Config.in 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358
  1. # DO NOT EDIT. This file is generated from Config.src
  2. #
  3. # For a description of the syntax of this configuration file,
  4. # see scripts/kbuild/config-language.txt.
  5. #
  6. menu "Login/Password Management Utilities"
  7. config BUSYBOX_ADD_SHELL
  8. bool "add-shell"
  9. default y if DESKTOP
  10. help
  11. Add shells to /etc/shells.
  12. config BUSYBOX_REMOVE_SHELL
  13. bool "remove-shell"
  14. default y if DESKTOP
  15. help
  16. Remove shells from /etc/shells.
  17. config BUSYBOX_FEATURE_SHADOWPASSWDS
  18. bool "Support for shadow passwords"
  19. default y
  20. help
  21. Build support for shadow password in /etc/shadow. This file is only
  22. readable by root and thus the encrypted passwords are no longer
  23. publicly readable.
  24. config BUSYBOX_USE_BB_PWD_GRP
  25. bool "Use internal password and group functions rather than system functions"
  26. default n
  27. help
  28. If you leave this disabled, busybox will use the system's password
  29. and group functions. And if you are using the GNU C library
  30. (glibc), you will then need to install the /etc/nsswitch.conf
  31. configuration file and the required /lib/libnss_* libraries in
  32. order for the password and group functions to work. This generally
  33. makes your embedded system quite a bit larger.
  34. Enabling this option will cause busybox to directly access the
  35. system's /etc/password, /etc/group files (and your system will be
  36. smaller, and I will get fewer emails asking about how glibc NSS
  37. works). When this option is enabled, you will not be able to use
  38. PAM to access remote LDAP password servers and whatnot. And if you
  39. want hostname resolution to work with glibc, you still need the
  40. /lib/libnss_* libraries.
  41. If you need to use glibc's nsswitch.conf mechanism
  42. (e.g. if user/group database is NOT stored in /etc/passwd etc),
  43. you must NOT use this option.
  44. If you enable this option, it will add about 1.5k.
  45. config BUSYBOX_USE_BB_SHADOW
  46. bool "Use internal shadow password functions"
  47. default n
  48. depends on BUSYBOX_USE_BB_PWD_GRP && BUSYBOX_FEATURE_SHADOWPASSWDS
  49. help
  50. If you leave this disabled, busybox will use the system's shadow
  51. password handling functions. And if you are using the GNU C library
  52. (glibc), you will then need to install the /etc/nsswitch.conf
  53. configuration file and the required /lib/libnss_* libraries in
  54. order for the shadow password functions to work. This generally
  55. makes your embedded system quite a bit larger.
  56. Enabling this option will cause busybox to directly access the
  57. system's /etc/shadow file when handling shadow passwords. This
  58. makes your system smaller (and I will get fewer emails asking about
  59. how glibc NSS works). When this option is enabled, you will not be
  60. able to use PAM to access shadow passwords from remote LDAP
  61. password servers and whatnot.
  62. config BUSYBOX_USE_BB_CRYPT
  63. bool "Use internal crypt functions"
  64. default n
  65. help
  66. Busybox has internal DES and MD5 crypt functions.
  67. They produce results which are identical to corresponding
  68. standard C library functions.
  69. If you leave this disabled, busybox will use the system's
  70. crypt functions. Most C libraries use large (~70k)
  71. static buffers there, and also combine them with more general
  72. DES encryption/decryption.
  73. For busybox, having large static buffers is undesirable,
  74. especially on NOMMU machines. Busybox also doesn't need
  75. DES encryption/decryption and can do with smaller code.
  76. If you enable this option, it will add about 4.8k of code
  77. if you are building dynamically linked executable.
  78. In static build, it makes code _smaller_ by about 1.2k,
  79. and likely many kilobytes less of bss.
  80. config BUSYBOX_USE_BB_CRYPT_SHA
  81. bool "Enable SHA256/512 crypt functions"
  82. default n
  83. depends on BUSYBOX_USE_BB_CRYPT
  84. help
  85. Enable this if you have passwords starting with "$5$" or "$6$"
  86. in your /etc/passwd or /etc/shadow files. These passwords
  87. are hashed using SHA256 and SHA512 algorithms. Support for them
  88. was added to glibc in 2008.
  89. With this option off, login will fail password check for any
  90. user which has password encrypted with these algorithms.
