Imported Upstream version 1.5
This commit is contained in:
Shawn Willden
commit
6236f92ec8
8
Makefile
Normal file
8
Makefile
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
CFLAGS=-fomit-frame-pointer -m486 -O2 -s
|
||||
timeoutd: timeoutd.c Makefile
|
||||
$(CC) $(CFLAGS) -o timeoutd timeoutd.c
|
||||
|
||||
install:
|
||||
install -o root -g system -m 2111 timeoutd /usr/etc/timeoutd
|
||||
install -o man -g info -m 444 timeoutd.8 /usr/man/man8
|
||||
install -o man -g info -m 444 timeouts.5 /usr/man/man5
|
||||
44
README
Normal file
44
README
Normal file
|
|
@ -0,0 +1,44 @@
|
|||
TIMEOUTD 1.4 by Shane Alderton
|
||||
|
||||
Timeoutd is a programme which allows you to control the following
|
||||
characteristics on a user by user and/or group by group basis for
|
||||
each tty on your system:
|
||||
|
||||
- maximum idle time
|
||||
- maximum time per session
|
||||
- maximum time per day
|
||||
- times when people can/can't login on specific ttys
|
||||
|
||||
To build timeoutd, you should make any changes to the makefile for
|
||||
your preferred compilation options, then simply:
|
||||
|
||||
make
|
||||
|
||||
The next step is to install a timeouts file in /usr/etc specifying
|
||||
the parameters for each line/user/group combination. You can use
|
||||
the sample file provided in the distribution as a starting point
|
||||
after reading the timeoutd.8 and timeouts.5 man pages.
|
||||
|
||||
Once you have installed the timeouts file in /usr/etc, you can type:
|
||||
|
||||
make install
|
||||
|
||||
to install the timeoutd binaries and man pages.
|
||||
|
||||
Then it is just a matter of running /usr/etc/timeoutd. You may want
|
||||
to add a line to your /etc/rc or /etc/rc.local (or whatever) to run
|
||||
timeoutd at boot time.
|
||||
|
||||
If you wish, you can also modify your login programme to have timeoutd
|
||||
run at login time to check whether each user is allowed to login or not.
|
||||
Otherwise, users who are not allowed to login will be logged off within
|
||||
1 minute of logging in.
|
||||
|
||||
Another (albeit less certain) way of doing this is to put the following
|
||||
line in /etc/profile near the top of the file:
|
||||
|
||||
/usr/etc/timeoutd `whoami` `basename \`tty\`` || exit
|
||||
|
||||
|
||||
Please sends bugs, comments, suggestions to:
|
||||
shane@ion.apana.org.au (Shane Alderton)
|
||||
68
dump_wtmp.c
Normal file
68
dump_wtmp.c
Normal file
|
|
@ -0,0 +1,68 @@
|
|||
#include <stdio.h>
|
||||
#include <utmp.h>
|
||||
#include <time.h>
|
||||
|
||||
main()
|
||||
{
|
||||
FILE *fp;
|
||||
struct utmp ut;
|
||||
struct tm *tm;
|
||||
char user[9];
|
||||
char host[17];
|
||||
char line[13];
|
||||
|
||||
if ((fp = fopen(UTMP_FILE, "r")) == NULL)
|
||||
{
|
||||
printf("Could not open wtmp file!");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
/* Go to end of file minus one structure */
|
||||
fseek(fp, -1L * sizeof(struct utmp), SEEK_END);
|
||||
|
||||
while (fread(&ut, sizeof(struct utmp), 1, fp) == 1)
|
||||
{
|
||||
tm = localtime(&ut.ut_time);
|
||||
|
||||
/*
|
||||
if (tm->tm_year != now.tm_year || tm->tm_yday != now.tm_yday)
|
||||
break;
|
||||
*/
|
||||
|
||||
printf("%02d:%02d type=", tm->tm_hour,tm->tm_min);
|
||||
switch (ut.ut_type)
|
||||
{
|
||||
#ifndef SUNOS
|
||||
case RUN_LVL: printf("RUN_LVL");
|
||||
break;
|
||||
case BOOT_TIME: printf("BOOT_TIME");
|
||||
break;
|
||||
case NEW_TIME: printf("NEW_TIME");
|
||||
break;
|
||||
case OLD_TIME: printf("OLD_TIME");
|
||||
break;
|
||||
case INIT_PROCESS: printf("INIT_PROCESS");
|
||||
break;
|
||||
case LOGIN_PROCESS: printf("LOGIN_PROCESS");
|
||||
break;
|
||||
case USER_PROCESS: printf("USER_PROCESS");
|
||||
break;
|
||||
case DEAD_PROCESS: printf("DEAD_PROCESS");
|
||||
break;
|
||||
#endif
|
||||
default: printf("UNKNOWN!(type=%d)", ut.ut_type);
|
||||
}
|
||||
strncpy(user, ut.ut_user, 8);
|
||||
user[8] = 0;
|
||||
strncpy(host, ut.ut_host, 16);
|
||||
host[16] = 0;
|
||||
strncpy(line, ut.ut_line, 12);
|
||||
line[12] = 0;
|
||||
printf(" line=%s host=%s user=%s\n", line, host, user);
|
||||
|
||||
|
||||
/* Position the file pointer 2 structures back */
|
||||
if (fseek(fp, -2 * sizeof(struct utmp), SEEK_CUR) < 0) break;
|
||||
}
|
||||
fclose(fp);
|
||||
}
|
||||
64
timeoutd.8
Normal file
64
timeoutd.8
Normal file
|
|
@ -0,0 +1,64 @@
|
|||
.TH TIMEOUTD 8
|
||||
.SH NAME
|
||||
timeoutd \- Enforce idle and session time restrictions
|
||||
.SH SYNOPSIS
|
||||
.B /usr/etc/timeoutd [ user tty ]
|
||||
.SH DESCRIPTION
|
||||
.I timeoutd enforces the time restrictions specified in /usr/etc/timeouts.
