1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
.\" Copyright (C) 1999 Red Hat Software, Inc.
.\"
.\" This is free software; you can redistribute it and/or modify it
.\" under the terms of the GNU General Public License as published by
.\" the Free Software Foundation; either version 2 of the License, or
.\" (at your option) any later version.
.\"
.\" This program is distributed in the hope that it will be useful, but
.\" WITHOUT ANY WARRANTY; without even the implied warranty of
.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
.\" General Public License for more details.
.\"
.\" You should have received a copy of the GNU General Public License
.\" along with this program; if not, write to the Free Software
.\" Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
.\" MA 02110-1301, USA.
.\"
.TH CONSOLEHELPER 8 "18 March 1999" "Red Hat Software"
.SH NAME
consolehelper \- A wrapper that helps console users run system programs
.SH SYNOPSIS
.I progname
[
.I options
]
.SH DESCRIPTION
.B consolehelper
is a tool that makes it easy for console users to run system programs,
doing authentication via PAM (which can be set up to trust all console
users or to ask for a password at the system administrator's discretion).
When possible, the authentication is done graphically; otherwise, it is
done within the text console from which consolehelper was started.
It is intended to be completely transparent. This means that the user
will never run the consolehelper program directly. Instead, programs
like /sbin/shutdown are paired with a link from /usr/bin/shutdown to
/usr/bin/consolehelper. Then when non-root users (specifically, users
without /sbin in their path, or /sbin after /usr/bin) call the
"shutdown" program, consolehelper will be invoked to authenticate
the action and then invoke /sbin/shutdown. (consolehelper itself has
no priviledges; it calls the
.IR userhelper (8)
program do the real work.)
consolehelper requires that a PAM configuration for every managed program
exist. So to make /sbin/\fIfoo\fP or /usr/sbin/\fIfoo\fP managed, you
need to create a link from /usr/bin/\fIfoo\fP to @BINDIR@/consolehelper
and create the file /etc/pam.d/\fIfoo\fP, normally using the
.IR pam_console (8)
PAM module.
.SH OPTIONS
This program has no command line options of its own; it passes all
command line options on to the program it is calling.
.SH "SEE ALSO"
.IR userhelper (8)
.SH AUTHOR
Michael K. Johnson <johnsonm@redhat.com>
|
