summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/shadow/files/pam.d/chsh
diff options
context:
space:
mode:
authorYu Ke <ke.yu@intel.com>2011-02-28 19:34:45 +0800
committerSaul Wold <sgw@linux.intel.com>2011-03-01 07:27:31 -0800
commitf3a482b47678819b4a91bb58810c7bc6ef9e6f3e (patch)
treec3301f389f7b617859e7a56619d24f6bf798384d /meta/recipes-extended/shadow/files/pam.d/chsh
parent0e1f8c2609233b3f95f97d13c7793d7572036c99 (diff)
downloadpoky-f3a482b47678819b4a91bb58810c7bc6ef9e6f3e.tar.gz
shadow: upgrade to 4.1.4.3 to fix security vulnerability
For CVE-2011-0721: http://lists.debian.org/debian-security-announce/2011/msg00030.html Signed-off-by: Yu Ke <ke.yu@intel.com>
Diffstat (limited to 'meta/recipes-extended/shadow/files/pam.d/chsh')
-rw-r--r--meta/recipes-extended/shadow/files/pam.d/chsh19
1 files changed, 19 insertions, 0 deletions
diff --git a/meta/recipes-extended/shadow/files/pam.d/chsh b/meta/recipes-extended/shadow/files/pam.d/chsh
new file mode 100644
index 0000000000..8fb169f64e
--- /dev/null
+++ b/meta/recipes-extended/shadow/files/pam.d/chsh
@@ -0,0 +1,19 @@
1#
2# The PAM configuration file for the Shadow `chsh' service
3#
4
5# This will not allow a user to change their shell unless
6# their current one is listed in /etc/shells. This keeps
7# accounts with special shells from changing them.
8auth required pam_shells.so
9
10# This allows root to change user shell without being
11# prompted for a password
12auth sufficient pam_rootok.so
13
14# The standard Unix authentication modules, used with
15# NIS (man nsswitch) as well as normal /etc/passwd and
16# /etc/shadow entries.
17auth include common-auth
18account include common-account
19session include common-session