HardenedBSD/etc/ttys

#
#	@(#)ttys	5.1 (Berkeley) 4/17/89
#
# name	getty				type	status		comments
#
# This entry needed for asking password when init goes to single-user mode
# If you want to be asked for password, change "secure" to "insecure" here
console	none				unknown	off secure
#
ttyv0	"/usr/libexec/getty Pc"		cons25	on  secure
# Virtual terminals
ttyv1	"/usr/libexec/getty Pc"		cons25	on secure
ttyv2	"/usr/libexec/getty Pc"		cons25	on secure
ttyv3	"/usr/libexec/getty Pc"		cons25	off secure
# Serial terminals
ttyd0	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd1	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd2	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd3	"/usr/libexec/getty std.9600"	unknown	off secure
# Pseudo terminals
ttyp0	none			network
ttyp1	none			network
ttyp2	none			network
ttyp3	none			network
ttyp4	none			network
ttyp5	none			network
ttyp6	none			network
ttyp7	none			network
ttyp8	none			network
ttyp9	none			network
ttypa	none			network
ttypb	none			network
ttypc	none			network
ttypd	none			network
ttype	none			network
ttypf	none			network
ttypg	none			network
ttyph	none			network
ttypi	none			network
ttypj	none			network
ttypk	none			network
ttypl	none			network
ttypm	none			network
ttypn	none			network
ttypo	none			network
ttypp	none			network
ttypq	none			network
ttypr	none			network
ttyps	none			network
ttypt	none			network
ttypu	none			network
ttypv	none			network
Initial import of 386BSD 0.1 othersrc/etc 1993-06-20 15:41:45 +02:00			`#`
			`# @(#)ttys 5.1 (Berkeley) 4/17/89`
			`#`
			`# name getty type status comments`
			`#`
Choose secure single-user mode by default Without this entry init.bsdi don't ask root password when it goes to sigle-user. This entry must present here in any case, subject of arguing can be only default mode, I mean "secure" or "insecure" here. Please consider this entry like template and change "insecure" to "secure" if you are _shure_, but not back out whole line. # This entry needed for asking password when init goes to single-user mode console none unknown off insecure 1994-06-16 13:13:44 +02:00			`# This entry needed for asking password when init goes to single-user mode`
Only comment added to console entry: # If you want to be asked for password, change "secure" to "insecure" here 1994-06-16 14:34:53 +02:00			`# If you want to be asked for password, change "secure" to "insecure" here`
I'll leave the addition of the line, but there's just absolutely no way I'm going to allow this to be set to secure. People blow their password files away all the time, and I am not at all keen to lose the ability to get them recovered with the simple expedient of a single-user boot. 1994-06-16 14:14:08 +02:00			`console none unknown off secure`
Choose secure single-user mode by default Without this entry init.bsdi don't ask root password when it goes to sigle-user. This entry must present here in any case, subject of arguing can be only default mode, I mean "secure" or "insecure" here. Please consider this entry like template and change "insecure" to "secure" if you are _shure_, but not back out whole line. # This entry needed for asking password when init goes to single-user mode console none unknown off insecure 1994-06-16 13:13:44 +02:00			`#`
Use "cons25" for console too since we're now syscons. Turn on two VTY's by default; give user a couple of vty's to play with out of the box (leave 4th entry turned off for X). 1994-05-19 13:07:56 +02:00			`ttyv0 "/usr/libexec/getty Pc" cons25 on secure`
We lost ttyd for dialin lines, now restore it 1994-02-19 14:17:03 +01:00			`# Virtual terminals`
Use "cons25" for console too since we're now syscons. Turn on two VTY's by default; give user a couple of vty's to play with out of the box (leave 4th entry turned off for X). 1994-05-19 13:07:56 +02:00			`ttyv1 "/usr/libexec/getty Pc" cons25 on secure`
			`ttyv2 "/usr/libexec/getty Pc" cons25 on secure`
Added some other ttyvx lines for reference. They are marked as off so there is no functional difference. 1994-02-15 01:05:14 +01:00			`ttyv3 "/usr/libexec/getty Pc" cons25 off secure`
Rename tty0* -> ttyd*. Comment about "serial" terminals instead of "hardwired" or "dialin" terminals. 1994-12-06 20:59:24 +01:00			`# Serial terminals`
			`ttyd0 "/usr/libexec/getty std.9600" unknown off secure`
			`ttyd1 "/usr/libexec/getty std.9600" unknown off secure`
Fix some spaces back into tabs from a cut and past. 1994-05-13 05:39:21 +02:00			`ttyd2 "/usr/libexec/getty std.9600" unknown off secure`
			`ttyd3 "/usr/libexec/getty std.9600" unknown off secure`
We lost ttyd for dialin lines, now restore it 1994-02-19 14:17:03 +01:00			`# Pseudo terminals`
Initial import of 386BSD 0.1 othersrc/etc 1993-06-20 15:41:45 +02:00			`ttyp0 none network`
			`ttyp1 none network`
			`ttyp2 none network`
			`ttyp3 none network`
			`ttyp4 none network`
			`ttyp5 none network`
			`ttyp6 none network`
			`ttyp7 none network`
			`ttyp8 none network`
			`ttyp9 none network`
			`ttypa none network`
			`ttypb none network`
			`ttypc none network`
			`ttypd none network`
			`ttype none network`
			`ttypf none network`
ttyq[0-9a-f] -> ttyp[g-v] 1995-05-05 12:06:34 +02:00			`ttypg none network`
			`ttyph none network`
			`ttypi none network`
			`ttypj none network`
			`ttypk none network`
			`ttypl none network`
			`ttypm none network`
			`ttypn none network`
			`ttypo none network`
			`ttypp none network`
			`ttypq none network`
			`ttypr none network`
			`ttyps none network`
			`ttypt none network`
			`ttypu none network`
			`ttypv none network`