Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / busybox / 11b9f266104bf1c1bd21ec64cff22dbb5d0983a6 / . / loginutils / Config.in
blob: c57d9976edcdcdda05ef7d3061a9858158e916ff [file] [log] [blame]
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]1#
2# For a description of the syntax of this configuration file,
3# see scripts/kbuild/config-language.txt.
4#
5
6menu "Login/Password Management Utilities"
7
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]8config FEATURE_SHADOWPASSWDS
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]9 bool "Support for shadow passwords"
10 default n
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]11 help
12 Build support for shadow password in /etc/shadow. This file is only
13 readable by root and thus the encrypted passwords are no longer
14 publicly readable.
15
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]16config USE_BB_SHADOW
Denis Vlasenko4ee7cd42008-03-17 09:13:22 +0000[diff] [blame]17 bool "Use busybox shadow password functions"
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]18 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]19 depends on USE_BB_PWD_GRP && FEATURE_SHADOWPASSWDS
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]20 help
21 If you leave this disabled, busybox will use the system's shadow
22 password handling functions. And if you are using the GNU C library
23 (glibc), you will then need to install the /etc/nsswitch.conf
24 configuration file and the required /lib/libnss_* libraries in
25 order for the shadow password functions to work. This generally
26 makes your embedded system quite a bit larger.
27
28 Enabling this option will cause busybox to directly access the
29 system's /etc/shadow file when handling shadow passwords. This
30 makes your system smaller and I will get fewer emails asking about
31 how glibc NSS works). When this option is enabled, you will not be
32 able to use PAM to access shadow passwords from remote LDAP
33 password servers and whatnot.
34
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]35config USE_BB_PWD_GRP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]36 bool "Use internal password and group functions rather than system functions"
37 default n
38 help
Eric Andersendb210ae2003-07-15 07:15:03 +0000[diff] [blame]39 If you leave this disabled, busybox will use the system's password
40 and group functions. And if you are using the GNU C library
41 (glibc), you will then need to install the /etc/nsswitch.conf
42 configuration file and the required /lib/libnss_* libraries in
43 order for the password and group functions to work. This generally
44 makes your embedded system quite a bit larger.
45
46 Enabling this option will cause busybox to directly access the
47 system's /etc/password, /etc/group files (and your system will be
48 smaller, and I will get fewer emails asking about how glibc NSS
49 works). When this option is enabled, you will not be able to use
50 PAM to access remote LDAP password servers and whatnot. And if you
51 want hostname resolution to work with glibc, you still need the
52 /lib/libnss_* libraries.
53
54 If you enable this option, it will add about 1.5k to busybox.
55
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]56config ADDGROUP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]57 bool "addgroup"
58 default n
59 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]60 Utility for creating a new group account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]61
Bernhard Reutner-Fischer00c2c482007-04-05 13:16:39 +0000[diff] [blame]62config FEATURE_ADDUSER_TO_GROUP
63 bool "Support for adding users to groups"
64 default n
65 depends on ADDGROUP
66 help
67 If called with two non-option arguments,
68 addgroup will add an existing user to an
69 existing group.
70
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]71config DELGROUP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]72 bool "delgroup"
73 default n
74 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]75 Utility for deleting a group account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]76
Denis Vlasenkobe1a9d42007-04-15 08:43:23 +0000[diff] [blame]77config FEATURE_DEL_USER_FROM_GROUP
78 bool "Support for removing users from groups."
79 default n
80 depends on DELGROUP
81 help
Denis Vlasenko4b924f32007-05-30 00:29:55 +0000[diff] [blame]82 If called with two non-option arguments, deluser
Denis Vlasenkobe1a9d42007-04-15 08:43:23 +0000[diff] [blame]83 or delgroup will remove an user from a specified group.
84
Denis Vlasenkoa7d6c8b2008-03-19 23:15:26 +0000[diff] [blame]85config FEATURE_CHECK_NAMES
86 bool "Enable sanity check on user/group names in adduser and addgroup"
87 default n
88 depends on ADDUSER || ADDGROUP
89 help
90 Enable sanity check on user and group names in adduser and addgroup.
91 To avoid problems, the user or group name should consist only of
92 letters, digits, underscores, periods, at signs and dashes,
93 and not start with a dash (as defined by IEEE Std 1003.1-2001).
94 For compatibility with Samba machine accounts "$" is also supported
95 at the end of the user or group name.
96
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]97config ADDUSER
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]98 bool "adduser"
99 default n
100 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]101 Utility for creating a new user account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]102
Denis Vlasenko753f42a2008-02-15 15:17:23 +0000[diff] [blame]103config FEATURE_ADDUSER_LONG_OPTIONS
104 bool "Enable long options"
105 default n
106 depends on ADDUSER && GETOPT_LONG
107 help
108 Support long options for the adduser applet.
109
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]110config DELUSER
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]111 bool "deluser"
112 default n
113 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]114 Utility for deleting a user account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]115
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]116config GETTY
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]117 bool "getty"
118 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]119 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]120 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]121 getty lets you log in on a tty, it is normally invoked by init.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]122
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]123config FEATURE_UTMP
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]124 bool "Support utmp file"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]125 depends on GETTY || LOGIN || SU || WHO
Eric Andersenaad29b32004-07-30 17:24:47 +0000[diff] [blame]126 default n
127 help
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]128 The file /var/run/utmp is used to track who is currently logged in.
