summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--CHANGELOG3
-rw-r--r--doc/modules/pam_access.sgml21
2 files changed, 20 insertions, 4 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 3be5741b..b59524c2 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -35,7 +35,8 @@ Where you should replace XXXXX with a bug-id.
0.73: please submit patches for this section with actual code/doc
patches!
-* added accessconf=<filename> feature to pam_access - request from Aldrin Martoq (Bug 111927 - agmorgan)
+* added accessconf=<filename> feature to pam_access - request from
+ Aldrin Martoq and Meelis Roos (Bugs 111927,117240 - agmorgan)
* fix for pam_limit module not dealing with all limits Adam J. Richter
(Bug 119554 - agmorgan)
* comment fix describing fail_delay callback in _pam_types.h (Bug
diff --git a/doc/modules/pam_access.sgml b/doc/modules/pam_access.sgml
index e192d12e..d6f317bd 100644
--- a/doc/modules/pam_access.sgml
+++ b/doc/modules/pam_access.sgml
@@ -34,8 +34,10 @@ account
<tag><bf>Clean code base:</bf></tag>
-<tag><bf>System dependencies:</bf></tag>
-Requires a configuration file <tt>/etc/security/access.conf</tt>
+<tag><bf>System dependencies:</bf></tag>
+Requires a configuration file. By default
+<tt>/etc/security/access.conf</tt> is used but this can be overridden.
+
<tag><bf>Network aware:</bf></tag>
Through <tt/PAM_TTY/ if set, otherwise attempts getting tty name of
@@ -57,6 +59,8 @@ Provides logdaemon style login access control.
<tag><bf>Recognized arguments:</bf></tag>
+<tt>accessconf=<it>/path/to/file.conf</it></tt>
+
<tag><bf>Description:</bf></tag>
This module provides logdaemon style login access control based on
@@ -66,6 +70,18 @@ logins. Diagnostics are reported through <tt/syslog(3)/. Wietse
Venema's <tt/login_access.c/ from <em/logdaemon-5.6/ is used with
several changes by A. Nogin.
+<p>
+The behavior of this module can be modified with the following
+arguments:
+<itemize>
+
+<item><tt>accessconf=/path/to/file.conf</tt> -
+indicate an alternative <em/access/ configuration file to override
+the default. This can be useful when different services need different
+access lists.
+
+</itemize>
+
<tag><bf>Examples/suggested usage:</bf></tag>
Use of module is recommended, for example, on administrative machines
@@ -90,4 +106,3 @@ A sample <tt>access.conf</tt> configuration file is included with the
distribution.
</descrip>
-