From f6046f9b54c1f14d12a67fa66ca0c881b49e8ceb Mon Sep 17 00:00:00 2001 From: Sam Thursfield Date: Fri, 7 Jul 2017 10:01:07 +0000 Subject: Move old Baserock format definitions into old/ directory --- old/install-files/gnome/etc/pam.d/system-auth | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 old/install-files/gnome/etc/pam.d/system-auth (limited to 'old/install-files/gnome/etc/pam.d/system-auth') diff --git a/old/install-files/gnome/etc/pam.d/system-auth b/old/install-files/gnome/etc/pam.d/system-auth new file mode 100644 index 00000000..73d3968c --- /dev/null +++ b/old/install-files/gnome/etc/pam.d/system-auth @@ -0,0 +1,19 @@ +# Baserock customized /etc/pam.d/system-auth +# +# This configuration is modified from the upstream +# systemd provided file mostly because the upstream file +# tries to pass the invalid 'try_authtok' option to the +# pam_unix.so module. + +auth sufficient pam_unix.so nullok try_first_pass +auth requisite pam_deny.so + +account required pam_nologin.so +account sufficient pam_unix.so + +password sufficient pam_unix.so nullok sha512 shadow try_first_pass +password required pam_deny.so + +-session optional pam_loginuid.so +-session optional pam_systemd.so +session sufficient pam_unix.so -- cgit v1.2.1