emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

* man/chage.1.xml, man/login.defs.5.xml, man/pwck.8.xml,

Browse Source 
man/pwconv.8.xml, man/useradd.8.xml, man/userdel.8.xml,
	man/usermod.8.xml, man/vipw.8.xml: Document the usage of the
	TCB_AUTH_GROUP, TCB_SYMLINKS, and USE_TCB configuration
	parameters.
	* man/pwconv.8.xml, man/pwck.8.xml: Document the behavior when
	USE_TCB is enabled.
This commit is contained in:
nekral-guest 2010-03-16 19:15:05 +00:00
parent c5fc8dd75d
commit 5d6c314304
9 changed files with 97 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog
View File

@ -1,3 +1,13 @@
2010-03-15 Nicolas François <nicolas.francois@centraliens.net>
* man/chage.1.xml, man/login.defs.5.xml, man/pwck.8.xml,
man/pwconv.8.xml, man/useradd.8.xml, man/userdel.8.xml,
man/usermod.8.xml, man/vipw.8.xml: Document the usage of the
TCB_AUTH_GROUP, TCB_SYMLINKS, and USE_TCB configuration
parameters.
* man/pwconv.8.xml, man/pwck.8.xml: Document the behavior when
USE_TCB is enabled.
2010-03-15 Nicolas François <nicolas.francois@centraliens.net> 2010-03-15 Nicolas François <nicolas.francois@centraliens.net>
* po/POTFILES.in, lib/tcbfuncs.c: Add more strings for * po/POTFILES.in, lib/tcbfuncs.c: Add more strings for

16
man/chage.1.xml
View File

@ -28,6 +28,10 @@
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--> -->
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
]>
<refentry id='chage.1'> <refentry id='chage.1'>
<!-- $Id$ --> <!-- $Id$ -->
<refmeta> <refmeta>
@ -202,6 +206,18 @@
</para> </para>
</refsect1> </refsect1>
<refsect1 id='configuration'>
<title>CONFIGURATION</title>
<para>
The following configuration variables in
<filename>/etc/login.defs</filename> change the behavior of this
tool:
</para>
<variablelist>
&USE_TCB;
</variablelist>
</refsect1>
<refsect1 id='files'> <refsect1 id='files'>
<title>FILES</title> <title>FILES</title>
<variablelist> <variablelist>

13
man/login.defs.5.xml
View File

@ -219,7 +219,12 @@
</para> </para>
<!-- .na --> <!-- .na -->
<variablelist remap='IP'> <variablelist remap='IP'>
<!-- chage: no variables --> <varlistentry condition="tcb">
<term>chage</term>
<listitem>
<para>USE_TCB</para>
</listitem>
</varlistentry>
<varlistentry> <varlistentry>
<term>chfn</term> <term>chfn</term>
<listitem> <listitem>
@ -387,7 +392,7 @@
<listitem> <listitem>
<para> <para>
PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE
<phrase condition="tcb">USE_TCB</phrase> <phrase condition="tcb">TCB_AUTH_GROUP TCB_SYMLINKS USE_TCB</phrase>
</para> </para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -454,7 +459,7 @@
<para> <para>
MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP USERDEL_CMD MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP USERDEL_CMD
USERGROUPS_ENAB USERGROUPS_ENAB
<phrase condition="tcb">USE_TCB</phrase> <phrase condition="tcb">TCB_SYMLINKS USE_TCB</phrase>
</para> </para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -463,7 +468,7 @@
<listitem> <listitem>
<para> <para>
MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP
<phrase condition="tcb">USE_TCB</phrase> <phrase condition="tcb">TCB_SYMLINKS USE_TCB</phrase>
</para> </para>
</listitem> </listitem>
</varlistentry> </varlistentry>

9
man/pwck.8.xml
View File

@ -33,6 +33,9 @@
<!ENTITY PASS_MAX_DAYS SYSTEM "login.defs.d/PASS_MAX_DAYS.xml"> <!ENTITY PASS_MAX_DAYS SYSTEM "login.defs.d/PASS_MAX_DAYS.xml">
<!ENTITY PASS_MIN_DAYS SYSTEM "login.defs.d/PASS_MIN_DAYS.xml"> <!ENTITY PASS_MIN_DAYS SYSTEM "login.defs.d/PASS_MIN_DAYS.xml">
<!ENTITY PASS_WARN_AGE SYSTEM "login.defs.d/PASS_WARN_AGE.xml"> <!ENTITY PASS_WARN_AGE SYSTEM "login.defs.d/PASS_WARN_AGE.xml">
<!ENTITY TCB_AUTH_GROUP SYSTEM "login.defs.d/TCB_AUTH_GROUP.xml">
<!ENTITY TCB_SYMLINKS SYSTEM "login.defs.d/TCB_SYMLINKS.xml">
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
]> ]>
<refentry id='pwck.8'> <refentry id='pwck.8'>
<!-- $Id$ --> <!-- $Id$ -->
@ -196,6 +199,9 @@
Sort entries in <filename>/etc/passwd</filename> and Sort entries in <filename>/etc/passwd</filename> and
<filename>/etc/shadow</filename> by UID. <filename>/etc/shadow</filename> by UID.
</para> </para>
<para condition="tcb">
This option has no effect when TCB is enabled.
</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
@ -220,6 +226,9 @@
&PASS_MAX_DAYS; &PASS_MAX_DAYS;
&PASS_MIN_DAYS; &PASS_MIN_DAYS;
&PASS_WARN_AGE; &PASS_WARN_AGE;
&TCB_AUTH_GROUP;
&TCB_SYMLINKS;
&USE_TCB;
</variablelist> </variablelist>
</refsect1> </refsect1>

