Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 1 | # |
| 2 | # For a description of the syntax of this configuration file, |
| 3 | # see scripts/kbuild/config-language.txt. |
| 4 | # |
| 5 | |
| 6 | menu "Login/Password Management Utilities" |
| 7 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 8 | config FEATURE_SHADOWPASSWDS |
Rob Landley | b962041 | 2005-12-20 15:25:25 +0000 | [diff] [blame] | 9 | bool "Support for shadow passwords" |
| 10 | default n |
Rob Landley | b962041 | 2005-12-20 15:25:25 +0000 | [diff] [blame] | 11 | help |
| 12 | Build support for shadow password in /etc/shadow. This file is only |
| 13 | readable by root and thus the encrypted passwords are no longer |
| 14 | publicly readable. |
| 15 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 16 | config USE_BB_SHADOW |
Denis Vlasenko | 4ee7cd4 | 2008-03-17 09:13:22 +0000 | [diff] [blame] | 17 | bool "Use busybox shadow password functions" |
Rob Landley | b962041 | 2005-12-20 15:25:25 +0000 | [diff] [blame] | 18 | default y |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 19 | depends on USE_BB_PWD_GRP && FEATURE_SHADOWPASSWDS |
Rob Landley | b962041 | 2005-12-20 15:25:25 +0000 | [diff] [blame] | 20 | help |
| 21 | If you leave this disabled, busybox will use the system's shadow |
| 22 | password handling functions. And if you are using the GNU C library |
| 23 | (glibc), you will then need to install the /etc/nsswitch.conf |
| 24 | configuration file and the required /lib/libnss_* libraries in |
| 25 | order for the shadow password functions to work. This generally |
| 26 | makes your embedded system quite a bit larger. |
| 27 | |
| 28 | Enabling this option will cause busybox to directly access the |
| 29 | system's /etc/shadow file when handling shadow passwords. This |
| 30 | makes your system smaller and I will get fewer emails asking about |
| 31 | how glibc NSS works). When this option is enabled, you will not be |
| 32 | able to use PAM to access shadow passwords from remote LDAP |
| 33 | password servers and whatnot. |
| 34 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 35 | config USE_BB_PWD_GRP |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 36 | bool "Use internal password and group functions rather than system functions" |
| 37 | default n |
| 38 | help |
Eric Andersen | db210ae | 2003-07-15 07:15:03 +0000 | [diff] [blame] | 39 | If you leave this disabled, busybox will use the system's password |
| 40 | and group functions. And if you are using the GNU C library |
| 41 | (glibc), you will then need to install the /etc/nsswitch.conf |
| 42 | configuration file and the required /lib/libnss_* libraries in |
| 43 | order for the password and group functions to work. This generally |
| 44 | makes your embedded system quite a bit larger. |
| 45 | |
| 46 | Enabling this option will cause busybox to directly access the |
| 47 | system's /etc/password, /etc/group files (and your system will be |
| 48 | smaller, and I will get fewer emails asking about how glibc NSS |
| 49 | works). When this option is enabled, you will not be able to use |
| 50 | PAM to access remote LDAP password servers and whatnot. And if you |
| 51 | want hostname resolution to work with glibc, you still need the |
| 52 | /lib/libnss_* libraries. |
| 53 | |
| 54 | If you enable this option, it will add about 1.5k to busybox. |
| 55 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 56 | config ADDGROUP |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 57 | bool "addgroup" |
| 58 | default n |
| 59 | help |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 60 | Utility for creating a new group account. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 61 | |
Bernhard Reutner-Fischer | 00c2c48 | 2007-04-05 13:16:39 +0000 | [diff] [blame] | 62 | config FEATURE_ADDUSER_TO_GROUP |
| 63 | bool "Support for adding users to groups" |
| 64 | default n |
| 65 | depends on ADDGROUP |
| 66 | help |
| 67 | If called with two non-option arguments, |
| 68 | addgroup will add an existing user to an |
| 69 | existing group. |
| 70 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 71 | config DELGROUP |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 72 | bool "delgroup" |
| 73 | default n |
| 74 | help |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 75 | Utility for deleting a group account. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 76 | |
Denis Vlasenko | be1a9d4 | 2007-04-15 08:43:23 +0000 | [diff] [blame] | 77 | config FEATURE_DEL_USER_FROM_GROUP |
| 78 | bool "Support for removing users from groups." |
| 79 | default n |
| 80 | depends on DELGROUP |
| 81 | help |
Denis Vlasenko | 4b924f3 | 2007-05-30 00:29:55 +0000 | [diff] [blame] | 82 | If called with two non-option arguments, deluser |
Denis Vlasenko | be1a9d4 | 2007-04-15 08:43:23 +0000 | [diff] [blame] | 83 | or delgroup will remove an user from a specified group. |
| 84 | |
Denis Vlasenko | a7d6c8b | 2008-03-19 23:15:26 +0000 | [diff] [blame] | 85 | config FEATURE_CHECK_NAMES |
| 86 | bool "Enable sanity check on user/group names in adduser and addgroup" |
| 87 | default n |
| 88 | depends on ADDUSER || ADDGROUP |
| 89 | help |
| 90 | Enable sanity check on user and group names in adduser and addgroup. |
| 91 | To avoid problems, the user or group name should consist only of |
