PAM_SECURETTY(8)

NAME
pam_securetty - SecureTTY PAM module

SYNOPSIS
[service-name] module-type control-flag pam_securetty [options]

DESCRIPTION
The SecureTTY authentication service module for PAM, pam_securetty provides functionality for only one PAM category: authentication. In terms of the module-type parameter, this is the “auth” feature. It also provides a null function for session management.

  SecureTTY Authentication Module
The SecureTTY authentication component (pam_sm_authenticate()), returns success if the user is attempting to authenticate as superuser, and the process is attached to a secure TTY. Alternatively, if the user is not authenticating as superuser, the module always returns success.

A TTY is defined as secure if its entry is fetchable from /etc/ttys by getttynam(3) (see ttys(5)), and the entry (a struct ttyent) has the TTY_SECURE flag set.

The following options may be passed to the authentication module:

debug
    syslog(3) debugging information at LOG_DEBUG level.

no_warn
    suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.

SEE ALSO
getttynam(3), syslog(3), pam.conf(5), ttys(5), pam(8)