---
name: "pam_securetty"
section: "8"
platform: "freebsd"
package: "base"
version: "16.0-CURRENT-20261027-61c70dc16a79"
release: "FreeBSD 16.0-CURRENT (2026-10-27)"
platforms: ["linux", "freebsd"]
url: "https://new.carta.tech/pam_securetty"
---

# pam\_securetty(8)

SecureTTY PAM module

## NAME

**pam\_securetty** – SecureTTY PAM module

## SYNOPSIS

\[*service-name*\] *module-type* *control-flag* *pam\_securetty* \[*options*\]

## DESCRIPTION

The SecureTTY service module for PAM, **pam\_securetty** provides functionality for only one PAM category: account management. In terms of the *module-type* parameter, this is the “account” feature. It also provides null functions for authentication and session management.

### SecureTTY Account Management Module

The SecureTTY account management component (**pam\_sm\_acct\_mgmt**()), returns failure if the user is attempting to authenticate as superuser, and the process is attached to an insecure TTY. In all other cases, the module returns success.

A TTY is considered secure if it is listed in */etc/ttys* and has the TTY\_SECURE flag set.

The following options may be passed to the authentication module:

- **debug**

  [syslog(3)](/syslog/3.md) debugging information at LOG\_DEBUG level.

- **no\_warn**

  suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.

## SEE ALSO

[getttynam(3)](/getttynam/3.md), [pam(3)](/pam/3.md), [syslog(3)](/syslog/3.md), [pam.conf(5)](/pam.conf/5.md), [ttys(5)](/ttys/5.md)