| 92 | letters, digits, underscores, periods, at signs and dashes, |
| 93 | and not start with a dash (as defined by IEEE Std 1003.1-2001). |
| 94 | For compatibility with Samba machine accounts "$" is also supported |
| 95 | at the end of the user or group name. |
| 96 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 97 | config ADDUSER |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 98 | bool "adduser" |
| 99 | default n |
| 100 | help |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 101 | Utility for creating a new user account. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 102 | |
Denis Vlasenko | 753f42a | 2008-02-15 15:17:23 +0000 | [diff] [blame] | 103 | config FEATURE_ADDUSER_LONG_OPTIONS |
| 104 | bool "Enable long options" |
| 105 | default n |
| 106 | depends on ADDUSER && GETOPT_LONG |
| 107 | help |
| 108 | Support long options for the adduser applet. |
| 109 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 110 | config DELUSER |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 111 | bool "deluser" |
| 112 | default n |
| 113 | help |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 114 | Utility for deleting a user account. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 115 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 116 | config GETTY |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 117 | bool "getty" |
| 118 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 119 | select FEATURE_SYSLOG |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 120 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 121 | getty lets you log in on a tty, it is normally invoked by init. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 122 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 123 | config FEATURE_UTMP |
Rob Landley | 2ec922e | 2006-04-13 23:22:16 +0000 | [diff] [blame] | 124 | bool "Support utmp file" |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 125 | depends on GETTY || LOGIN || SU || WHO |
Eric Andersen | aad29b3 | 2004-07-30 17:24:47 +0000 | [diff] [blame] | 126 | default n |
| 127 | help |
Mike Frysinger | 8deb686 | 2005-07-01 01:04:32 +0000 | [diff] [blame] | 128 | The file /var/run/utmp is used to track who is currently logged in. |
| 129 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 130 | config FEATURE_WTMP |
Rob Landley | 2ec922e | 2006-04-13 23:22:16 +0000 | [diff] [blame] | 131 | bool "Support wtmp file" |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 132 | depends on GETTY || LOGIN || SU || LAST |
Mike Frysinger | 8deb686 | 2005-07-01 01:04:32 +0000 | [diff] [blame] | 133 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 134 | select FEATURE_UTMP |
Mike Frysinger | 8deb686 | 2005-07-01 01:04:32 +0000 | [diff] [blame] | 135 | help |
Tim Riker | c1ef7bd | 2006-01-25 00:08:53 +0000 | [diff] [blame] | 136 | The file /var/run/wtmp is used to track when user's have logged into |
Mike Frysinger | 8deb686 | 2005-07-01 01:04:32 +0000 | [diff] [blame] | 137 | and logged out of the system. |
Eric Andersen | aad29b3 | 2004-07-30 17:24:47 +0000 | [diff] [blame] | 138 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 139 | config LOGIN |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 140 | bool "login" |
| 141 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 142 | select FEATURE_SUID |
| 143 | select FEATURE_SYSLOG |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 144 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 145 | login is used when signing onto a system. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 146 | |
Eric Andersen | 1387910 | 2004-08-26 23:13:00 +0000 | [diff] [blame] | 147 | Note that Busybox binary must be setuid root for this applet to |
| 148 | work properly. |
| 149 | |
Denis Vlasenko | d6e81c7 | 2007-08-21 10:58:18 +0000 | [diff] [blame] | 150 | config PAM |
| 151 | bool "Support for PAM (Pluggable Authentication Modules)" |
| 152 | default n |
| 153 | depends on LOGIN |
| 154 | help |
| 155 | Use PAM in login(1) instead of direct access to password database. |
| 156 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 157 | config LOGIN_SCRIPTS |
Denis Vlasenko | 2e50291 | 2006-09-08 17:22:45 +0000 | [diff] [blame] | 158 | bool "Support for login scripts" |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 159 | depends on LOGIN |
Denis Vlasenko | 2e50291 | 2006-09-08 17:22:45 +0000 | [diff] [blame] | 160 | default n |
| 161 | help |
| 162 | Enable this if you want login to execute $LOGIN_PRE_SUID_SCRIPT |
Bernhard Reutner-Fischer | 7627cc1 | 2006-11-22 18:21:08 +0000 | [diff] [blame] | 163 | just prior to switching from root to logged-in user. |
Denis Vlasenko | 2e50291 | 2006-09-08 17:22:45 +0000 | [diff] [blame] | 164 | |
Denis Vlasenko | f312e32 | 2007-06-12 22:04:57 +0000 | [diff] [blame] | 165 | config FEATURE_NOLOGIN |
| 166 | bool "Support for /etc/nologin" |
| 167 | default y |
| 168 | depends on LOGIN |
| 169 | help |
| 170 | The file /etc/nologin is used by (some versions of) login(1). |
| 171 | If it exists, non-root logins are prohibited. |
| 172 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 173 | config FEATURE_SECURETTY |