27
man/pwconv.8.xml
View File

@ -35,6 +35,7 @@
<!ENTITY PASS_MAX_DAYS SYSTEM "login.defs.d/PASS_MAX_DAYS.xml"> <!ENTITY PASS_MAX_DAYS SYSTEM "login.defs.d/PASS_MAX_DAYS.xml">
<!ENTITY PASS_MIN_DAYS SYSTEM "login.defs.d/PASS_MIN_DAYS.xml"> <!ENTITY PASS_MIN_DAYS SYSTEM "login.defs.d/PASS_MIN_DAYS.xml">
<!ENTITY PASS_WARN_AGE SYSTEM "login.defs.d/PASS_WARN_AGE.xml"> <!ENTITY PASS_WARN_AGE SYSTEM "login.defs.d/PASS_WARN_AGE.xml">
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
]> ]>
<refentry id='pwconv.8'> <refentry id='pwconv.8'>
<!-- $Id$ --> <!-- $Id$ -->
@ -73,6 +74,15 @@
remap='I'>shadow</emphasis> from <emphasis remap='I'>passwd</emphasis> remap='I'>shadow</emphasis> from <emphasis remap='I'>passwd</emphasis>
and an optionally existing <emphasis remap='I'>shadow</emphasis>. and an optionally existing <emphasis remap='I'>shadow</emphasis>.
</para> </para>
<para condition="tcb">
<command>pwconv</command> does not work with
<option>USE_TCB</option> enabled. To convert to tcb passwords, you
should first use <command>pwconv</command> to convert to shadowed
passwords by disabling <option>USE_TCB</option> in
<filename>login.defs</filename> and then convert to tcb password
using <command>tcb_convert</command> (and re-enable
<option>USE_TCB</option> in <filename>login.defs</filename>.)
</para>
<para> <para>
The <command>pwunconv</command> command creates <emphasis The <command>pwunconv</command> command creates <emphasis
@ -80,6 +90,14 @@
and <emphasis remap='I'>shadow</emphasis> and then removes <emphasis and <emphasis remap='I'>shadow</emphasis> and then removes <emphasis
remap='I'>shadow</emphasis>. remap='I'>shadow</emphasis>.
</para> </para>
<para condition="tcb">
<command>pwunconv</command> does not work with
<option>USE_TCB</option> enabled. You should first switch back from
tcb to shadowed passwords using <command>tcb_unconvert</command>,
and then disable <option>USE_TCB</option> in
<filename>login.defs</filename> before using
<command>pwunconv</command>.
</para>
<para> <para>
The <command>grpconv</command> command creates <emphasis The <command>grpconv</command> command creates <emphasis
@ -161,6 +179,7 @@
&PASS_MAX_DAYS; &PASS_MAX_DAYS;
&PASS_MIN_DAYS; &PASS_MIN_DAYS;
&PASS_WARN_AGE; &PASS_WARN_AGE;
&USE_TCB;
</variablelist> </variablelist>
</refsect1> </refsect1>
@ -187,7 +206,13 @@
</citerefentry>, </citerefentry>,
<citerefentry> <citerefentry>
<refentrytitle>pwck</refentrytitle><manvolnum>8</manvolnum> <refentrytitle>pwck</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>. </citerefentry><phrase condition="tcb">,
<citerefentry>
<refentrytitle>tcb_convert</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>tcb_unconvert</refentrytitle><manvolnum>8</manvolnum>
</citerefentry></phrase>.
</para> </para>
</refsect1> </refsect1>
</refentry> </refentry>

