📄 readme.poeigl
字号:
README for init/getty/login, by poe@daimi.aau.dkThis package contains simpleinit, agetty, and login programs for Linux.Additional utilities included are: hostname, who, write, wall, usersdomainname, hostid, cage and mesg.Most of this software has been contributed by others, I basically justported the things to Linux.About installation: See the bottom of this file. Check the Makefile!Be sure you know what you are doing! You may well be able to lockyourself out from your machine. Especially: The init provided here(simpleinit) is NOT a SYSV compatible init and the inittab formatis different.If you are uncertain whether you got the latest version, check out ftp://ftp.daimi.aau.dk/pub/linux/poe/Version 1.49 (20-Jun-97) Small patches for new util-linux distribution and glibc compat. PAM support in login.c by Erik Troan.Version 1.48 (6-Jun-97) Now changes mode and owner of /dev/vcs devices for console logins. After idea by Andries Brouwer.Version 1.47 (2-Apr-97) Got new version of hostid.c and hostid.1 from Sander van Malssen <svm@kozmix.ow.nl>. Removed premature endutent() call in login.c, simpleinit.c and agetty.c to be compatible with the changed semantics of gnu libc2. Fix by Jesse Thilo <Jesse.Thilo@pobox.com>.Version 1.46 (28-Jan-97) Several security fixes for login by David Holland (buffer overruns) <dholland@hcs.harvard.edu> Fixed write.c, to handle a terminating period correctly. Re-indented login.c, it was getting too messy.Version 1.45a (16-Dec-96) Better support in login for shadow passwords. Compile with -DSHADOW_PWD if you have <shadow.h>. This is on by default. By Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>. Changed the wtmp locking scheme in login.c,agetty.c,simpleinit.c to flock() /etc/wtmplock instead of the wtmp file directly. This avoids a denial of service attack. Some support for the RB-1 Cryptocard token for challenge/response authentication. This needs a DES library, either Eric Young's libdes, or the Koontz implementation, see cryptocard.c. Initial support patch by Randolph Bentson, <bentson@grieg.seaslug.org> Changed getpass() to use fputs() instead of fprintf().Version 1.44 (13-Nov-96): Made isapty() in checktty.c more resilient to 2.0 systems that haven't re-MAKEDEV'ed their pty devices.Version 1.43 (8-Nov-96): Fix to checktty.c: PTY's are numbered differently after 1.3, blush! Fix by Gerhard Schneider <gs@ilfb.tuwien.ac.at>Version 1.42c (6-Nov-96): Small fix by Gabriel M. Schuyler <schuyler@easiest.com>, to get better syslog messages (1 LOGIN FAILURE instead of 2 LOGIN FAILURES). Patch butchered by me.Version 1.42b (30-Sep-96): Got patch for checktty.c from Christoph Lameter <clameter@miriam.fuller.edu> so it doesn't traverse the groupfile "manually" but uses the getgroups() call, this is more efficient with large groupfiles and NIS/YP.Version 1.42a (24-Sep-96): Added extra syslog() call to login.c to log all good logins. Patch from Steve Philp.Version 1.41 (20-Jul-96): Added security fix to checktty.c by JDS to clear certain lists. Patches butchered and ANSI'fied by me. Added -n option to agetty to avoid the login prompt.Version 1.40a (29-Dec-95): Added -f <issue_file> option to agetty. Patches from Eric Rasmussen <ear@usfirst.org>, but somewhat butchered by me.Version 1.39 (25-Oct-95): Lots of testing and bugfixes in agetty. Now the modem init stuff should finally work (for me). Also wrote modem.agetty as an example on how to use agetty with a modem. Agetty now also supports baud rates of 38400, 57600, 115200 and 230400 bps.Version 1.37 (15-Sep-95): Added -I <initstring> and -w options to agetty.c for those that use agetty with modems.Version 1.36 (25-Aug-95): Enhanced /etc/usertty features with group support. Moved this part of login.c to checktty.c. One can now define classes of hosts and ttys and do access