|
|
|
The /etc/fbtab file contains information that is used by login.1 getty.8 and the window system (for example, sunview.1 to change the owner, group, and permissions of window system devices upon logging into or out of a console device. By default, all lines in this file are commented out. That is, all window security is disabled. To enable window security, edit /etc/fbtab, log out, and log back in. You must edit this file before window security can be enabled.
The owner and group of the devices listed in /etc/fbtab are set to the owner and group of the console. The permissions are set as specified in /etc/fbtab. As in the example below, 0600 is the recommended permissions for normal security.
Fields are separated by TAB and/or SPACE characters. Blank lines and comments can appear anywhere in the file; comments are delimited by `#' and a NEWLINE.
The first field specifies the name of a console device (for example, /dev/console). The second field specifies the permissions to which the devices in the device_list field (third field) will be set. A device_list is a colon-separated list of device names (the full pathname is required).
Once the devices are owned by the user, their permissions and ownership can be changed using chmod.1v and chown.8 as with any other user-owned file.
The following example entry in the /etc/fbtab file enables normal window security:
/dev/console 0600 /dev/kbd:/dev/mouse /dev/console 0600 /dev/fb:/dev/bwone0:/dev/bwtwo0 /dev/console 0600 /dev/cgone0:/dev/cgtwo0:/dev/cgthree0:/dev/cgfour0 /dev/console 0600 /dev/cgsix0:/dev/cgeight0:/dev/cgnine0 /dev/console 0600 /dev/gpone0a:/dev/gpone0b:/dev/gpone0c:/dev/gpone0d
This entry specifies that upon login to /dev/console, the owner, group and permissions of all supported devices will be set to the user's username, the user's group and 0600, respectively. You need only specify the devices supported by your configuration. Upon logout, the owner and group of these devices will be reset to root and wheel. The permissions remain as set in the /etc/fbtab file.
|
|
|
Created by unroff & hp-tools. © somebody (See intro for details). All Rights Reserved. Last modified 11/5/97