summaryrefslogtreecommitdiff
path: root/modules/pam_tty_audit/README
diff options
context:
space:
mode:
authorSteve Langasek <vorlon@debian.org>2019-02-11 22:09:25 -0800
committerSteve Langasek <vorlon@debian.org>2019-02-11 22:09:59 -0800
commit1a2cb1c4f6c710630ebe46a728bb8b8fb5f68946 (patch)
treeba50a9673cb6324c5dfcbdad3f5144588772fbfe /modules/pam_tty_audit/README
parentb12d7595dfcc20c809f3c11c579e34d115b3060e (diff)
parent668b13da8f830c38388cecac45539972e80cb246 (diff)
Merge upstream version 1.3.1
Diffstat (limited to 'modules/pam_tty_audit/README')
-rw-r--r--modules/pam_tty_audit/README17
1 files changed, 11 insertions, 6 deletions
diff --git a/modules/pam_tty_audit/README b/modules/pam_tty_audit/README
index 83e58c3a..ac947a32 100644
--- a/modules/pam_tty_audit/README
+++ b/modules/pam_tty_audit/README
@@ -11,15 +11,15 @@ OPTIONS
disable=patterns
- For each user matching one of comma-separated glob patterns, disable TTY
- auditing. This overrides any previous enable option matching the same user
- name on the command line.
+ For each user matching patterns, disable TTY auditing. This overrides any
+ previous enable option matching the same user name on the command line. See
+ NOTES for further description of patterns.
enable=patterns
- For each user matching one of comma-separated glob patterns, enable TTY
- auditing. This overrides any previous disable option matching the same user
- name on the command line.
+ For each user matching patterns, enable TTY auditing. This overrides any
+ previous disable option matching the same user name on the command line.
+ See NOTES for further description of patterns.
open_only
@@ -45,6 +45,11 @@ the first option for most daemons using PAM.
To view the data that was logged by the kernel to audit use the command
aureport --tty.
+The patterns are comma separated lists of glob patterns or ranges of uids. A
+range is specified as min_uid:max_uid where one of these values can be empty.
+If min_uid is empty only user with the uid max_uid will be matched. If max_uid
+is empty users with the uid greater than or equal to min_uid will be matched.
+
EXAMPLES
Audit all administrative actions.