6
man/useradd.8.xml
View File

@ -41,6 +41,9 @@
<!ENTITY SYS_UID_MAX SYSTEM "login.defs.d/SYS_UID_MAX.xml"> <!ENTITY SYS_UID_MAX SYSTEM "login.defs.d/SYS_UID_MAX.xml">
<!ENTITY UID_MAX SYSTEM "login.defs.d/UID_MAX.xml"> <!ENTITY UID_MAX SYSTEM "login.defs.d/UID_MAX.xml">
<!ENTITY UMASK SYSTEM "login.defs.d/UMASK.xml"> <!ENTITY UMASK SYSTEM "login.defs.d/UMASK.xml">
<!ENTITY TCB_AUTH_GROUP SYSTEM "login.defs.d/TCB_AUTH_GROUP.xml">
<!ENTITY TCB_SYMLINKS SYSTEM "login.defs.d/TCB_SYMLINKS.xml">
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
<!ENTITY USERGROUPS_ENAB SYSTEM "login.defs.d/USERGROUPS_ENAB.xml"> <!ENTITY USERGROUPS_ENAB SYSTEM "login.defs.d/USERGROUPS_ENAB.xml">
]> ]>
<refentry id='useradd.8'> <refentry id='useradd.8'>
@ -634,8 +637,11 @@
&PASS_WARN_AGE; &PASS_WARN_AGE;
&SYS_GID_MAX; <!-- documents also SYS_GID_MIN --> &SYS_GID_MAX; <!-- documents also SYS_GID_MIN -->
&SYS_UID_MAX; <!-- documents also SYS_UID_MIN --> &SYS_UID_MAX; <!-- documents also SYS_UID_MIN -->
&TCB_AUTH_GROUP;
&TCB_SYMLINKS;
&UID_MAX; <!-- documents also UID_MIN --> &UID_MAX; <!-- documents also UID_MIN -->
&UMASK; &UMASK;
&USE_TCB;
&USERGROUPS_ENAB; &USERGROUPS_ENAB;
</variablelist> </variablelist>
</refsect1> </refsect1>

4
man/userdel.8.xml
View File

@ -32,6 +32,8 @@
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY MAIL_DIR SYSTEM "login.defs.d/MAIL_DIR.xml"> <!ENTITY MAIL_DIR SYSTEM "login.defs.d/MAIL_DIR.xml">
<!ENTITY MAX_MEMBERS_PER_GROUP SYSTEM "login.defs.d/MAX_MEMBERS_PER_GROUP.xml"> <!ENTITY MAX_MEMBERS_PER_GROUP SYSTEM "login.defs.d/MAX_MEMBERS_PER_GROUP.xml">
<!ENTITY TCB_SYMLINKS SYSTEM "login.defs.d/TCB_SYMLINKS.xml">
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
<!ENTITY USERDEL_CMD SYSTEM "login.defs.d/USERDEL_CMD.xml"> <!ENTITY USERDEL_CMD SYSTEM "login.defs.d/USERDEL_CMD.xml">
<!ENTITY USERGROUPS_ENAB SYSTEM "login.defs.d/USERGROUPS_ENAB.xml"> <!ENTITY USERGROUPS_ENAB SYSTEM "login.defs.d/USERGROUPS_ENAB.xml">
]> ]>
@ -131,6 +133,8 @@
<variablelist> <variablelist>
&MAIL_DIR; <!-- documents also MAIL_FILE --> &MAIL_DIR; <!-- documents also MAIL_FILE -->
&MAX_MEMBERS_PER_GROUP; &MAX_MEMBERS_PER_GROUP;
&TCB_SYMLINKS;
&USE_TCB;
&USERDEL_CMD; &USERDEL_CMD;
&USERGROUPS_ENAB; &USERGROUPS_ENAB;
</variablelist> </variablelist>

4
man/usermod.8.xml
View File

@ -32,6 +32,8 @@
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY MAIL_DIR SYSTEM "login.defs.d/MAIL_DIR.xml"> <!ENTITY MAIL_DIR SYSTEM "login.defs.d/MAIL_DIR.xml">
<!ENTITY MAX_MEMBERS_PER_GROUP SYSTEM "login.defs.d/MAX_MEMBERS_PER_GROUP.xml"> <!ENTITY MAX_MEMBERS_PER_GROUP SYSTEM "login.defs.d/MAX_MEMBERS_PER_GROUP.xml">
<!ENTITY TCB_SYMLINKS SYSTEM "login.defs.d/TCB_SYMLINKS.xml">
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
]> ]>
<refentry id='usermod.8'> <refentry id='usermod.8'>
<!-- $Id$ --> <!-- $Id$ -->
@ -365,6 +367,8 @@
<variablelist> <variablelist>
&MAIL_DIR; <!-- documents also MAIL_FILE --> &MAIL_DIR; <!-- documents also MAIL_FILE -->
&MAX_MEMBERS_PER_GROUP; &MAX_MEMBERS_PER_GROUP;
&TCB_SYMLINKS;
&USE_TCB;
</variablelist> </variablelist>
</refsect1> </refsect1>

13
man/vipw.8.xml
View File

@ -31,6 +31,7 @@
--> -->
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.5//EN" <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY USE_TCB SYSTEM "login.defs.d/USE_TCB.xml">
]> ]>
<refentry id='vipw.8'> <refentry id='vipw.8'>
<!-- $Id$ --> <!-- $Id$ -->
@ -126,6 +127,18 @@
</variablelist> </variablelist>
</refsect1> </refsect1>
<refsect1 id='configuration'>
<title>CONFIGURATION</title>
<para>
The following configuration variables in
<filename>/etc/login.defs</filename> change the behavior of this
tool:
</para>
<variablelist>
&USE_TCB;
</variablelist>
</refsect1>
<refsect1 id='files'> <refsect1 id='files'>
<title>FILES</title> <title>FILES</title>
<variablelist> <variablelist>