2010-11-16 14:35:27 +01:00
|
|
|
From 13ed7b537ae655c6d67965f1486aa2e3b181e574 Mon Sep 17 00:00:00 2001
|
|
|
|
|
From: Ludwig Nussel <ludwig.nussel@suse.de>
|
|
|
|
|
Date: Tue, 17 Aug 2010 08:59:35 +0200
|
|
|
|
|
Subject: [PATCH 2/7] update man page for pam
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
doc/coreutils.texi | 34 +++++-----------------------------
|
|
|
|
|
1 files changed, 5 insertions(+), 29 deletions(-)
|
|
|
|
|
|
2011-01-03 20:39:07 +01:00
|
|
|
Index: doc/coreutils.texi
|
|
|
|
|
===================================================================
|
- Update to 8.16:
- Improvements:
* As a GNU extension, 'chmod', 'mkdir', and 'install' now accept
operators '-', '+', '=' followed by octal modes;
* Also, ordinary numeric modes with five or more digits no longer
preserve setuid and setgid bits, so that 'chmod 00755 FOO' now
clears FOO's setuid and setgid bits.
* dd now accepts the count_bytes, skip_bytes iflags and the
seek_bytes oflag, to more easily allow processing portions of a
file.
* dd now accepts the conv=sparse flag to attempt to create sparse
output, by seeking rather than writing to the output file.
* ln now accepts the --relative option, to generate a relative
symbolic link to a target, irrespective of how the target is
specified.
* split now accepts an optional "from" argument to
--numeric-suffixes, which changes the start number from the
default of 0.
* split now accepts the --additional-suffix option, to append an
additional static suffix to output file names.
* basename now supports the -a and -s options, which allow
processing of more than one argument at a time. Also the
complementary -z option was added to delimit output items with
the NUL character.
* dirname now supports more than one argument. Also the complementary
z option was added to delimit output items with the NUL character.
- Bug fixes
* du --one-file-system (-x) would ignore any non-directory
specified on the command line. For example, "touch f; du -x f"
would print nothing. [bug introduced in coreutils-8.15]
* mv now lets you move a symlink onto a same-inode destination
file that has two or more hard links.
* "mv A B" could succeed, yet A would remain.
* realpath no longer mishandles a root directory.
- Improvements
* ls can be much more efficient, especially with large directories
on file systems for which getfilecon-, ACL-check- and XATTR-
check-induced syscalls fail with ENOTSUP or similar.
* 'realpath --relative-base=dir' in isolation now implies
'--relative-to=dir' instead of causing a usage failure.
* split now supports an unlimited number of split files as default
behavior.
For a detaild list se NEWS in the documentation.
- Add up-to-date german translation.
- Add two upstream patches that speed up ls (bnc#752943):
* Cache (l)getfilecon calls to avoid the vast majority of the failing
underlying getxattr syscalls.
* Avoids always-failing queries for whether a file has a nontrivial
ACL and for whether a file has certain "capabilities".
OBS-URL: https://build.opensuse.org/package/show/Base:System/coreutils?expand=0&rev=147
2012-04-16 17:12:46 +02:00
|
|
|
--- doc/coreutils.texi.orig 2012-04-16 13:18:07.651694291 +0200
|
|
|
|
|
+++ doc/coreutils.texi 2012-04-16 13:18:14.825522204 +0200
|
|
|
|
|
@@ -15796,8 +15796,11 @@ to certain shells, etc.).
|
2010-11-16 14:35:27 +01:00
|
|
|
@findex syslog
|
|
|
|
|
@command{su} can optionally be compiled to use @code{syslog} to report
|
|
|
|
|
failed, and optionally successful, @command{su} attempts. (If the system
|
|
|
|
|
-supports @code{syslog}.) However, GNU @command{su} does not check if the
|
|
|
|
|
-user is a member of the @code{wheel} group; see below.
|
|
|
|
|
+supports @code{syslog}.)
|
|
|
|
|
+
|
|
|
|
|
+This version of @command{su} has support for using PAM for
|
|
|
|
|
+authentication. You can edit @file{/etc/pam.d/su} resp @file{/etc/pam.d/su-l}
|
|
|
|
|
+to customize its behaviour.
|
|
|
|
|
|
|
|
|
|
The program accepts the following options. Also see @ref{Common options}.
|
|
|
|
|
|
- Update to 8.16:
- Improvements:
* As a GNU extension, 'chmod', 'mkdir', and 'install' now accept
operators '-', '+', '=' followed by octal modes;
* Also, ordinary numeric modes with five or more digits no longer
preserve setuid and setgid bits, so that 'chmod 00755 FOO' now
clears FOO's setuid and setgid bits.
