emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

fix PAM service files --without-selinux

Browse Source 
Make pam_selinux.so optional in environments where the module isn't provided.
This commit is contained in:
Ali Riza KESKIN 2022-03-04 11:48:54 +00:00 committed by Serge Hallyn
parent 1882c66bda
commit 212d20c80e
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/pam.d/login
View File

@ -4,8 +4,8 @@ auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session required pam_selinux.so close
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session include system-auth
session required pam_loginuid.so
session optional pam_console.so
session required pam_selinux.so open
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open

4
etc/pam.d/su
View File

@ -7,7 +7,7 @@ auth required pam_wheel.so use_uid
auth include system-auth
account include system-auth
password include system-auth
session required pam_selinux.so close
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session include system-auth
session required pam_selinux.so open multiple
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_xauth.so