summaryrefslogtreecommitdiff
path: root/modules/pam_tty_audit/README
diff options
context:
space:
mode:
Diffstat (limited to 'modules/pam_tty_audit/README')
-rw-r--r--modules/pam_tty_audit/README10
1 files changed, 9 insertions, 1 deletions
diff --git a/modules/pam_tty_audit/README b/modules/pam_tty_audit/README
index f769f53..dd18da7 100644
--- a/modules/pam_tty_audit/README
+++ b/modules/pam_tty_audit/README
@@ -27,6 +27,13 @@ open_only
closing the session. Using this option is necessary for some services that
don't fork() to run the authenticated session, such as sudo.
+log_passwd
+
+ Log keystrokes when ECHO mode is off but ICANON mode is active. This is the
+ mode in which the tty is placed during password entry. By default,
+ passwords are not logged. This option may not be available on older kernels
+ (3.9?).
+
NOTES
When TTY auditing is enabled, it is inherited by all processes started by that
@@ -47,5 +54,6 @@ session required pam_tty_audit.so disable=* enable=root
AUTHOR
-pam_tty_audit was written by Miloslav Trmač <mitr@redhat.com>.
+pam_tty_audit was written by Miloslav Trmač <mitr@redhat.com>. The log_passwd
+option was added by Richard Guy Briggs <rgb@redhat.com>.