{"id":2660,"date":"2022-12-20T15:16:58","date_gmt":"2022-12-20T18:16:58","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/pam_console_apply-man8\/"},"modified":"2022-12-20T15:16:58","modified_gmt":"2022-12-20T18:16:58","slug":"pam_console_apply-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/pam_console_apply-man8\/","title":{"rendered":"pam_console_apply (man8)"},"content":{"rendered":"

pam_console_apply<\/h1>\n

NAME<\/a>
SYNOPSIS<\/a>
DESCRIPTION<\/a>
ARGUMENTS<\/a>
FILES<\/a>
SEE ALSO<\/a>
BUGS<\/a>
AUTHORS<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

pam_console_apply \u2212 set or revoke permissions for users at the system console<\/p>\n

SYNOPSIS <\/a> <\/h2>\n

pam_console_apply<\/b> [-f ] [-c ] [-r] [-t ] [-s] [-d] [ …]<\/p>\n

DESCRIPTION <\/a> <\/h2>\n

pam_console_apply<\/b> is a helper executable which sets or resets permissions on device nodes.
If \/var\/run\/console.lock<\/i> exists, pam_console_apply<\/b> will grant permissions to the user listed therein. If the lock file does not exist, permissions are reset according to defaults set in console.perms<\/i> files, normally configured to set permissions on devices so that root<\/b> owns them.<\/p>\n

When initializing its configuration it first parses the \/etc\/security\/console.perms<\/i> file and then it searches for files ending with the .perms<\/i> suffix in the \/etc\/security\/console.perms.d<\/i> directory. These files are parsed in the lexical order in “C” locale. Permission rules are appended to a global list, console and device class definitions override previous definitions of the same class.<\/p>\n

ARGUMENTS <\/a> <\/h2>\n\n\n\n\n\n\n\n
<\/td>\n\n

-c<\/p>\n<\/td>\n

<\/td>\n\n

Load other console.perms file than the default one.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

-f<\/p>\n<\/td>\n

<\/td>\n\n

Load other fstab file than the default one (\/etc\/fstab<\/i>).<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

-r<\/p>\n<\/td>\n

<\/td>\n\n

Signals pam_console_apply<\/b> to reset permissions. The default is to set permissions so that the user listed in \/var\/run\/console.lock<\/i> has access to the devices, and to reset permissions if no such file exists.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

-t<\/p>\n<\/td>\n

<\/td>\n\n

Use to match console class in console.perms file. The default is tty0.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

-s<\/p>\n<\/td>\n

<\/td>\n\n

Write error messages to the system log instead of stderr.<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

-d<\/p>\n<\/td>\n

<\/td>\n\n

Log\/display messages useful for debugging.<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

The optional arguments constrain what files should be affected by pam_console_apply<\/b>. If they aren\u2019t specified permissions are changed on all files specified in the console.perms<\/i> file.<\/p>\n

FILES <\/a> <\/h2>\n

\/var\/run\/console.lock
\/etc\/security\/console.perms
\/etc\/security\/console.perms.d\/50-default.perms<\/i><\/p>\n

SEE ALSO <\/a> <\/h2>\n

pam_console(8)
console.perms(5)<\/b><\/i><\/p>\n

BUGS <\/a> <\/h2>\n

Let\u2019s hope not, but if you find any, please report them via the “Bug Track” link at http:\/\/bugzilla.redhat.com\/bugzilla\/<\/p>\n

AUTHORS <\/a> <\/h2>\n

Nalin Dahyabhai , using code shamelessly stolen from parts of pam_console.
Support of console.perms.d and other improvements by Tomas Mraz .<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

pam_console_apply \u2212 set or revoke permissions for users at the system console <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,7],"class_list":["post-2660","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-pam_console_apply"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/2660","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=2660"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/2660\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=2660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=2660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=2660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}