summaryrefslogtreecommitdiff
path: root/install-files/gnome/etc/pam.d/system-auth
blob: 73d3968c7fd84ee281bd15d1a3507994fff9a809 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
# Baserock customized /etc/pam.d/system-auth
#
# This configuration is modified from the upstream
# systemd provided file mostly because the upstream file
# tries to pass the invalid 'try_authtok' option to the
# pam_unix.so module.

auth     sufficient pam_unix.so nullok try_first_pass
auth     requisite  pam_deny.so

account  required   pam_nologin.so
account  sufficient pam_unix.so

password sufficient pam_unix.so nullok sha512 shadow try_first_pass
password required   pam_deny.so

-session optional   pam_loginuid.so
-session optional   pam_systemd.so
session  sufficient pam_unix.so