Rob Landley | 2ec922e | 2006-04-13 23:22:16 +0000 | [diff] [blame] | 174 | bool "Support for /etc/securetty" |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 175 | default y |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 176 | depends on LOGIN |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 177 | help |
Denis Vlasenko | f312e32 | 2007-06-12 22:04:57 +0000 | [diff] [blame] | 178 | The file /etc/securetty is used by (some versions of) login(1). |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 179 | The file contains the device names of tty lines (one per line, |
| 180 | without leading /dev/) on which root is allowed to login. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 181 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 182 | config PASSWD |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 183 | bool "passwd" |
| 184 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 185 | select FEATURE_SUID |
| 186 | select FEATURE_SYSLOG |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 187 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 188 | passwd changes passwords for user and group accounts. A normal user |
| 189 | may only change the password for his/her own account, the super user |
| 190 | may change the password for any account. The administrator of a group |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 191 | may change the password for the group. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 192 | |
Eric Andersen | 1387910 | 2004-08-26 23:13:00 +0000 | [diff] [blame] | 193 | Note that Busybox binary must be setuid root for this applet to |
| 194 | work properly. |
| 195 | |
Denis Vlasenko | 8eb3b39 | 2006-12-19 00:33:53 +0000 | [diff] [blame] | 196 | config FEATURE_PASSWD_WEAK_CHECK |
| 197 | bool "Check new passwords for weakness" |
| 198 | default y |
| 199 | depends on PASSWD |
| 200 | help |
| 201 | With this option passwd will refuse new passwords which are "weak". |
| 202 | |
Denis Vlasenko | 7e84e53 | 2007-05-08 17:52:17 +0000 | [diff] [blame] | 203 | config CRYPTPW |
| 204 | bool "cryptpw" |
| 205 | default n |
| 206 | help |
| 207 | Applet for crypting a string. |
| 208 | |
Denis Vlasenko | 21d1014 | 2007-07-20 21:28:41 +0000 | [diff] [blame] | 209 | config CHPASSWD |
| 210 | bool "chpasswd" |
| 211 | default n |
| 212 | help |
| 213 | chpasswd reads a file of user name and password pairs from |
| 214 | standard input and uses this information to update a group of |
| 215 | existing users. |
| 216 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 217 | config SU |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 218 | bool "su" |
| 219 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 220 | select FEATURE_SUID |
| 221 | select FEATURE_SYSLOG |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 222 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 223 | su is used to become another user during a login session. |
| 224 | Invoked without a username, su defaults to becoming the super user. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 225 | |
Eric Andersen | 1387910 | 2004-08-26 23:13:00 +0000 | [diff] [blame] | 226 | Note that Busybox binary must be setuid root for this applet to |
| 227 | work properly. |
| 228 | |
Bernhard Reutner-Fischer | 359d7ca | 2006-12-19 08:55:38 +0000 | [diff] [blame] | 229 | config FEATURE_SU_SYSLOG |
Denis Vlasenko | 15b213e | 2006-12-19 00:20:20 +0000 | [diff] [blame] | 230 | bool "Enable su to write to syslog" |
Rob Landley | 3bfcf3c | 2006-07-10 03:05:46 +0000 | [diff] [blame] | 231 | default y |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 232 | depends on SU |
Denis Vlasenko | 15b213e | 2006-12-19 00:20:20 +0000 | [diff] [blame] | 233 | |
| 234 | config FEATURE_SU_CHECKS_SHELLS |
| 235 | bool "Enable su to check user's shell to be listed in /etc/shells" |
| 236 | depends on SU |
| 237 | default y |
Rob Landley | 3bfcf3c | 2006-07-10 03:05:46 +0000 | [diff] [blame] | 238 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 239 | config SULOGIN |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 240 | bool "sulogin" |
| 241 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 242 | select FEATURE_SYSLOG |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 243 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 244 | sulogin is invoked when the system goes into single user |
Eric Andersen | e564211 | 2003-07-14 19:37:08 +0000 | [diff] [blame] | 245 | mode (this is done through an entry in inittab). |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 246 | |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 247 | config VLOCK |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 248 | bool "vlock" |
| 249 | default n |
Denis Vlasenko | 7d219aa | 2006-10-05 10:17:08 +0000 | [diff] [blame] | 250 | select FEATURE_SUID |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 251 | help |
Eric Andersen | 88c916b | 2003-10-22 09:58:56 +0000 | [diff] [blame] | 252 | Build the "vlock" applet which allows you to lock (virtual) terminals. |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 253 | |
Eric Andersen | 1387910 | 2004-08-26 23:13:00 +0000 | [diff] [blame] | 254 | Note that Busybox binary must be setuid root for this applet to |
| 255 | work properly. |
| 256 | |
Eric Andersen | c9f20d9 | 2002-12-05 08:41:41 +0000 | [diff] [blame] | 257 | endmenu |
| 258 | |