|
||||
When invoked in daemon mode (without any parameters) timeoutd backgrounds
|
||||
itself, then scans \fB/etc/utmp\fR every minute and checks /usr/etc/timeouts
|
||||
for an entry which matches that user, based on:
|
||||
.IP "\- The current day and time"
|
||||
.IP "\- The tty that the user is currently logged in on"
|
||||
.IP "\- The user's login ID"
|
||||
.IP "\- Any primary or secondary groups the user is in"
|
||||
.PP
|
||||
If a match is found, the limits specified for that entry are enforced by
|
||||
sending a SIGHUP (Hangup signal) to the user's login process, followed
|
||||
after 5 seconds by a SIGKILL (Sure kill signal) to ensure the user is
|
||||
logged out.
|
||||
.PP
|
||||
Where possible, timeoutd will send a warning to the user
|
||||
every minute for 5 minutes (or other time specified in /usr/etc/timeouts)
|
||||
before logging them out. Warnings are not sent for exceeded idle limits,
|
||||
as this would count as activity on the terminal.
|
||||
.PP
|
||||
Timeoutd currently allows limits to be set on idle time as well as amount
|
||||
of time logged in per session and per day.
|
||||
.PP
|
||||
When calculating idle time, any activity on the terminal, either incoming
|
||||
(such as typing) or outgoing (such as information displayed on the screen)
|
||||
is counted as activity. This is to prevent logoffs during file transfers.
|
||||
.PP
|
||||
Under Linux, timeoutd detects when a serial line is in SLIP mode and disables
|
||||
idle time limit checking (as the last read/write times for the tty are
|
||||
not updated).
|
||||
.PP
|
||||
Debug information, error messages and notification of users who have been
|
||||
timed out are all recorded via syslog (facility=DAEMON).
|
||||
.PP
|
||||
Timeoutd can also be invoked by login to check whether a user is allowed
|
||||
to login at that time, or whether they have exceeded their daily time limit.
|
||||
When invoked in this way, by passing a username and tty (without the leading
|
||||
/dev) on the command line, timeoutd returns one of the following exit codes:
|
||||
.IP "0 User is allowed to login
|
||||
.IP "1 Fatal error
|
||||
.IP "5 Incorrect command line format
|
||||
.IP "10 User has exceeded maximum daily connect time
|
||||
.IP "20 User not permitted to login at this time on this tty
|
||||
.IP "30 Internal error checking user name (probably invalid user name)
|
||||
.SH FILES
|
||||
.IP "/usr/etc/timeouts \- lists valid login times and idle/session time restrictions
|
||||
.IP "/etc/utmp \- current login sessions
|
||||
.IP "/usr/adm/wtmp \- for calculating total logged in time for current day
|
||||
.SH BUGS
|
||||
Sessions which end in the current day but started before midnight
|
||||
will not be considered when calculating total daily logged in time for a
|
||||
user on that day. This will not, however, affect checking of the
|
||||
session limit, which should limit such problems. It does
|
||||
mean that a user could conceivably exceed their maximum daily time
|
||||
by one extra session if they log on just before midnight.
|
||||
.SH "SEE ALSO"
|
||||
.BR timeouts "(5)
|
||||
.SH "WRITTEN BY"
|
||||
Shane Alderton <shane@ion.apana.org.au>
|
||||
1183
timeoutd.c
Normal file
1183
timeoutd.c
Normal file
File diff suppressed because it is too large
Load diff
98
timeouts.5
Normal file
98
timeouts.5
Normal file
|
|
@ -0,0 +1,98 @@
|
|||
.TH TIMEOUTS 5
|
||||
.SH NAME
|
||||
timeouts \- user login/idle/session time limits
|
||||
.SH DESCRIPTION
|
||||
The timeouts file is used by timeoutd (8) to impose limits on what times
|
||||
particular users or groups of users can login on particular
|
||||
terminals, how long a user can be idle (no activity on the terminal),
|
||||
how long a user can be logged in for in a single session and how much
|
||||
time a user can spend on a set of terminals each day.
