pam_console_apply(8) -- Linux man page

 

NAME

pam_console_apply - set or revoke permissions for users at the system console  

SYNOPSIS

pam_console_apply [-f <fstab file>] [-c <console.perms file>] [-r] [<device file> ...]  

DESCRIPTION

pam_console_apply sets or resets permissions on devices in the same manner as pam_console.
If /var/run/console.lock exists, pam_console_apply will grant permissions to the user listed therein. If the lock file does not exist, permissions are reset to those listed in /etc/security/console.perms, which should be configured to set permissions on devices so that root owns them.  

ARGUMENTS

-c
Load other console.perms file than the default one.
-f
Load other fstab file than the default one (/etc/fstab).
-r
Signals pam_console_apply to reset permissions. The default is to set permissions so that the user listed in /var/run/console.lock has access to the devices, and to reset permissions if no such file exists.

The optional <device file> arguments constrain what files should be affected by pam_console_apply. If they aren't specified permissions are changed on all files specified in the console.perms file.  

FILES

/var/run/console.lock
/etc/security/console.perms  

SEE ALSO

pam_console(8)
console.perms(5)
 

BUGS

Let's hope not, but if you find any, please report them via the "Bug Track" link at http://bugzilla.redhat.com/bugzilla/  

AUTHOR

Nalin Dahyabhai <nalin@redhat.com>, using code shamelessly stolen from parts of pam_console.