  91. config BUSYBOX_ADDUSER
  92. bool "adduser"
  93. default n
  94. help
  95. Utility for creating a new user account.
  96. config BUSYBOX_FEATURE_ADDUSER_LONG_OPTIONS
  97. bool "Enable long options"
  98. default n
  99. depends on BUSYBOX_ADDUSER && BUSYBOX_LONG_OPTS
  100. help
  101. Support long options for the adduser applet.
  102. config BUSYBOX_FEATURE_CHECK_NAMES
  103. bool "Enable sanity check on user/group names in adduser and addgroup"
  104. default n
  105. depends on BUSYBOX_ADDUSER || BUSYBOX_ADDGROUP
  106. help
  107. Enable sanity check on user and group names in adduser and addgroup.
  108. To avoid problems, the user or group name should consist only of
  109. letters, digits, underscores, periods, at signs and dashes,
  110. and not start with a dash (as defined by IEEE Std 1003.1-2001).
  111. For compatibility with Samba machine accounts "$" is also supported
  112. at the end of the user or group name.
  113. config BUSYBOX_LAST_ID
  114. int "Last valid uid or gid for adduser and addgroup"
  115. depends on BUSYBOX_ADDUSER || BUSYBOX_ADDGROUP
  116. default 60000
  117. help
  118. Last valid uid or gid for adduser and addgroup
  119. config BUSYBOX_FIRST_SYSTEM_ID
  120. int "First valid system uid or gid for adduser and addgroup"
  121. depends on BUSYBOX_ADDUSER || BUSYBOX_ADDGROUP
  122. range 0 64900
  123. default 100
  124. help
  125. First valid system uid or gid for adduser and addgroup
  126. config BUSYBOX_LAST_SYSTEM_ID
  127. int "Last valid system uid or gid for adduser and addgroup"
  128. depends on BUSYBOX_ADDUSER || BUSYBOX_ADDGROUP
  129. range 0 64900
  130. default 999
  131. help
  132. Last valid system uid or gid for adduser and addgroup
  133. config BUSYBOX_ADDGROUP
  134. bool "addgroup"
  135. default n
  136. help
  137. Utility for creating a new group account.
  138. config BUSYBOX_FEATURE_ADDGROUP_LONG_OPTIONS
  139. bool "Enable long options"
  140. default n
  141. depends on BUSYBOX_ADDGROUP && BUSYBOX_LONG_OPTS
  142. help
  143. Support long options for the addgroup applet.
  144. config BUSYBOX_FEATURE_ADDUSER_TO_GROUP
  145. bool "Support for adding users to groups"
  146. default n
  147. depends on BUSYBOX_ADDGROUP
  148. help
  149. If called with two non-option arguments,
  150. addgroup will add an existing user to an
  151. existing group.
  152. config BUSYBOX_DELUSER
  153. bool "deluser"
  154. default n
  155. help
  156. Utility for deleting a user account.
  157. config BUSYBOX_DELGROUP
  158. bool "delgroup"
  159. default n
  160. help
  161. Utility for deleting a group account.
  162. config BUSYBOX_FEATURE_DEL_USER_FROM_GROUP
  163. bool "Support for removing users from groups"
  164. default n
  165. depends on BUSYBOX_DELGROUP
  166. help
  167. If called with two non-option arguments, deluser
  168. or delgroup will remove an user from a specified group.
  169. config BUSYBOX_GETTY
  170. bool "getty"
  171. default y
  172. select BUSYBOX_FEATURE_SYSLOG
  173. help
  174. getty lets you log in on a tty. It is normally invoked by init.
  175. Note that you can save a few bytes by disabling it and
  176. using login applet directly.
  177. If you need to reset tty attributes before calling login,
  178. this script approximates getty:
  179. exec </dev/$1 >/dev/$1 2>&1 || BUSYBOX_exit 1
  180. reset
  181. stty sane; stty ispeed 38400; stty ospeed 38400
  182. printf "%s login: " "`hostname`"
  183. read -r login
  184. exec /bin/login "$login"
  185. config BUSYBOX_LOGIN
  186. bool "login"
  187. default y
  188. select BUSYBOX_FEATURE_SYSLOG
  189. help
  190. login is used when signing onto a system.
  191. Note that Busybox binary must be setuid root for this applet to
  192. work properly.
  193. config BUSYBOX_LOGIN_SESSION_AS_CHILD
  194. bool "Run logged in session in a child process"
  195. default y if PAM
  196. depends on BUSYBOX_LOGIN
  197. help
  198. Run the logged in session in a child process. This allows
  199. login to clean up things such as utmp entries or PAM sessions
  200. when the login session is complete. If you use PAM, you
  201. almost always would want this to be set to Y, else PAM session
  202. will not be cleaned up.
