Relevant BUGIDs:

Purpose of commit: docfix

Commit summary:
---------------
2010-11-25  Tomas Mraz  <tm@t8m.info>

        * modules/pam_securetty/pam_securetty.8.xml: Improve documentation
        of the kernel console feature and the noconsole option.

diff --git a/ChangeLog b/ChangeLog
index c42e20efb96c1b27066fb2e687ef36b1da16b5a7..ae7e5da134c5a9fec1fdd62f29aaa4cf542ea643 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2010-11-25  Tomas Mraz  <tm@t8m.info>
+
+       * modules/pam_securetty/pam_securetty.8.xml: Improve documentation
+       of the kernel console feature and the noconsole option.
+
 2010-11-24  Thorsten Kukuk  <kukuk@thkukuk.de>
 
        * modules/pam_securetty/pam_securetty.c: Parse console= kernel

diff --git a/modules/pam_securetty/pam_securetty.8.xml b/modules/pam_securetty/pam_securetty.8.xml
index 90d99a3d4e426ac1fe0eb2a1d11da9ae3bcd9a4b..c5d6c5fe3caa29f040380dd10b7d47a569a7d8d6 100644 (file)
--- a/modules/pam_securetty/pam_securetty.8.xml
+++ b/modules/pam_securetty/pam_securetty.8.xml
@@ -33,7 +33,9 @@
       user is logging in on a "secure" tty, as defined by the listing
       in <filename>/etc/securetty</filename>. pam_securetty also checks
       to make sure that <filename>/etc/securetty</filename> is a plain
-      file and not world writable.
+      file and not world writable. It will also allow root logins on
+      the tty specified with <option>console=</option> switch on the
+      kernel command line.
     </para>
     <para>
       This module has no effect on non-root users and requires that the
@@ -67,10 +69,9 @@
         </term>
         <listitem>
           <para>
-            By default pam_securetty will allow root logins on the
-            kernel console device, as specified with the console=
-            switch on the kernel command line. Use this switch to turn
-            of this behaviour.
+            Do not automatically allow root logins on the kernel console
+            device, as specified on the kernel command line, if it is
+            not also specified in the <filename>/etc/securetty</filename> file.
           </para>
         </listitem>
       </varlistentry>