initcond(ADM)                   19 June 1992                   initcond(ADM)


 Name

    initcond - special security actions for init and getty

 Syntax

    /tcb/lib/initcond [ init | getty ] [ args ... ]

 Description

    To save space in the init(M) and getty(M) programs, which are memory
    resident, the space intensive security actions are done in initcond as a
    sub-process of these programs.

    If the argument is init, one of two actions may occur.  First, no argu-
    ment means that sulogin(ADM) should prompt for and verify a single user
    password if required by the System Default database.  This is used for
    password checking before a single user shell.  Second, if two other argu-
    ments are supplied, they are the terminal device name and the user name
    respectively of the session that just terminated.  This information is
    reflected in both the Protected Password and Terminal Control databases.

    If the argument is getty, and one additional argument is provided, it is
    the terminal to be invalidated before a login.  initcond invalidates a
    terminal by setting a restricted set of permissions on the terminal de-
    vice and by using stopio(S) to invalidate all open file descriptors that
    reference the terminal.  These include synonym devices for the same phy-
    sical device as listed in the device assignment database.

 Files

    /tcb/files/initcondlog      Log file for init and getty events
    /etc/auth/system/ttys       Terminal Control database
    /etc/auth/system/devassign  Device Assignment database

 See also

    getdvagent(S), getprtcent(S), stopio(S)

    ``Maintaining system security'', chapter of the System Administrator's
    Guide

 Value added

    initcond is an extension of AT&T System V provided by The Santa Cruz
    Operation, Inc.