checking based on unix-group membership. See login.1. Also time ranges for logins can be specified, for example writing the line joe [mon:tue:wed:thu:fri:8-16]@barracuda [mon:tue:wed:thu:fri:0-7:17-23]@joes.pc.at.home [sat:sun:0-23]@joes.pc.at.home says that during working hours, Joe may rlogin from the host barracuda, whereas outside working hours and in weekends Joe may rlogin from his networked PC at home. login.c: failures was not properly initialized, it now is. Also made sure ALL failures are really logged to syslog.Version 1.35 (7-Aug-95): login.c: Much improved features for the usertty file, allows access control based on both hostnames/addresses and line. See the about.usertty file and the man-page. Fixed agetty so it doesn't fiddle with the ut_id field in the utmp record, this should prevent growing utmps on systems with more than 10 login lines. Fix suggested and checked by Alan Wendt <alan@ezlink.com> in his agetty.1.9.1a. Agetty now installs as agetty again, not as getty. Updated man-page for login(1) to document /etc/usertty changes. This has been tested on Linux 1.2.5 with GCC 2.5.8 and libc 4.5.26.Version 1.33a (20-Jun-95): rchatfie@cavern.nmsu.edu ("rc.") suggested that I should remove the #ifndef linux around the special logging of dial-up logins. This is now done, so each login via a serial port generates a separate DIALUP syslog entry.Version 1.33 (5-Jun-95): Patch by Ron Sommeling <sommel@sci.kun.nl> and jlaiho@ichaos.nullnet.fi (Juha Laiho) for agetty.c, used to return a pointer to an automatic variable in get_logname(). Many patches from or via Rickard Faith <faith@cs.unc.edu>, fixing man-pages etc, now defaults to using /var/log/wtmp and /var/run/utmp according to the new FSSTND. Fix in login.c for CPU eating bug when a remote telnet client dies while logging in. This is for Linux 1.2, GCC 2.6.2 or later.Version 1.32b (12-Mar-95): Login now sets the tty group to "tty" instead of "other". Depending on compile-time define USE_TTY_GROUP the tty mode is set to 0620 or 0600 instead of 0622. All as per suggestion by Rik Faith and the linux-security list. Write/wall now strips control chars except BEL (\007). Again after suggestion by Rik Faith.Version 1.32a Urgent security patch from Alvaro M. Echevarria incorporated into login.c. This is really needed on machines running YP until the libraries are fixed.Version 1.32 Login now logs the ip-address of the connecting host to utmp as it should.Version 1.31b (2-Feb-95): Daniel Quinlan <quinlan@yggdrasil.com> and Ross Biro <biro@yggdrasil.com> suggested a patch to login.c that allows for shell scripts in the shell field of /etc/passwd, so one can now have (as a line in /etc/passwd): bye::1000:1000:Outlogger:/bin:echo Bye Logging in as "bye" with no password simply echoes Bye on the screen. This has applications for pppd/slip.Version 1.31a (28-Oct-94): Scott Telford provided a patch for simpleinit, so executing reboot from singleuser mode won't partially execute /etc/rc before the reboot.Version 1.30 (17-Sep-94): tobias@server.et-inf.fho-emden.de (Peter Tobias) has made a more advanced hostname command that understands some options such as -f for FQDN etc. I'll not duplicate his work. Use his hostname package if you wish. svm@kozmix.xs4all.nl (Sander van Malssen) provided more features for the /etc/issue file in agetty. \U and \u now expand to the number of current users. It is now possible to state the value of TERM on the agetty command line. This was also provided by Sander. This has been built under Linux 1.1.42 with gcc 2.5.8 and libc 4.5.26.Version 1.29 (18-Aug-94): Finally got around to making a real version after the numerous alpha versions of 1.28. Scott Telford <st@epcc.ed.ac.uk> provided a patch for write(1) to make it look more like BSD write. Fixed login so that the .hushlogin feature works