kentpeacock / rpms / openssh

Forked from rpms/openssh 2 years ago
Clone
Petr Šabata 81d24c
#%PAM-1.0
Petr Šabata 81d24c
auth       substack     password-auth
Petr Šabata 81d24c
auth       include      postlogin
Petr Šabata 81d24c
account    required     pam_sepermit.so
Petr Šabata 81d24c
account    required     pam_nologin.so
Petr Šabata 81d24c
account    include      password-auth
Petr Šabata 81d24c
password   include      password-auth
Petr Šabata 81d24c
# pam_selinux.so close should be the first session rule
Petr Šabata 81d24c
session    required     pam_selinux.so close
Petr Šabata 81d24c
session    required     pam_loginuid.so
Petr Šabata 81d24c
# pam_selinux.so open should only be followed by sessions to be executed in the user context
Petr Šabata 81d24c
session    required     pam_selinux.so open env_params
Petr Šabata 81d24c
session    required     pam_namespace.so
Petr Šabata 81d24c
session    optional     pam_keyinit.so force revoke
Petr Šabata 81d24c
session    optional     pam_motd.so
Petr Šabata 81d24c
session    include      password-auth
Petr Šabata 81d24c
session    include      postlogin