- rel 10; fixes CVE-2017-16944

[packages/exim.git] / exim4-smtp.pamd

diff --git a/exim4-smtp.pamd b/exim4-smtp.pamd
index fcc2e35af478adaebdef95f68b7cdf8a6799d3ea..74be29d0fb66af44cd76daf7413adad7bdb0d29b 100644 (file)
--- a/exim4-smtp.pamd
+++ b/exim4-smtp.pamd
@@ -3,10 +3,7 @@
 # example PAM file for saslauthd - place it as /etc/pam.d/<service>
 # (e.g. /etc/pam.d/smtp if you want to use saslauthd for SMTP AUTH)
 #
-auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
-auth           required        pam_unix.so
-auth           required        pam_tally.so file=/var/log/faillog onerr=succeed no_magic_root
-auth           required        pam_nologin.so
-account                required        pam_tally.so deny=0 file=/var/log/faillog onerr=succeed no_magic_root
-account                required        pam_unix.so
-session                required        pam_unix.so
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.smtp onerr=succeed
+auth           include         system-auth
+account                required        pam_nologin.so
+account                include         system-auth