menu "Login/Password Management Utilities"
+INSERT
+
config FEATURE_SHADOWPASSWDS
bool "Support for shadow passwords"
- default n
+ default y
help
Build support for shadow password in /etc/shadow. This file is only
readable by root and thus the encrypted passwords are no longer
config USE_BB_PWD_GRP
bool "Use internal password and group functions rather than system functions"
- default n
+ default y
help
If you leave this disabled, busybox will use the system's password
and group functions. And if you are using the GNU C library
config USE_BB_CRYPT_SHA
bool "Enable SHA256/512 crypt functions"
- default n
+ default y
depends on USE_BB_CRYPT
help
Enable this if you have passwords starting with "$5$" or "$6$"
With this option off, login will fail password check for any
user which has password encrypted with these algorithms.
-config ADDGROUP
- bool "addgroup"
- default n
+config ADDUSER
+ bool "adduser"
+ default y
help
- Utility for creating a new group account.
+ Utility for creating a new user account.
-config FEATURE_ADDGROUP_LONG_OPTIONS
+config FEATURE_ADDUSER_LONG_OPTIONS
bool "Enable long options"
- default n
- depends on ADDGROUP && LONG_OPTS
- help
- Support long options for the addgroup applet.
-
-config FEATURE_ADDUSER_TO_GROUP
- bool "Support for adding users to groups"
- default n
- depends on ADDGROUP
- help
- If called with two non-option arguments,
- addgroup will add an existing user to an
- existing group.
-
-config DELGROUP
- bool "delgroup"
- default n
- help
- Utility for deleting a group account.
-
-config FEATURE_DEL_USER_FROM_GROUP
- bool "Support for removing users from groups"
- default n
- depends on DELGROUP
+ default y
+ depends on ADDUSER && LONG_OPTS
help
- If called with two non-option arguments, deluser
- or delgroup will remove an user from a specified group.
+ Support long options for the adduser applet.
config FEATURE_CHECK_NAMES
bool "Enable sanity check on user/group names in adduser and addgroup"
For compatibility with Samba machine accounts "$" is also supported
at the end of the user or group name.
-config ADDUSER
- bool "adduser"
- default n
- help
- Utility for creating a new user account.
-
-config FEATURE_ADDUSER_LONG_OPTIONS
- bool "Enable long options"
- default n
- depends on ADDUSER && LONG_OPTS
- help
- Support long options for the adduser applet.
-
config FIRST_SYSTEM_ID
int "First valid system uid or gid for adduser and addgroup"
depends on ADDUSER || ADDGROUP
help
Last valid system uid or gid for adduser and addgroup
+config ADDGROUP
+ bool "addgroup"
+ default y
+ help
+ Utility for creating a new group account.
+
+config FEATURE_ADDGROUP_LONG_OPTIONS
+ bool "Enable long options"
+ default y
+ depends on ADDGROUP && LONG_OPTS
+ help
+ Support long options for the addgroup applet.
+
+config FEATURE_ADDUSER_TO_GROUP
+ bool "Support for adding users to groups"
+ default y
+ depends on ADDGROUP
+ help
+ If called with two non-option arguments,
+ addgroup will add an existing user to an
+ existing group.
+
config DELUSER
bool "deluser"
- default n
+ default y
help
Utility for deleting a user account.
+config DELGROUP
+ bool "delgroup"
+ default y
+ help
+ Utility for deleting a group account.
+
+config FEATURE_DEL_USER_FROM_GROUP
+ bool "Support for removing users from groups"
+ default y
+ depends on DELGROUP
+ help
+ If called with two non-option arguments, deluser
+ or delgroup will remove an user from a specified group.
+
config GETTY
bool "getty"
- default n
+ default y
select FEATURE_SYSLOG
help
- getty lets you log in on a tty, it is normally invoked by init.
+ getty lets you log in on a tty. It is normally invoked by init.
+
+ Note that you can save a few bytes by disabling it and
+ using login applet directly.
+ If you need to reset tty attributes before calling login,
+ this script approximates getty:
+
+ exec </dev/$1 >/dev/$1 2>&1 || exit 1
+ reset
+ stty sane; stty ispeed 38400; stty ospeed 38400
+ printf "%s login: " "`hostname`"
+ read -r login
+ exec /bin/login "$login"
config LOGIN
bool "login"
- default n
- select FEATURE_SUID
+ default y
select FEATURE_SYSLOG
help
login is used when signing onto a system.
Note that Busybox binary must be setuid root for this applet to
work properly.
+config LOGIN_SESSION_AS_CHILD
+ bool "Run logged in session in a child process"
+ default y if PAM
+ depends on LOGIN
+ help
+ Run the logged in session in a child process. This allows
+ login to clean up things such as utmp entries or PAM sessions
+ when the login session is complete. If you use PAM, you
+ almost always would want this to be set to Y, else PAM session
+ will not be cleaned up.
+
config PAM
bool "Support for PAM (Pluggable Authentication Modules)"
default n
config LOGIN_SCRIPTS
bool "Support for login scripts"
depends on LOGIN
- default n
+ default y
help
Enable this if you want login to execute $LOGIN_PRE_SUID_SCRIPT
just prior to switching from root to logged-in user.
config PASSWD
bool "passwd"
- default n
- select FEATURE_SUID
+ default y
select FEATURE_SYSLOG
help
passwd changes passwords for user and group accounts. A normal user
config CRYPTPW
bool "cryptpw"
- default n
+ default y
help
Encrypts the given password with the crypt(3) libc function
using the given salt. Debian has this utility under mkpasswd
config CHPASSWD
bool "chpasswd"
- default n
+ default y
help
Reads a file of user name and password pairs from standard input
and uses this information to update a group of existing users.
+config FEATURE_DEFAULT_PASSWD_ALGO
+ string "Default password encryption method (passwd -a, cryptpw -m parameter)"
+ default "des"
+ depends on PASSWD || CRYPTPW
+ help
+ Possible choices are "d[es]", "m[d5]", "s[ha256]" or "sha512".
+
config SU
bool "su"
- default n
- select FEATURE_SUID
+ default y
select FEATURE_SYSLOG
help
su is used to become another user during a login session.
config SULOGIN
bool "sulogin"
- default n
+ default y
select FEATURE_SYSLOG
help
sulogin is invoked when the system goes into single user
config VLOCK
bool "vlock"
- default n
- select FEATURE_SUID
+ default y
help
Build the "vlock" applet which allows you to lock (virtual) terminals.