Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / busybox / c98c31783c062377d14b80735b056cf4c53c66e9 / . / loginutils / Config.in
blob: 1d52cdfe56912b14d3561c813fc956fbc17f7865 [file] [log] [blame]
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]1#
2# For a description of the syntax of this configuration file,
3# see scripts/kbuild/config-language.txt.
4#
5
6menu "Login/Password Management Utilities"
7
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]8config FEATURE_SHADOWPASSWDS
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]9 bool "Support for shadow passwords"
10 default n
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]11 help
12 Build support for shadow password in /etc/shadow. This file is only
13 readable by root and thus the encrypted passwords are no longer
14 publicly readable.
15
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]16config USE_BB_SHADOW
"Robert P. J. Day"6dce0b62006-08-03 11:28:36 +0000[diff] [blame]17 bool " Use busybox shadow password functions"
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]18 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]19 depends on USE_BB_PWD_GRP && FEATURE_SHADOWPASSWDS
Rob Landleyb9620412005-12-20 15:25:25 +0000[diff] [blame]20 help
21 If you leave this disabled, busybox will use the system's shadow
22 password handling functions. And if you are using the GNU C library
23 (glibc), you will then need to install the /etc/nsswitch.conf
24 configuration file and the required /lib/libnss_* libraries in
25 order for the shadow password functions to work. This generally
26 makes your embedded system quite a bit larger.
27
28 Enabling this option will cause busybox to directly access the
29 system's /etc/shadow file when handling shadow passwords. This
30 makes your system smaller and I will get fewer emails asking about
31 how glibc NSS works). When this option is enabled, you will not be
32 able to use PAM to access shadow passwords from remote LDAP
33 password servers and whatnot.
34
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]35config USE_BB_PWD_GRP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]36 bool "Use internal password and group functions rather than system functions"
37 default n
38 help
Eric Andersendb210ae2003-07-15 07:15:03 +0000[diff] [blame]39 If you leave this disabled, busybox will use the system's password
40 and group functions. And if you are using the GNU C library
41 (glibc), you will then need to install the /etc/nsswitch.conf
42 configuration file and the required /lib/libnss_* libraries in
43 order for the password and group functions to work. This generally
44 makes your embedded system quite a bit larger.
45
46 Enabling this option will cause busybox to directly access the
47 system's /etc/password, /etc/group files (and your system will be
48 smaller, and I will get fewer emails asking about how glibc NSS
49 works). When this option is enabled, you will not be able to use
50 PAM to access remote LDAP password servers and whatnot. And if you
51 want hostname resolution to work with glibc, you still need the
52 /lib/libnss_* libraries.
53
54 If you enable this option, it will add about 1.5k to busybox.
55
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]56config ADDGROUP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]57 bool "addgroup"
58 default n
59 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]60 Utility for creating a new group account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]61
Bernhard Reutner-Fischer00c2c482007-04-05 13:16:39 +0000[diff] [blame]62config FEATURE_ADDUSER_TO_GROUP
63 bool "Support for adding users to groups"
64 default n
65 depends on ADDGROUP
66 help
67 If called with two non-option arguments,
68 addgroup will add an existing user to an
69 existing group.
70
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]71config DELGROUP
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]72 bool "delgroup"
73 default n
74 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]75 Utility for deleting a group account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]76
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]77config ADDUSER
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]78 bool "adduser"
79 default n
80 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]81 Utility for creating a new user account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]82
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]83config DELUSER
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]84 bool "deluser"
85 default n
86 help
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]87 Utility for deleting a user account.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]88
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]89config GETTY
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]90 bool "getty"
91 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]92 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]93 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]94 getty lets you log in on a tty, it is normally invoked by init.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]95
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]96config FEATURE_UTMP
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]97 bool "Support utmp file"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]98 depends on GETTY || LOGIN || SU || WHO
Eric Andersenaad29b32004-07-30 17:24:47 +0000[diff] [blame]99 default n
100 help
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]101 The file /var/run/utmp is used to track who is currently logged in.
