You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
21 lines
904 B
21 lines
904 B
7 years ago
|
#%PAM-1.0
|
||
|
|
auth required pam_sepermit.so
|
||
|
|
auth substack password-auth
|
||
|
|
auth include postlogin
|
||
|
|
# Used with polkit to reauthorize users in remote sessions
|
||
|
|
-auth optional pam_reauthorize.so prepare
|
||
|
|
account required pam_nologin.so
|
||
|
|
account include password-auth
|
||
|
|
password include password-auth
|
||
|
|
# pam_selinux.so close should be the first session rule
|
||
|
|
session required pam_selinux.so close
|
||
|
|
session required pam_loginuid.so
|
||
|
|
# pam_selinux.so open should only be followed by sessions to be executed in the user context
|
||
|
|
session required pam_selinux.so open env_params
|
||
|
|
session required pam_namespace.so
|
||
|
|
session optional pam_keyinit.so force revoke
|
||
|
|
session include password-auth
|
||
|
|
session include postlogin
|
||
|
|
# Used with polkit to reauthorize users in remote sessions
|
||
|
|
-session optional pam_reauthorize.so prepare
|