diff options
Diffstat (limited to 'meta/packages/pam/libpam-1.1.1/pam.d')
6 files changed, 134 insertions, 0 deletions
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/common-account b/meta/packages/pam/libpam-1.1.1/pam.d/common-account new file mode 100644 index 0000000000..316b17337b --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/common-account | |||
@@ -0,0 +1,25 @@ | |||
1 | # | ||
2 | # /etc/pam.d/common-account - authorization settings common to all services | ||
3 | # | ||
4 | # This file is included from other service-specific PAM config files, | ||
5 | # and should contain a list of the authorization modules that define | ||
6 | # the central access policy for use on the system. The default is to | ||
7 | # only deny service to users whose accounts are expired in /etc/shadow. | ||
8 | # | ||
9 | # As of pam 1.0.1-6, this file is managed by pam-auth-update by default. | ||
10 | # To take advantage of this, it is recommended that you configure any | ||
11 | # local modules either before or after the default block, and use | ||
12 | # pam-auth-update to manage selection of other modules. See | ||
13 | # pam-auth-update(8) for details. | ||
14 | # | ||
15 | |||
16 | # here are the per-package modules (the "Primary" block) | ||
17 | account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so | ||
18 | # here's the fallback if no module succeeds | ||
19 | account requisite pam_deny.so | ||
20 | # prime the stack with a positive return value if there isn't one already; | ||
21 | # this avoids us returning an error just because nothing sets a success code | ||
22 | # since the modules above will each just jump around | ||
23 | account required pam_permit.so | ||
24 | # and here are more per-package modules (the "Additional" block) | ||
25 | # end of pam-auth-update config | ||
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/common-auth b/meta/packages/pam/libpam-1.1.1/pam.d/common-auth new file mode 100644 index 0000000000..460b69f198 --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/common-auth | |||
@@ -0,0 +1,18 @@ | |||
1 | # | ||
2 | # /etc/pam.d/common-auth - authentication settings common to all services | ||
3 | # | ||
4 | # This file is included from other service-specific PAM config files, | ||
5 | # and should contain a list of the authentication modules that define | ||
6 | # the central authentication scheme for use on the system | ||
7 | # (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the | ||
8 | # traditional Unix authentication mechanisms. | ||
9 | |||
10 | # here are the per-package modules (the "Primary" block) | ||
11 | auth [success=1 default=ignore] pam_unix.so nullok_secure | ||
12 | # here's the fallback if no module succeeds | ||
13 | auth requisite pam_deny.so | ||
14 | # prime the stack with a positive return value if there isn't one already; | ||
15 | # this avoids us returning an error just because nothing sets a success code | ||
16 | # since the modules above will each just jump around | ||
17 | auth required pam_permit.so | ||
18 | # and here are more per-package modules (the "Additional" block) | ||
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/common-password b/meta/packages/pam/libpam-1.1.1/pam.d/common-password new file mode 100644 index 0000000000..3896057328 --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/common-password | |||
@@ -0,0 +1,26 @@ | |||
1 | # | ||
2 | # /etc/pam.d/common-password - password-related modules common to all services | ||
3 | # | ||
4 | # This file is included from other service-specific PAM config files, | ||
5 | # and should contain a list of modules that define the services to be | ||
6 | # used to change user passwords. The default is pam_unix. | ||
7 | |||
8 | # Explanation of pam_unix options: | ||
9 | # | ||
10 | # The "sha512" option enables salted SHA512 passwords. Without this option, | ||
11 | # the default is Unix crypt. Prior releases used the option "md5". | ||
12 | # | ||
13 | # The "obscure" option replaces the old `OBSCURE_CHECKS_ENAB' option in | ||
14 | # login.defs. | ||
15 | # | ||
16 | # See the pam_unix manpage for other options. | ||
17 | |||
18 | # here are the per-package modules (the "Primary" block) | ||
19 | password [success=1 default=ignore] pam_unix.so obscure sha512 | ||
20 | # here's the fallback if no module succeeds | ||