* dd now accepts the count_bytes, skip_bytes iflags and the
seek_bytes oflag, to more easily allow processing portions of a
file.
* dd now accepts the conv=sparse flag to attempt to create sparse
output, by seeking rather than writing to the output file.
* ln now accepts the --relative option, to generate a relative
symbolic link to a target, irrespective of how the target is
specified.
* split now accepts an optional "from" argument to
--numeric-suffixes, which changes the start number from the
default of 0.
* split now accepts the --additional-suffix option, to append an
additional static suffix to output file names.
* basename now supports the -a and -s options, which allow
processing of more than one argument at a time. Also the
complementary -z option was added to delimit output items with
the NUL character.
* dirname now supports more than one argument. Also the complementary
z option was added to delimit output items with the NUL character.
- Bug fixes
* du --one-file-system (-x) would ignore any non-directory
specified on the command line. For example, "touch f; du -x f"
would print nothing. [bug introduced in coreutils-8.15]
* mv now lets you move a symlink onto a same-inode destination
file that has two or more hard links.
* "mv A B" could succeed, yet A would remain.
* realpath no longer mishandles a root directory.
- Improvements
* ls can be much more efficient, especially with large directories
on file systems for which getfilecon-, ACL-check- and XATTR-
check-induced syscalls fail with ENOTSUP or similar.
* 'realpath --relative-base=dir' in isolation now implies
'--relative-to=dir' instead of causing a usage failure.
* split now supports an unlimited number of split files as default
behavior.
For a detaild list se NEWS in the documentation.
- Add up-to-date german translation.
- Add two upstream patches that speed up ls (bnc#752943):
* Cache (l)getfilecon calls to avoid the vast majority of the failing
underlying getxattr syscalls.
* Avoids always-failing queries for whether a file has a nontrivial
ACL and for whether a file has certain "capabilities".
OBS-URL: https://build.opensuse.org/package/show/Base:System/coreutils?expand=0&rev=147
2012-04-16 17:12:46 +02:00
|
|
|
@@ -15878,33 +15881,6 @@ Exit status:
|
2010-11-16 14:35:27 +01:00
|
|
|
the exit status of the subshell otherwise
|
|
|
|
|
@end display
|
|
|
|
|
|
|
|
|
|
-@cindex wheel group, not supported
|
|
|
|
|
-@cindex group wheel, not supported
|
|
|
|
|
-@cindex fascism
|
|
|
|
|
-@subsection Why GNU @command{su} does not support the @samp{wheel} group
|
|
|
|
|
-
|
|
|
|
|
-(This section is by Richard Stallman.)
|
|
|
|
|
-
|
|
|
|
|
-@cindex Twenex
|
|
|
|
|
-@cindex MIT AI lab
|
|
|
|
|
-Sometimes a few of the users try to hold total power over all the
|
|
|
|
|
-rest. For example, in 1984, a few users at the MIT AI lab decided to
|
|
|
|
|
-seize power by changing the operator password on the Twenex system and
|
|
|
|
|
-keeping it secret from everyone else. (I was able to thwart this coup
|
|
|
|
|
-and give power back to the users by patching the kernel, but I
|
|
|
|
|
-wouldn't know how to do that in Unix.)
|
|
|
|
|
-
|
|
|
|
|
-However, occasionally the rulers do tell someone. Under the usual
|
|
|
|
|
-@command{su} mechanism, once someone learns the root password who
|
|
|
|
|
-sympathizes with the ordinary users, he or she can tell the rest. The
|
|
|
|
|
-``wheel group'' feature would make this impossible, and thus cement the
|
|
|
|
|
-power of the rulers.
|
|
|
|
|
-
|
|
|
|
|
-I'm on the side of the masses, not that of the rulers. If you are
|
|
|
|
|
-used to supporting the bosses and sysadmins in whatever they do, you
|
|
|
|
|
-might find this idea strange at first.
|
|
|
|
|
-
|
|
|
|
|
-
|
|
|
|
|
@node timeout invocation
|
|
|
|
|
@section @command{timeout}: Run a command with a time limit
|
|
|
|
|
|
