(8)					   System Administrator's Manual				       pam_console_appy(8)

NAME

       pam_console_apply - set or revoke permissions for users at the system console

SYNOPSIS

       pam_console_apply [-r]

DESCRIPTION

       pam_console_apply sets or resets permissions on devices in the same manner as pam_console.
       If  /var/run/console.lock  exists,  pam_console_apply  will grant permissions to the user listed therein.  If the lock file does not exist,
       permissions are reset to those listed in /etc/security/console.perms, which should be configured to set permissions on devices so that root
       owns them.

ARGUMENTS

       -r     Signals  pam_console_apply to reset permissions.	The default is to set permissions so that the user listed in /var/run/console.lock
	      has access to the devices, and to reset permissions if no such file exists.

FILES

       /var/run/console.lock
       /etc/security/console.perms

SEE ALSO

       pam_console(8)
       console.perms(5)

BUGS

       Let's hope not, but if you find any, please report them via the "Bug Track" link at http://bugzilla.redhat.com/bugzilla/

AUTHOR

       Nalin Dahyabhai <nalin@redhat.com>, using code shamelessly stolen from parts of pam_console.

Red Hat 							     2001/3/6						       pam_console_appy(8)

console.perms(5)					   System Administrator's Manual					  console.perms(5)

NAME

       console.perms - permissions control file for users at the system console

DESCRIPTION

       /etc/security/console.perms  determines	the permissions that will be given to priviledged users of the console at login time, and the per-
       missions to which to revert when the users log out.  It is read by the pam_console module.

       The format is:

       <class>=space-separated list of words

       login-regexp|<login-class> perm dev-glob|<dev-class> 
	       revert-mode revert-owner[.revert-group]

       The revert-mode, revert-owner, and revert-group fields are optional, and default to 0600, root, and root, respectively.

       The words in a class definition are evaluated as globs if they refer to files, but as regular expressions if they apply to a console  defi-
       nition.	Do not mix them.

       Any line can be broken and continued on the next line by using a  character as the last character on the line.

       The login-class class and the login-regexp word are evaluated as regular expressions.  The dev-class and the dev-glob word are evaluated as
       shell-style globs.  If a name given corresponds to a directory, and if it is a mount point listed in /etc/fstab, the device node associated
       with the filesystem mounted at that point will be substituted in its place.

       Classes	are  denoted  by  being contained in < angle bracket > characters; a lack of < angle brackets > indicates that the string is to be
       taken literally as a login-regexp or a dev-glob, depending on its input position.

SEE ALSO

       pam_console(8)
       pam_console_apply(8)
       console.apps(5)

AUTHOR

       Michael K. Johnson <johnsonm@redhat.com>

Red Hat Software						     1999/2/3							  console.perms(5)