HardenedBSD/etc/ttys

#
#	@(#)ttys	5.1 (Berkeley) 4/17/89
#
# name	getty				type	status		comments
#
# This entry needed for asking password when init goes to single-user mode
# If you want to be asked for password, change "secure" to "insecure" here
console	none				unknown	off secure
#
ttyv0	"/usr/libexec/getty Pc"		cons25	on  secure
# Virtual terminals
ttyv1	"/usr/libexec/getty Pc"		cons25	on secure
ttyv2	"/usr/libexec/getty Pc"		cons25	on secure
ttyv3	"/usr/libexec/getty Pc"		cons25	off secure
# Serial terminals
ttyd0	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd1	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd2	"/usr/libexec/getty std.9600"	unknown	off secure
ttyd3	"/usr/libexec/getty std.9600"	unknown	off secure
# Pseudo terminals
ttyp0	none			network
ttyp1	none			network
ttyp2	none			network
ttyp3	none			network
ttyp4	none			network
ttyp5	none			network
ttyp6	none			network
ttyp7	none			network
ttyp8	none			network
ttyp9	none			network
ttypa	none			network
ttypb	none			network
ttypc	none			network
ttypd	none			network
ttype	none			network
ttypf	none			network
ttyq0	none			network
ttyq1	none			network
ttyq2	none			network
ttyq3	none			network
ttyq4	none			network
ttyq5	none			network
ttyq6	none			network
ttyq7	none			network
ttyq8	none			network
ttyq9	none			network
ttyqa	none			network
ttyqb	none			network
ttyqc	none			network
ttyqd	none			network
ttyqe	none			network
ttyqf	none			network
Initial import of 386BSD 0.1 othersrc/etc 1993-06-20 15:41:45 +02:00			`#`
			`# @(#)ttys 5.1 (Berkeley) 4/17/89`
			`#`
			`# name getty type status comments`
			`#`
Choose secure single-user mode by default Without this entry init.bsdi don't ask root password when it goes to sigle-user. This entry must present here in any case, subject of arguing can be only default mode, I mean "secure" or "insecure" here. Please consider this entry like template and change "insecure" to "secure" if you are _shure_, but not back out whole line. # This entry needed for asking password when init goes to single-user mode console none unknown off insecure 1994-06-16 13:13:44 +02:00			`# This entry needed for asking password when init goes to single-user mode`
Only comment added to console entry: # If you want to be asked for password, change "secure" to "insecure" here 1994-06-16 14:34:53 +02:00			`# If you want to be asked for password, change "secure" to "insecure" here`
I'll leave the addition of the line, but there's just absolutely no way I'm going to allow this to be set to secure. People blow their password files away all the time, and I am not at all keen to lose the ability to get them recovered with the simple expedient of a single-user boot. 1994-06-16 14:14:08 +02:00			`console none unknown off secure`
Choose secure single-user mode by default Without this entry init.bsdi don't ask root password when it goes to sigle-user. This entry must present here in any case, subject of arguing can be only default mode, I mean "secure" or "insecure" here. Please consider this entry like template and change "insecure" to "secure" if you are _shure_, but not back out whole line. # This entry needed for asking password when init goes to single-user mode console none unknown off insecure 1994-06-16 13:13:44 +02:00			`#`
Use "cons25" for console too since we're now syscons. Turn on two VTY's by default; give user a couple of vty's to play with out of the box (leave 4th entry turned off for X). 1994-05-19 13:07:56 +02:00			`ttyv0 "/usr/libexec/getty Pc" cons25 on secure`
We lost ttyd for dialin lines, now restore it 1994-02-19 14:17:03 +01:00			`# Virtual terminals`
Use "cons25" for console too since we're now syscons. Turn on two VTY's by default; give user a couple of vty's to play with out of the box (leave 4th entry turned off for X). 1994-05-19 13:07:56 +02:00			`ttyv1 "/usr/libexec/getty Pc" cons25 on secure`
			`ttyv2 "/usr/libexec/getty Pc" cons25 on secure`
Added some other ttyvx lines for reference. They are marked as off so there is no functional difference. 1994-02-15 01:05:14 +01:00			`ttyv3 "/usr/libexec/getty Pc" cons25 off secure`
Rename tty0* -> ttyd*. Comment about "serial" terminals instead of "hardwired" or "dialin" terminals. 1994-12-06 20:59:24 +01:00			`# Serial terminals`
			`ttyd0 "/usr/libexec/getty std.9600" unknown off secure`
			`ttyd1 "/usr/libexec/getty std.9600" unknown off secure`
Fix some spaces back into tabs from a cut and past. 1994-05-13 05:39:21 +02:00			`ttyd2 "/usr/libexec/getty std.9600" unknown off secure`
			`ttyd3 "/usr/libexec/getty std.9600" unknown off secure`
We lost ttyd for dialin lines, now restore it 1994-02-19 14:17:03 +01:00			`# Pseudo terminals`
Initial import of 386BSD 0.1 othersrc/etc 1993-06-20 15:41:45 +02:00			`ttyp0 none network`
			`ttyp1 none network`
			`ttyp2 none network`
			`ttyp3 none network`
			`ttyp4 none network`
			`ttyp5 none network`
			`ttyp6 none network`
			`ttyp7 none network`
			`ttyp8 none network`
			`ttyp9 none network`
			`ttypa none network`
			`ttypb none network`
			`ttypc none network`
			`ttypd none network`
			`ttype none network`
			`ttypf none network`
			`ttyq0 none network`
			`ttyq1 none network`
			`ttyq2 none network`
			`ttyq3 none network`
			`ttyq4 none network`
			`ttyq5 none network`
			`ttyq6 none network`
			`ttyq7 none network`
			`ttyq8 none network`
			`ttyq9 none network`
			`ttyqa none network`
			`ttyqb none network`
			`ttyqc none network`
			`ttyqd none network`
			`ttyqe none network`
			`ttyqf none network`