  203. config BUSYBOX_PAM
  204. bool "Support for PAM (Pluggable Authentication Modules)"
  205. depends on !BUSYBOX_DISABLE_PAM
  206. default n
  207. depends on BUSYBOX_LOGIN
  208. help
  209. Use PAM in login(1) instead of direct access to password database.
  210. config BUSYBOX_LOGIN_SCRIPTS
  211. bool "Support for login scripts"
  212. depends on BUSYBOX_LOGIN
  213. default n
  214. help
  215. Enable this if you want login to execute $LOGIN_PRE_SUID_SCRIPT
  216. just prior to switching from root to logged-in user.
  217. config BUSYBOX_FEATURE_NOLOGIN
  218. bool "Support for /etc/nologin"
  219. default n
  220. depends on BUSYBOX_LOGIN
  221. help
  222. The file /etc/nologin is used by (some versions of) login(1).
  223. If it exists, non-root logins are prohibited.
  224. config BUSYBOX_FEATURE_SECURETTY
  225. bool "Support for /etc/securetty"
  226. default n
  227. depends on BUSYBOX_LOGIN
  228. help
  229. The file /etc/securetty is used by (some versions of) login(1).
  230. The file contains the device names of tty lines (one per line,
  231. without leading /dev/) on which root is allowed to login.
  232. config BUSYBOX_PASSWD
  233. bool "passwd"
  234. default n
  235. select BUSYBOX_FEATURE_SYSLOG
  236. help
  237. passwd changes passwords for user and group accounts. A normal user
  238. may only change the password for his/her own account, the super user
  239. may change the password for any account. The administrator of a group
  240. may change the password for the group.
  241. Note that Busybox binary must be setuid root for this applet to
  242. work properly.
  243. config BUSYBOX_FEATURE_PASSWD_WEAK_CHECK
  244. bool "Check new passwords for weakness"
  245. default n
  246. depends on BUSYBOX_PASSWD
  247. help
  248. With this option passwd will refuse new passwords which are "weak".
  249. config BUSYBOX_CRYPTPW
  250. bool "cryptpw"
  251. default n
  252. help
  253. Encrypts the given password with the crypt(3) libc function
  254. using the given salt. Debian has this utility under mkpasswd
  255. name. Busybox provides mkpasswd as an alias for cryptpw.
  256. config BUSYBOX_MKPASSWD
  257. bool "mkpasswd"
  258. default n
  259. help
  260. Encrypts the given password with the crypt(3) libc function
  261. using the given salt. Debian has this utility under mkpasswd
  262. name. Busybox provides mkpasswd as an alias for cryptpw.
  263. config BUSYBOX_CHPASSWD
  264. bool "chpasswd"
  265. default n
  266. help
  267. Reads a file of user name and password pairs from standard input
  268. and uses this information to update a group of existing users.
  269. config BUSYBOX_FEATURE_DEFAULT_PASSWD_ALGO
  270. string "Default password encryption method (passwd -a, cryptpw -m parameter)"
  271. default "des"
  272. depends on BUSYBOX_PASSWD || BUSYBOX_CRYPTPW
  273. help
  274. Possible choices are "d[es]", "m[d5]", "s[ha256]" or "sha512".
  275. config BUSYBOX_SU
  276. bool "su"
  277. default n
  278. select BUSYBOX_FEATURE_SYSLOG
  279. help
  280. su is used to become another user during a login session.
  281. Invoked without a username, su defaults to becoming the super user.
  282. Note that Busybox binary must be setuid root for this applet to
  283. work properly.
  284. config BUSYBOX_FEATURE_SU_SYSLOG
  285. bool "Enable su to write to syslog"
  286. default y
  287. depends on BUSYBOX_SU
  288. config BUSYBOX_FEATURE_SU_CHECKS_SHELLS
  289. bool "Enable su to check user's shell to be listed in /etc/shells"
  290. depends on BUSYBOX_SU
  291. default y
  292. config BUSYBOX_SULOGIN
  293. bool "sulogin"
  294. default n
  295. select BUSYBOX_FEATURE_SYSLOG
  296. help
  297. sulogin is invoked when the system goes into single user
  298. mode (this is done through an entry in inittab).
  299. config BUSYBOX_VLOCK
  300. bool "vlock"
  301. default n
  302. help
  303. Build the "vlock" applet which allows you to lock (virtual) terminals.
  304. Note that Busybox binary must be setuid root for this applet to
  305. work properly.
  306. endmenu