129
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]130config FEATURE_WTMP
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]131 bool "Support wtmp file"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]132 depends on GETTY || LOGIN || SU || LAST
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]133 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]134 select FEATURE_UTMP
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]135 help
Tim Rikerc1ef7bd2006-01-25 00:08:53 +0000[diff] [blame]136 The file /var/run/wtmp is used to track when user's have logged into
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]137 and logged out of the system.
Eric Andersenaad29b32004-07-30 17:24:47 +0000[diff] [blame]138
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]139config LOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]140 bool "login"
141 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]142 select FEATURE_SUID
143 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]144 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]145 login is used when signing onto a system.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]146
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]147 Note that Busybox binary must be setuid root for this applet to
148 work properly.
149
Denis Vlasenkod6e81c72007-08-21 10:58:18 +0000[diff] [blame]150config PAM
151 bool "Support for PAM (Pluggable Authentication Modules)"
152 default n
153 depends on LOGIN
154 help
155 Use PAM in login(1) instead of direct access to password database.
156
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]157config LOGIN_SCRIPTS
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]158 bool "Support for login scripts"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]159 depends on LOGIN
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]160 default n
161 help
162 Enable this if you want login to execute $LOGIN_PRE_SUID_SCRIPT
Bernhard Reutner-Fischer7627cc12006-11-22 18:21:08 +0000[diff] [blame]163 just prior to switching from root to logged-in user.
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]164
Denis Vlasenkof312e322007-06-12 22:04:57 +0000[diff] [blame]165config FEATURE_NOLOGIN
166 bool "Support for /etc/nologin"
167 default y
168 depends on LOGIN
169 help
170 The file /etc/nologin is used by (some versions of) login(1).
171 If it exists, non-root logins are prohibited.
172
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]173config FEATURE_SECURETTY
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]174 bool "Support for /etc/securetty"
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]175 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]176 depends on LOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]177 help
Denis Vlasenkof312e322007-06-12 22:04:57 +0000[diff] [blame]178 The file /etc/securetty is used by (some versions of) login(1).
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]179 The file contains the device names of tty lines (one per line,
180 without leading /dev/) on which root is allowed to login.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]181
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]182config PASSWD
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]183 bool "passwd"
184 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]185 select FEATURE_SUID
186 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]187 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]188 passwd changes passwords for user and group accounts. A normal user
189 may only change the password for his/her own account, the super user
190 may change the password for any account. The administrator of a group
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]191 may change the password for the group.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]192
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]193 Note that Busybox binary must be setuid root for this applet to
194 work properly.
195
Denis Vlasenko8eb3b392006-12-19 00:33:53 +0000[diff] [blame]196config FEATURE_PASSWD_WEAK_CHECK
197 bool "Check new passwords for weakness"
198 default y
199 depends on PASSWD
200 help
201 With this option passwd will refuse new passwords which are "weak".
202
Denis Vlasenko7e84e532007-05-08 17:52:17 +0000[diff] [blame]203config CRYPTPW
204 bool "cryptpw"
205 default n
206 help
207 Applet for crypting a string.
208
Denis Vlasenko21d10142007-07-20 21:28:41 +0000[diff] [blame]209config CHPASSWD
210 bool "chpasswd"
211 default n
212 help
213 chpasswd reads a file of user name and password pairs from
214 standard input and uses this information to update a group of
215 existing users.
216
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]217config SU
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]218 bool "su"
219 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]220 select FEATURE_SUID
221 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]222 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]223 su is used to become another user during a login session.
224 Invoked without a username, su defaults to becoming the super user.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]225
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]226 Note that Busybox binary must be setuid root for this applet to
227 work properly.
228
Bernhard Reutner-Fischer359d7ca2006-12-19 08:55:38 +0000[diff] [blame]229config FEATURE_SU_SYSLOG
Denis Vlasenko15b213e2006-12-19 00:20:20 +0000[diff] [blame]230 bool "Enable su to write to syslog"
Rob Landley3bfcf3c2006-07-10 03:05:46 +0000[diff] [blame]231 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]232 depends on SU
Denis Vlasenko15b213e2006-12-19 00:20:20 +0000[diff] [blame]233
234config FEATURE_SU_CHECKS_SHELLS
235 bool "Enable su to check user's shell to be listed in /etc/shells"
236 depends on SU
237 default y
Rob Landley3bfcf3c2006-07-10 03:05:46 +0000[diff] [blame]238
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]239config SULOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]240 bool "sulogin"
241 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]242 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]243 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]244 sulogin is invoked when the system goes into single user
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]245 mode (this is done through an entry in inittab).
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]246
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]247config VLOCK
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]248 bool "vlock"
249 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]250 select FEATURE_SUID
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]251 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]252 Build the "vlock" applet which allows you to lock (virtual) terminals.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]253
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]254 Note that Busybox binary must be setuid root for this applet to
255 work properly.
256
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]257endmenu
258