X-Git-Url: http://git.pld-linux.org/?a=blobdiff_plain;f=opensshd.pamd;h=56665be687a0f51f30049e0d1fb1e80f525d31f9;hb=be127028d17a22eee12f6025f166ccf1a0072183;hp=1f6b4200cbfd029280a3865f6f53c90c8110bc8f;hpb=b0bdaceb32faec98d97435e0500c6bd219797de3;p=packages%2Fopenssh.git diff --git a/opensshd.pamd b/opensshd.pamd index 1f6b420..56665be 100644 --- a/opensshd.pamd +++ b/opensshd.pamd @@ -1,17 +1,14 @@ #%PAM-1.0 -auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed -auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist.sshd onerr=succeed -auth required /lib/security/pam_unix.so -auth required /lib/security/pam_tally.so file=/var/log/faillog onerr=succeed no_magic_root -auth required /lib/security/pam_shells.so -auth required /lib/security/pam_nologin.so -account required /lib/security/pam_tally.so deny=0 file=/var/log/faillog onerr=succeed no_magic_root -account required /lib/security/pam_access.so -account required /lib/security/pam_unix.so -password required /lib/security/pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3 -password required /lib/security/pam_unix.so md5 shadow use_authtok -password required /lib/security/pam_make.so /var/db -session required /lib/security/pam_unix.so -session required /lib/security/pam_env.so -session required /lib/security/pam_limits.so change_uid -session optional /lib/security/pam_mail.so +auth required pam_listfile.so item=user sense=deny file=/etc/security/blacklist.sshd onerr=succeed +auth include system-auth +auth include postlogin +account required pam_shells.so +account required pam_nologin.so +account required pam_access.so +account include system-auth +password include system-auth +session required pam_loginuid.so +session optional pam_keyinit.so force revoke +session include system-auth +session include postlogin +session optional pam_mail.so