|
||||
.PP
|
||||
The timeouts file is a plain ASCII file. Blank lines, or lines where
|
||||
the first non blank character is a hash (#) will be ignored. All other
|
||||
lines should be of the format:
|
||||
.PP
|
||||
TIMES:TTYS:USERS:GROUPS:MAXIDLE:MAXSESS:MAXDAY:WARN
|
||||
.PP
|
||||
OR
|
||||
.PP
|
||||
TIMES:TTYS:USERS:GROUPS:LOGINSTATUS
|
||||
.PP
|
||||
\fBTIMES\fR is a comma separated list of times for which the entry is valid.
|
||||
The entry will be ignored completely outside these times.
|
||||
The format for each element of the times field is: DD[DD...][SSSS-EEEE]
|
||||
Where:
|
||||
.IP
|
||||
DD is one of Su Mo Tu We Th Fr Sa Wk Al
|
||||
.br
|
||||
(Al = SuMoTuWeThFrSa Wk = MoTuWeThFr)
|
||||
.IP
|
||||
SSSS and EEEE are start and end times in 24 hour notation.
|
||||
.PP
|
||||
\fBTTYS\fR is a comma separated list of ttys (without the leading /dev/)
|
||||
for which the entry is valid. A trailing asterisk (*) will result in
|
||||
any tty which matches up to the asterisk being accepted. An asterisk
|
||||
by itself matches all tttys.
|
||||
.PP
|
||||
\fBUSERS\fR is a comma separated list of users, with pattern matching
|
||||
as for TTYS.
|
||||
.PP
|
||||
\fBGROUPS\fR is a comma separated list of groups, with pattern matching
|
||||
as for TTYS.
|
||||
.PP
|
||||
\fBMAXIDLE\fR is the number of minutes which a user may remain idle
|
||||
without being logged off. Idle time is defined as time during which
|
||||
no activity (no output to the tty or input from the tty) is detected.
|
||||
This is not checked under Linux if the tty is in SLIP mode.
|
||||
.PP
|
||||
\fBMAXSESS\fR is the maximum number of minutes that a user
|
||||
can be logged in for in a single session if they match that entry.
|
||||
.PP
|
||||
\fBMAXDAY\fR is the maximum number of minutes per day that a user
|
||||
can be logged in for if they match that entry.
|
||||
.PP
|
||||
\fBWARN\fR provides a facility for notifying a user that they are
|
||||
about to be logged off due to exceeding MAXSESS or MAXDAY. WARN is
|
||||
measured in minutes with a default value of 5. The user will receive
|
||||
a warning every minute for WARN minutes before being logged off.
|
||||
.PP
|
||||
\fBLOGINSTATUS\fR is one of either LOGIN or NOLOGIN and is used to
|
||||
limit the times during which certain people or groups of people can
|
||||
use specific terminals.
|
||||
.PP
|
||||
When searching through the timeouts file, timeoutd will use the first
|
||||
entry for which the TIMES:TTYS:USERS:GROUPS fields all match the
|
||||
user who is being checked.
|
||||
.PP
|
||||
When calculating the number of minutes for which a user has been logged
|
||||
on in the given day, timeoutd will consider logged in time on all
|
||||
ttys covered by the TTYS field for the matching entry.
|
||||
.PP
|
||||
.SH EXAMPLES
|
||||
.IP Al:*:*:*:10
|
||||
Would match all all users in any group regardless of which tty they are
|
||||
logged in on and allow an idle time of 10 minutes, with no daily or
|
||||
session time limits.
|
||||
.IP SaSu:ttyS*:*:subs:5:90:180:3
|
||||
Would match all users in group subs logged on to any dialin line (assuming
|
||||
all serial lines are dialins) over the weekend and allow them 5 minutes
|
||||
idle time, 90 minutes per session and 180 minutes per day, with a 3
|
||||
minute warning period before logoff will occur.
|
||||
.IP Wk:ttyS2,ttyS4:*:subs,other:10::60:5
|
||||
Would match all users in groups subs or other logged on to ttyS2 or ttyS4
|
||||
on a weekday
|
||||
and allow them 10 minutes idle time, no session limit and a 60 minute
|
||||
daily limit with a 5 minute warning period. Note that this provides
|
||||
for 60 minutes per day across both ttyS2 and ttyS4, NOT 60 minutes on ttyS2
|
||||
and 60 minutes on ttyS4.
|
||||
.IP Wk2000-0700:ttyS*:*:*:NOLOGIN
|
||||
Would match all dialled in users (if all ttyS lines were modems) and
|
||||
prevent them logging in before 7am or after 8pm on weekdays.
|
||||
.SH FILES
|
||||
/usr/etc/timeouts
|
||||
.SH BUGS
|
||||
See timeoutd(8)
|
||||
.SH "SEE ALSO"
|
||||
.BR timeoutd "(8)
|
||||
.SH "WRITTEN BY"
|
||||
Shane Alderton <shane@ion.apana.org.au>
|
||||
Loading…
Reference in a new issue