- restored /etc/security/blacklist.ftp support (BTW this should be account not auth)

- restored (but disabled) pam_shells (works just like RequireValidShell option)
- restored required session group! (consider using system-auth here)

Changed files:
    ftp.pamd -> 1.9

diff --git a/ftp.pamd b/ftp.pamd
index 5ab97b5cdeab8904326f43e228d705c3c633bfda..e5a9ed2263f4af7a5b96d0ad246bb0f265b5fd3c 100644 (file)
--- a/ftp.pamd
+++ b/ftp.pamd
@@ -1,5 +1,8 @@
 #%PAM-1.0
 auth           required        pam_listfile.so item=user sense=deny file=/etc/ftpd/ftpusers onerr=succeed
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.ftp onerr=succeed
+#auth          required        pam_shells.so
 auth           include         system-auth
 account                required        pam_nologin.so
 account                include         system-auth
+session                required        pam_unix.so