102
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]103config FEATURE_WTMP
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]104 bool "Support wtmp file"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]105 depends on GETTY || LOGIN || SU || LAST
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]106 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]107 select FEATURE_UTMP
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]108 help
Tim Rikerc1ef7bd2006-01-25 00:08:53 +0000[diff] [blame]109 The file /var/run/wtmp is used to track when user's have logged into
Mike Frysinger8deb6862005-07-01 01:04:32 +0000[diff] [blame]110 and logged out of the system.
Eric Andersenaad29b32004-07-30 17:24:47 +0000[diff] [blame]111
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]112config LOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]113 bool "login"
114 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]115 select FEATURE_SUID
116 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]117 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]118 login is used when signing onto a system.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]119
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]120 Note that Busybox binary must be setuid root for this applet to
121 work properly.
122
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]123config LOGIN_SCRIPTS
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]124 bool "Support for login scripts"
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]125 depends on LOGIN
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]126 default n
127 help
128 Enable this if you want login to execute $LOGIN_PRE_SUID_SCRIPT
Bernhard Reutner-Fischer7627cc12006-11-22 18:21:08 +0000[diff] [blame]129 just prior to switching from root to logged-in user.
Denis Vlasenko2e502912006-09-08 17:22:45 +0000[diff] [blame]130
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]131config FEATURE_SECURETTY
Rob Landley2ec922e2006-04-13 23:22:16 +0000[diff] [blame]132 bool "Support for /etc/securetty"
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]133 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]134 depends on LOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]135 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]136 The file /etc/securetty is used by (some versions of) login(1).
137 The file contains the device names of tty lines (one per line,
138 without leading /dev/) on which root is allowed to login.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]139
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]140config PASSWD
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]141 bool "passwd"
142 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]143 select FEATURE_SUID
144 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]145 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]146 passwd changes passwords for user and group accounts. A normal user
147 may only change the password for his/her own account, the super user
148 may change the password for any account. The administrator of a group
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]149 may change the password for the group.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]150
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]151 Note that Busybox binary must be setuid root for this applet to
152 work properly.
153
Denis Vlasenko8eb3b392006-12-19 00:33:53 +0000[diff] [blame]154config FEATURE_PASSWD_WEAK_CHECK
155 bool "Check new passwords for weakness"
156 default y
157 depends on PASSWD
158 help
159 With this option passwd will refuse new passwords which are "weak".
160
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]161config SU
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]162 bool "su"
163 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]164 select FEATURE_SUID
165 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]166 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]167 su is used to become another user during a login session.
168 Invoked without a username, su defaults to becoming the super user.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]169
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]170 Note that Busybox binary must be setuid root for this applet to
171 work properly.
172
Bernhard Reutner-Fischer359d7ca2006-12-19 08:55:38 +0000[diff] [blame]173config FEATURE_SU_SYSLOG
Denis Vlasenko15b213e2006-12-19 00:20:20 +0000[diff] [blame]174 bool "Enable su to write to syslog"
Rob Landley3bfcf3c2006-07-10 03:05:46 +0000[diff] [blame]175 default y
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]176 depends on SU
Denis Vlasenko15b213e2006-12-19 00:20:20 +0000[diff] [blame]177
178config FEATURE_SU_CHECKS_SHELLS
179 bool "Enable su to check user's shell to be listed in /etc/shells"
180 depends on SU
181 default y
Rob Landley3bfcf3c2006-07-10 03:05:46 +0000[diff] [blame]182
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]183config SULOGIN
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]184 bool "sulogin"
185 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]186 select FEATURE_SYSLOG
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]187 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]188 sulogin is invoked when the system goes into single user
Eric Andersene5642112003-07-14 19:37:08 +0000[diff] [blame]189 mode (this is done through an entry in inittab).
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]190
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]191config VLOCK
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]192 bool "vlock"
193 default n
Denis Vlasenko7d219aa2006-10-05 10:17:08 +0000[diff] [blame]194 select FEATURE_SUID
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]195 help
Eric Andersen88c916b2003-10-22 09:58:56 +0000[diff] [blame]196 Build the "vlock" applet which allows you to lock (virtual) terminals.
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]197
Eric Andersen13879102004-08-26 23:13:00 +0000[diff] [blame]198 Note that Busybox binary must be setuid root for this applet to
199 work properly.
200
Eric Andersenc9f20d92002-12-05 08:41:41 +0000[diff] [blame]201endmenu
202