On Fri, Dec 23, 2016 at 01:50:04PM +0000, Michael van Elst wrote: > [email protected] (Andreas Gustafsson) writes: > > >[email protected] wrote: > >> Also, I was looking through the mlist archives and saw mention that > >> /dev/console was suppose to be replaced by /dev/constty ? Maybe that's > >> the issue? > > >I don't think so, since the stock /etc/ttys has > > >console "/usr/libexec/getty Pc" vt100 on secure > >constty "/usr/libexec/getty Pc" vt100 off secure > > console gets redirected when you run X (in particular xconsole). > Running getty there isn't very helpful.
Also, this provides a nice, clean, portable way to require the root password to interrupt the boot (by marking console insecure) while allowing root to log in once the system is up and running (because the getty runs on constty, which is marked secure). To do this before, you used to have to name the specific underlying tty device -- which could change if system configuration changed, even on the same port. Thor
