From 4ba5ae5776c2e9ba4f297115c19923a928cf3e87 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Mon, 20 Nov 2017 14:51:36 +0000 Subject: Initial release / rename to utmps --- doc/utmps-utmpd.html | 77 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 77 insertions(+) create mode 100644 doc/utmps-utmpd.html (limited to 'doc/utmps-utmpd.html') diff --git a/doc/utmps-utmpd.html b/doc/utmps-utmpd.html new file mode 100644 index 0000000..57fa6ac --- /dev/null +++ b/doc/utmps-utmpd.html @@ -0,0 +1,77 @@ + + + + + + utmps: the utmps-utmpd program + + + + + + +

+utmps
+Software
+skarnet.org +

+ +

The utmps-utmpd program

+ +

+utmps-utmpd manages the utmp database. It expects to be able to create, read and +modify a file named utmp in the directory it is launched in. +

+ +

+ It is not meant to be called directly; instead, it is expected to be run from +a script as a part of a "utmpd" +local service. +

+ +

+ The examples/ subdirectory of the utmps package provides examples +on how to run such a service. + The simplest way to do so, for testing purposes, is a command line such as: +

+
s6-ipcserver -l0 utmpd-socket utmps-utmpd
+

+ while being in the /run/utmps directory. +

+ +

+/run/utmps/utmpd-socket is the default place where utmps's +implementation of the utmpx.h functions expects the utmpd +service to be. It can be changed at build time by giving the +--with-utmp-socket=PATH option to configure. +

+ +

+ utmps-utmpd does not listen to the socket itself: it reads from its +standard input and writes to its standard output. It relies +on a superserver such as +s6-ipcserver +to manage connections to the socket. An instance of utmps-utmpd is run +for every client connection; +every instance reads the effective uid of the client in an environment +variable set by the superserver, which allows it to filter operations - +for instance, it allows any user to read from the database but it only +allows root to write to it. +

+ +

+ If more fine-grained authorizations are required (only allowing +certain users and groups to connect to the service), the superserver +can be configured to enforce them. +

+ +

+ utmps-utmpd does not need to run as root, provided it can write its file; +it is recommended to create a utmp user and group, dedicated to +utmps-utmpd and +utmps-wtmpd operation, and run the +superserver as this user and group. +

+ + + -- cgit v1.2.3