openwrt/package/busybox/config/loginutils/Config.in

   1 #
   2 # For a description of the syntax of this configuration file,
   3 # see scripts/kbuild/config-language.txt.
   4 #
   5
   6 menu "Login/Password Management Utilities"
   7
   8 config BUSYBOX_CONFIG_USE_BB_PWD_GRP
   9         bool "Use internal password and group functions rather than system functions"
  10         default n
  11         help
  12             If you leave this disabled, busybox will use the system's password
  13             and group functions.  And if you are using the GNU C library
  14             (glibc), you will then need to install the /etc/nsswitch.conf
  15             configuration file and the required /lib/libnss_* libraries in
  16             order for the password and group functions to work.  This generally
  17             makes your embedded system quite a bit larger.
  18
  19             Enabling this option will cause busybox to directly access the
  20             system's /etc/password, /etc/group files (and your system will be
  21             smaller, and I will get fewer emails asking about how glibc NSS
  22             works).  When this option is enabled, you will not be able to use
  23             PAM to access remote LDAP password servers and whatnot.  And if you
  24             want hostname resolution to work with glibc, you still need the
  25             /lib/libnss_* libraries.
  26
  27             If you enable this option, it will add about 1.5k to busybox.
  28
  29
  30 config BUSYBOX_CONFIG_ADDGROUP
  31         bool "addgroup"
  32         default n
  33         help
  34           Utility for creating a new group account.
  35
  36 config BUSYBOX_CONFIG_DELGROUP
  37         bool "delgroup"
  38         default n
  39         help
  40           Utility for deleting a group account.
  41
  42 config BUSYBOX_CONFIG_ADDUSER
  43         bool "adduser"
  44         default n
  45         help
  46           Utility for creating a new user account.
  47
  48 config BUSYBOX_CONFIG_DELUSER
  49         bool "deluser"
  50         default n
  51         help
  52           Utility for deleting a user account.
  53
  54 config BUSYBOX_CONFIG_GETTY
  55         bool "getty"
  56         default n
  57         help
  58           getty lets you log in on a tty, it is normally invoked by init.
  59
  60 config BUSYBOX_CONFIG_FEATURE_U_W_TMP
  61         bool "  Support utmp and wtmp files"
  62         depends on BUSYBOX_CONFIG_GETTY || BUSYBOX_CONFIG_LOGIN || BUSYBOX_CONFIG_SU || BUSYBOX_CONFIG_WHO || BUSYBOX_CONFIG_LAST
  63         default n
  64         help
  65           The files /var/run/utmp and /var/run/wtmp can be used to track when
  66           user's have logged into and logged out of the system, allowing programs
  67           such as 'who' and 'last' to list who is currently logged in.
  68
  69 config BUSYBOX_CONFIG_LOGIN
  70         bool "login"
  71         default n
  72         select BUSYBOX_CONFIG_FEATURE_SUID
  73         help
  74           login is used when signing onto a system.
  75
  76           Note that Busybox binary must be setuid root for this applet to
  77           work properly.
  78
  79 config BUSYBOX_CONFIG_FEATURE_SECURETTY
  80         bool "  Support for /etc/securetty"
  81         default n
  82         depends on BUSYBOX_CONFIG_LOGIN
  83         help
  84           The file  /etc/securetty  is used by (some versions of) login(1).
  85           The file contains the device names of tty lines (one per line,
  86           without leading /dev/) on which root is allowed to login.
  87
  88 config BUSYBOX_CONFIG_PASSWD
  89         bool "passwd"
  90         default y
  91         select BUSYBOX_CONFIG_FEATURE_SUID
  92         help
  93           passwd changes passwords for user and group accounts.  A normal user
  94           may only change the password for his/her own account, the super user
  95           may change the password for any account.  The administrator of a group
  96           may change the password for the group.
  97
  98           Note that Busybox binary must be setuid root for this applet to
  99           work properly.
 100
 101 config BUSYBOX_CONFIG_SU
 102         bool "su"
 103         default n
 104         select BUSYBOX_CONFIG_FEATURE_SUID
 105         help
 106           su is used to become another user during a login session.
 107           Invoked without a username, su defaults to becoming the super user.
 108
 109           Note that Busybox binary must be setuid root for this applet to
 110           work properly.
 111
 112 config BUSYBOX_CONFIG_SULOGIN
 113         bool "sulogin"
 114         default n
 115         help
 116           sulogin is invoked when the system goes into single user
 117           mode (this is done through an entry in inittab).
 118
 119 config BUSYBOX_CONFIG_VLOCK
 120         bool "vlock"
 121         default n
 122         select BUSYBOX_CONFIG_FEATURE_SUID
 123         help
 124           Build the "vlock" applet which allows you to lock (virtual) terminals.
 125
 126           Note that Busybox binary must be setuid root for this applet to
 127           work properly.
 128
 129 comment "Common options for adduser, deluser, login, su"
 130         depends on BUSYBOX_CONFIG_ADDUSER || BUSYBOX_CONFIG_DELUSER || BUSYBOX_CONFIG_LOGIN || BUSYBOX_CONFIG_SU
 131
 132 config BUSYBOX_CONFIG_FEATURE_SHADOWPASSWDS
 133         bool "Support for shadow passwords"
 134         default n
 135         depends on BUSYBOX_CONFIG_ADDUSER || BUSYBOX_CONFIG_DELUSER || BUSYBOX_CONFIG_LOGIN || BUSYBOX_CONFIG_SU
 136         help
 137           Build support for shadow password in /etc/shadow.  This file is only
 138           readable by root and thus the encrypted passwords are no longer
 139           publicly readable.
 140
 141 config BUSYBOX_CONFIG_USE_BB_SHADOW
 142         bool "  Use busybox shadow password functions"
 143         default n
 144         depends on BUSYBOX_CONFIG_USE_BB_PWD_GRP && BUSYBOX_CONFIG_FEATURE_SHADOWPASSWDS
 145         help
 146             If you leave this disabled, busybox will use the system's shadow
 147             password handling functions.  And if you are using the GNU C library
 148             (glibc), you will then need to install the /etc/nsswitch.conf
 149             configuration file and the required /lib/libnss_* libraries in
 150             order for the shadow password functions to work.  This generally
 151             makes your embedded system quite a bit larger.
 152
 153             Enabling this option will cause busybox to directly access the
 154             system's /etc/shadow file when handling shadow passwords.  This
 155             makes your system smaller and I will get fewer emails asking about
 156             how glibc NSS works).  When this option is enabled, you will not be
 157             able to use PAM to access shadow passwords from remote LDAP
 158             password servers and whatnot.
 159
 160 endmenu
 161