diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2024-07-24 22:13:29 +0800 |
|---|---|---|
| committer | Joe MacDonald <joe.macdonald@siemens.com> | 2024-07-24 10:52:09 -0400 |
| commit | 15574a43debfd23d83721737ad0b1ae6e5cd002e (patch) | |
| tree | de26102926f643978760db8f73eeee017d0eab5a | |
| parent | 9b392cb0fd8f621257dd61da72f888753e5e93b3 (diff) | |
| download | meta-selinux-15574a43debfd23d83721737ad0b1ae6e5cd002e.tar.gz | |
shadow: comment out pam_lastlog line in login pam file
The pam_lastlog module is deprecated and disabled by default in
linux-pam since 1.5.3[1]. Comment out this line to avoid loading
pam_lastlog module by default. Users can use lastlog2 provided by
util-linux as an alternative[2].
[1] https://github.com/linux-pam/linux-pam/commit/357a4ddbe9b4b10ebd805d2af3e32f3ead5b8816
[2] https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=c2e299d0acb2fa4ad1691452fa0eae76520bbdb0
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@siemens.com>
| -rw-r--r-- | recipes-extended/shadow/files/pam.d/login | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/recipes-extended/shadow/files/pam.d/login b/recipes-extended/shadow/files/pam.d/login index ec5bba9..eb43f3b 100644 --- a/recipes-extended/shadow/files/pam.d/login +++ b/recipes-extended/shadow/files/pam.d/login | |||
| @@ -66,7 +66,7 @@ session required pam_limits.so | |||
| 66 | 66 | ||
| 67 | # Prints the last login info upon succesful login | 67 | # Prints the last login info upon succesful login |
| 68 | # (Replaces the `LASTLOG_ENAB' option from login.defs) | 68 | # (Replaces the `LASTLOG_ENAB' option from login.defs) |
| 69 | session optional pam_lastlog.so | 69 | #session optional pam_lastlog.so |
| 70 | 70 | ||
| 71 | # Prints the motd upon succesful login | 71 | # Prints the motd upon succesful login |
| 72 | # (Replaces the `MOTD_FILE' option in login.defs) | 72 | # (Replaces the `MOTD_FILE' option in login.defs) |