even with real protective users mounted via NFS (ie. where root can't access the user's .hushlogin file). Cleaned up the code to make -Wall bearable.Version 1.28c (21-Jul-94): Rik Faith reminded me that agetty should use the syslog facility. It now does.Version 1.28b (30-May-94): On suggestion from Jeremy Fitzhardinge <jeremy@suite.sw.oz.au> I added -- as option delimiter on args passed from agetty to login. Fixes -froot hole for other login programs. The login program in this package never had that hole.Version 1.28a (16-May-94): bill@goshawk.lanl.gov provided a couple of patches, one fixing terminal setup in agetty, and reboot is now supposed to be in /sbin according to FSSTND.Version 1.27 (10-May-94): Changed login.c, so all bad login attempts are logged, and added usertty security feature. See about.usertty for an explanation. There's no longer a limit of 20 chars in the TERM environment variable. Suggested by Nicolai Langfeldt <janl@math.uio.no> Added #ifdef HAVE_QUOTA around quota checks. Enable them if you have quota stuff in your libraries and kernel. Also re-enabled set/getpriority() calls as we now have them, and have had for a long time... Now wtmp is locked and unlocked around writes to avoid mangling. Due to Jaakko Hyv{tti <HYVATTI@cc.helsinki.fi>. Wrt. agetty: A \o in /etc/issue now inserts the domainname, as set by domainname(1). Sander van Malssen provided this. This is being used under Linux 1.1.9 Beefed up the agetty.8 man-page to describe the /etc/issue options. Added man-pages for wall, cage, who.Version 1.26 alpha (25-Apr-94): Added patch from Bill Reynolds <bill@goshawk.lanl.gov> to simpleinit, so it will drop into single user if /etc/rc fails, eg. from fsck.Version 1.25 (9-Feb-94): Agetty should now work with the Linux 0.99pl15a kernel. ECHOCTL and ECHOPRT are no longer set in the termios struct. Also made agetty accept both "tty baudrate" and "baudrate tty" arguments.Version 1.24 (23-Jan-94): changes since 1.22 Christian von Roques <roques@juliet.ka.sub.org> provided a patch that cleans up the handling of the -L option on agetty. Rik Faith <faith@cs.unc.edu> enhanced several man-pages...Version 1.23 (11-Dec-93): changes since 1.21 Mitchum DSouza provided the hostid(1) code. It needs libc 4.4.4 or later and a Linux 0.99.14 kernel or later. It can set and print the world unique hostid of the machine. This may be used in connection with commercial software licenses. God forbid! I added the -v option, and munged the code a bit, so don't blame Mitch if you don't like it. I made the "cage" program. Using this as a shell in the passwd file, enables one to let users log into a chroot'ed environment. For those that have modem logins and are concerned about security. Read the source for further info. "who am i" now works. The login program works with Yellow Pages (aka NIS) simply by linking with an appropriate library containing a proper version of getpwnam() and friends.Version 1.21 (30-Oct-93): changes since 1.20 In simpleinit.c: The boottime wtmp record is now written *after* /etc/rc is run, to put a correct timestamp on it. Daniel Thumim <dthumim@mit.edu> suggested this fix. The source and Makefile is prepared for optional installation of binaries in /sbin instead of /etc, and logfiles in /usr/adm instead of /etc. See and change the Makefile to suit your preferences. Rik Faith and Stephen Tweedie inspired this change.Version 1.20 (30-Jul-93): changes since 1.17: Versions 1.18 and 1.19 were never made publically available. Agetty now supports a -L switch that makes it force the CLOCAL flag. This is useful if you have a local terminal attached with a partly wired serial cable that does not pass on the Carrier Detect signal. There's a domainname program like the hostname program; contributed
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -