mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-30 12:33:02 +02:00
Joachim Wiberg
d05a64913e
The PAM plugin lastlog, previously used (optional) by Netopeer2 and Rousette, does not rotate /var/log/lastlog, and since we don't have cron and logrotate this can potentially fill up /var. This patch disables pam_lastlog.so from the build and drops the two matching session lines for both Netopeer2 and Rousette. Both still log user access to sysrepo, so no critical functionality is lost. Follow-up to issue #542 Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
20 lines
605 B
Plaintext
20 lines
605 B
Plaintext
#%PAM-1.0
|
|
auth requisite pam_nologin.so
|
|
auth [success=1 default=ignore] pam_unix.so nullok
|
|
auth requisite pam_deny.so
|
|
auth required pam_permit.so
|
|
|
|
account requisite pam_nologin.so
|
|
account [success=1 default=ignore] pam_unix.so
|
|
account requisite pam_deny.so
|
|
account required pam_permit.so
|
|
|
|
password [success=1 default=ignore] pam_unix.so
|
|
password requisite pam_deny.so
|
|
password required pam_permit.so
|
|
|
|
session required pam_loginuid.so
|
|
session include common-session
|
|
session optional pam_keyinit.so force revoke
|
|
session optional pam_motd.so
|