From d05a64913e48fc4416bf21637eceb849f1e269e4 Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Wed, 28 Aug 2024 11:47:08 +0200 Subject: [PATCH] configs: drop pam_lastlog.so, does not rotate its log The PAM plugin lastlog, previously used (optional) by Netopeer2 and Rousette, does not rotate /var/log/lastlog, and since we don't have cron and logrotate this can potentially fill up /var. This patch disables pam_lastlog.so from the build and drops the two matching session lines for both Netopeer2 and Rousette. Both still log user access to sysrepo, so no critical functionality is lost. Follow-up to issue #542 Signed-off-by: Joachim Wiberg --- board/common/rootfs/etc/pam.d/netopeer2.conf | 1 - board/common/rootfs/etc/pam.d/rousette | 1 - configs/aarch64_defconfig | 1 - configs/r2s_defconfig | 1 - configs/riscv64_defconfig | 1 - configs/x86_64_defconfig | 1 - 6 files changed, 6 deletions(-) diff --git a/board/common/rootfs/etc/pam.d/netopeer2.conf b/board/common/rootfs/etc/pam.d/netopeer2.conf index ca894fe8..ec2a2006 100644 --- a/board/common/rootfs/etc/pam.d/netopeer2.conf +++ b/board/common/rootfs/etc/pam.d/netopeer2.conf @@ -16,5 +16,4 @@ password required pam_permit.so session required pam_loginuid.so session include common-session session optional pam_keyinit.so force revoke -session optional pam_lastlog.so showfailed session optional pam_motd.so diff --git a/board/common/rootfs/etc/pam.d/rousette b/board/common/rootfs/etc/pam.d/rousette index ca894fe8..ec2a2006 100644 --- a/board/common/rootfs/etc/pam.d/rousette +++ b/board/common/rootfs/etc/pam.d/rousette @@ -16,5 +16,4 @@ password required pam_permit.so session required pam_loginuid.so session include common-session session optional pam_keyinit.so force revoke -session optional pam_lastlog.so showfailed session optional pam_motd.so diff --git a/configs/aarch64_defconfig b/configs/aarch64_defconfig index 6472c0df..9b387584 100644 --- a/configs/aarch64_defconfig +++ b/configs/aarch64_defconfig @@ -65,7 +65,6 @@ BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y BR2_PACKAGE_LINUX_PAM=y -BR2_PACKAGE_LINUX_PAM_LASTLOG=y BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y BR2_PACKAGE_ONIGURUMA=y BR2_PACKAGE_AVAHI_DAEMON=y diff --git a/configs/r2s_defconfig b/configs/r2s_defconfig index 727d8c99..124291a2 100644 --- a/configs/r2s_defconfig +++ b/configs/r2s_defconfig @@ -81,7 +81,6 @@ BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y BR2_PACKAGE_LINUX_PAM=y -BR2_PACKAGE_LINUX_PAM_LASTLOG=y BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y BR2_PACKAGE_ONIGURUMA=y BR2_PACKAGE_AVAHI_DAEMON=y diff --git a/configs/riscv64_defconfig b/configs/riscv64_defconfig index 81397d90..346a49c6 100644 --- a/configs/riscv64_defconfig +++ b/configs/riscv64_defconfig @@ -75,7 +75,6 @@ BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y BR2_PACKAGE_LINUX_PAM=y -BR2_PACKAGE_LINUX_PAM_LASTLOG=y BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y BR2_PACKAGE_ONIGURUMA=y BR2_PACKAGE_AVAHI_DAEMON=y diff --git a/configs/x86_64_defconfig b/configs/x86_64_defconfig index 9ee17a4a..de7e0b3b 100644 --- a/configs/x86_64_defconfig +++ b/configs/x86_64_defconfig @@ -60,7 +60,6 @@ BR2_PACKAGE_LIBCURL_CURL=y BR2_PACKAGE_NETOPEER2_CLI=y BR2_PACKAGE_NSS_MDNS=y BR2_PACKAGE_LINUX_PAM=y -BR2_PACKAGE_LINUX_PAM_LASTLOG=y BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y BR2_PACKAGE_ONIGURUMA=y BR2_PACKAGE_AVAHI_DAEMON=y