whoa, odbajerowane konfigi do pama

Changed files:
    xdm.pamd -> 1.4
    xserver.pamd -> 1.2

diff --git a/xdm.pamd b/xdm.pamd
index a0fc1ab06f3ecfe79f508030c9a25c977042d8bd..8e46dd0667a37815608ac42a0e5ac7d970a2247b 100644 (file)
--- a/xdm.pamd
+++ b/xdm.pamd
@@ -1,9 +1,18 @@
 #%PAM-1.0
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-auth       required    /lib/security/pam_nologin.so
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-session    required    /lib/security/pam_pwdb.so
-session    required    /lib/security/pam_env.so
-session    optional    /lib/security/pam_console.so
+auth           required        /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
+auth           required        /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist.xdm onerr=succeed
+auth           required        /lib/security/pam_unix.so
+auth           required        /lib/security/pam_tally.so file=/var/log/faillog onerr=succeed no_magic_root
+auth           required        /lib/security/pam_shells.so
+auth           required        /lib/security/pam_nologin.so
+account                required        /lib/security/pam_tally.so deny=0 file=/var/log/faillog onerr=succeed no_magic_root
+account                required        /lib/security/pam_access.so
+account                required        /lib/security/pam_time.so
+account                required        /lib/security/pam_unix.so
+password       required        /lib/security/pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        /lib/security/pam_unix.so md5 shadow use_authtok
+password       required        /lib/security/pam_make.so /var/db
+session                required        /lib/security/pam_unix.so
+session                required        /lib/security/pam_env.so
+session                required        /lib/security/pam_limits.so
+session                optional        /lib/security/pam_console.so

diff --git a/xserver.pamd b/xserver.pamd
index d8550e5a0d956dbdc1e137909dca006a2b0e5abb..e209eab9f704373d67fb3094c2dfbbf53cb29e3b 100644 (file)
--- a/xserver.pamd
+++ b/xserver.pamd
@@ -1,4 +1,6 @@
 #%PAM-1.0
-auth       sufficient  /lib/security/pam_rootok.so
-auth       required    /lib/security/pam_console.so
-account    required    /lib/security/pam_permit.so
+auth           required        /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
+auth           required        /lib/security/pam_listfile.so item=user sense=deny file=/etc/security/blacklist.xserver onerr=succeed
+auth           sufficient      /lib/security/pam_rootok.so
+auth           required        /lib/security/pam_console.so
+account                required        /lib/security/pam_permit.so