1.\" $NetBSD: pam_securetty.8,v 1.2 2004/12/12 08:18:47 christos Exp $ 2.\" Copyright (c) 2001 Mark R V Murray 3.\" All rights reserved. 4.\" Copyright (c) 2002 Networks Associates Technology, Inc. 5.\" All rights reserved. 6.\" 7.\" Portions of this software were developed for the FreeBSD Project by 8.\" ThinkSec AS and NAI Labs, the Security Research Division of Network 9.\" Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 10.\" ("CBOSS"), as part of the DARPA CHATS research program. 11.\" 12.\" Redistribution and use in source and binary forms, with or without 13.\" modification, are permitted provided that the following conditions 14.\" are met: 15.\" 1. Redistributions of source code must retain the above copyright 16.\" notice, this list of conditions and the following disclaimer. 17.\" 2. Redistributions in binary form must reproduce the above copyright 18.\" notice, this list of conditions and the following disclaimer in the 19.\" documentation and/or other materials provided with the distribution. 20.\" 3. The name of the author may not be used to endorse or promote 21.\" products derived from this software without specific prior written 22.\" permission. 23.\" 24.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 25.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 26.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 27.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 28.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 29.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 30.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 31.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 32.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 33.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 34.\" SUCH DAMAGE. 35.\" 36.\" $FreeBSD: src/lib/libpam/modules/pam_securetty/pam_securetty.8,v 1.6 2002/03/14 23:27:58 des Exp $ 37.\" 38.Dd July 8, 2001 39.Dt PAM_SECURETTY 8 40.Os 41.Sh NAME 42.Nm pam_securetty 43.Nd SecureTTY PAM module 44.Sh SYNOPSIS 45.Op Ar service-name 46.Ar module-type 47.Ar control-flag 48.Pa pam_securetty 49.Op Ar options 50.Sh DESCRIPTION 51The SecureTTY service module for PAM, 52.Nm 53provides functionality for only one PAM category: 54account management. 55In terms of the 56.Ar module-type 57parameter, this is the 58.Dq Li account 59feature. 60It also provides null functions for authentication and session 61management. 62.Ss SecureTTY Account Management Module 63The SecureTTY account management component 64.Pq Fn pam_sm_acct_mgmt , 65returns failure if the user is attempting to authenticate as superuser, 66and the process is attached to an insecure TTY. 67In all other cases, the module returns success. 68.Pp 69A TTY is considered secure if it is listed in 70.Pa /etc/ttys 71and has the 72.Dv TTY_SECURE 73flag set. 74.Pp 75The following options may be passed to the authentication module: 76.Bl -tag -width ".Cm no_warn" 77.It Cm debug 78.Xr syslog 3 79debugging information at 80.Dv LOG_DEBUG 81level. 82.It Cm no_warn 83suppress warning messages to the user. 84These messages include 85reasons why the user's 86authentication attempt was declined. 87.El 88.Sh SEE ALSO 89.Xr getttynam 3 , 90.Xr syslog 3 , 91.Xr pam.conf 5 , 92.Xr ttys 5 , 93.Xr pam 8 94