21 | password requisite pam_deny.so | ||
22 | # prime the stack with a positive return value if there isn't one already; | ||
23 | # this avoids us returning an error just because nothing sets a success code | ||
24 | # since the modules above will each just jump around | ||
25 | password required pam_permit.so | ||
26 | # and here are more per-package modules (the "Additional" block) | ||
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/common-session b/meta/packages/pam/libpam-1.1.1/pam.d/common-session new file mode 100644 index 0000000000..a594dd9d90 --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/common-session | |||
@@ -0,0 +1,19 @@ | |||
1 | # | ||
2 | # /etc/pam.d/common-session - session-related modules common to all services | ||
3 | # | ||
4 | # This file is included from other service-specific PAM config files, | ||
5 | # and should contain a list of modules that define tasks to be performed | ||
6 | # at the start and end of sessions of *any* kind (both interactive and | ||
7 | # non-interactive). | ||
8 | # | ||
9 | |||
10 | # here are the per-package modules (the "Primary" block) | ||
11 | session [default=1] pam_permit.so | ||
12 | # here's the fallback if no module succeeds | ||
13 | session requisite pam_deny.so | ||
14 | # prime the stack with a positive return value if there isn't one already; | ||
15 | # this avoids us returning an error just because nothing sets a success code | ||
16 | # since the modules above will each just jump around | ||
17 | session required pam_permit.so | ||
18 | # and here are more per-package modules (the "Additional" block) | ||
19 | session required pam_unix.so | ||
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/common-session-noninteractive b/meta/packages/pam/libpam-1.1.1/pam.d/common-session-noninteractive new file mode 100644 index 0000000000..b110bb2b49 --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/common-session-noninteractive | |||
@@ -0,0 +1,19 @@ | |||
1 | # | ||
2 | # /etc/pam.d/common-session-noninteractive - session-related modules | ||
3 | # common to all non-interactive services | ||
4 | # | ||
5 | # This file is included from other service-specific PAM config files, | ||
6 | # and should contain a list of modules that define tasks to be performed | ||
7 | # at the start and end of all non-interactive sessions. | ||
8 | # | ||
9 | |||
10 | # here are the per-package modules (the "Primary" block) | ||
11 | session [default=1] pam_permit.so | ||
12 | # here's the fallback if no module succeeds | ||
13 | session requisite pam_deny.so | ||
14 | # prime the stack with a positive return value if there isn't one already; | ||
15 | # this avoids us returning an error just because nothing sets a success code | ||
16 | # since the modules above will each just jump around | ||
17 | session required pam_permit.so | ||
18 | # and here are more per-package modules (the "Additional" block) | ||
19 | session required pam_unix.so | ||
diff --git a/meta/packages/pam/libpam-1.1.1/pam.d/other b/meta/packages/pam/libpam-1.1.1/pam.d/other new file mode 100644 index 0000000000..6e40cd0c02 --- /dev/null +++ b/meta/packages/pam/libpam-1.1.1/pam.d/other | |||
@@ -0,0 +1,27 @@ | |||
1 | # | ||
2 | # /etc/pam.d/other - specify the PAM fallback behaviour | ||
3 | # | ||
4 | # Note that this file is used for any unspecified service; for example | ||
5 | #if /etc/pam.d/cron specifies no session modules but cron calls | ||
6 | #pam_open_session, the session module out of /etc/pam.d/other is | ||
7 | #used. | ||
8 | |||
9 | #If you really want nothing to happen then use pam_permit.so or | ||
10 | #pam_deny.so as appropriate. | ||
11 | |||
12 | # We use pam_warn.so to generate syslog notes that the 'other' | ||
13 | #fallback rules are being used (as a hint to suggest you should setup | ||
14 | #specific PAM rules for the service and aid to debugging). We then | ||
15 | #fall back to the system default in /etc/pam.d/common-* | ||
16 | |||
17 | auth required pam_warn.so | ||
18 | auth include common-auth | ||
19 | |||
20 | account required pam_warn.so | ||
21 | account include common-account | ||
22 | |||
23 | password required pam_warn.so | ||
24 | password include common-password | ||
25 | |||
26 | session required pam_warn.so | ||
27 | session include common-session | ||