- uniformized configs to use system-auth where possible

- sanitized
- uniform blacklist for pop3, imap and smtp services

Changed files:
    chage.pamd -> 1.6
    chfn.pamd -> 1.8
    chsh.pamd -> 1.8
    passwd.pamd -> 1.6
    useradd.pamd -> 1.5
    userdb.pamd -> 1.5

diff --git a/chage.pamd b/chage.pamd
index 21174fefa9a720bd0ca1a99ffcae439824a4a2f0..2e1633abef55f20e20430bca96e636367312ae3f 100644 (file)
--- a/chage.pamd
+++ b/chage.pamd
@@ -1,5 +1,6 @@
 #%PAM-1.0
 auth           sufficient      pam_rootok.so
-auth           required        pam_unix.so
+auth           required        pam_deny.so
 account                required        pam_permit.so
 password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+# password     required        pam_exec.so failok seteuid /usr/bin/make -C /var/yp

diff --git a/chfn.pamd b/chfn.pamd
index 64167a2972a421b7bef5dfd2112e9cbacc56a4c8..0aa09c4dc9be568a5f7dbcbe7ec60ff2d7541cc0 100644 (file)
--- a/chfn.pamd
+++ b/chfn.pamd
@@ -1,9 +1,6 @@
 #%PAM-1.0
 auth           sufficient      pam_rootok.so
 auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chfn.allow onerr=fail
-auth           required        pam_unix.so
-account                required        pam_unix.so
-password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password       required        pam_unix.so md5 shadow use_authtok
-password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
-session                required        pam_unix.so
+auth           include         system-auth
+account                include         system-auth
+password       include         system-auth

diff --git a/chsh.pamd b/chsh.pamd
index 3f9afbba5d6029774eb98c1735a863a98ba11103..ac578e1903a7c258dce3dbcc5c93c06736a193e9 100644 (file)
--- a/chsh.pamd
+++ b/chsh.pamd
@@ -1,9 +1,6 @@
 #%PAM-1.0
 auth           sufficient      pam_rootok.so
 auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chsh.allow onerr=fail
-auth           required        pam_unix.so
-account                required        pam_unix.so
-password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password       required        pam_unix.so md5 shadow use_authtok
-password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
-session                required        pam_unix.so
+auth           include         system-auth
+account                include         system-auth
+password       include         system-auth

diff --git a/passwd.pamd b/passwd.pamd
index 4ec1f377d30586af7a7fa20c2cb583dfa49e452d..6a4fd03bf70628cc26c2942cecfc1212561b0114 100644 (file)
--- a/passwd.pamd
+++ b/passwd.pamd
@@ -1,9 +1,5 @@
 #%PAM-1.0
-auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
 auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.passwd onerr=succeed
-auth           required        pam_unix.so
-account                required        pam_unix.so
-# password      [success=1 ignore=reset abort=die default=bad] pam_pwgen.so upper=1 digit=1
-password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password       required        pam_unix.so md5 shadow use_authtok
-password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+auth           include         system-auth
+account                include         system-auth
+password       include         system-auth

diff --git a/useradd.pamd b/useradd.pamd
index f8267fd87eb30bc5c65373b8fec001742f868e14..6a97ba036e82c1ddaf87cdc6bd47d30c695c0969 100644 (file)
--- a/useradd.pamd
+++ b/useradd.pamd
@@ -1,5 +1,6 @@
 #%PAM-1.0 
 auth           sufficient      pam_rootok.so
-auth           required        pam_unix.so
+auth           required        pam_deny.so
 account                required        pam_permit.so
 password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+# password     required        pam_exec.so failok seteuid /usr/bin/make -C /var/yp

diff --git a/userdb.pamd b/userdb.pamd
index ee258486b157e453c3c1b7cf6ea24c065142dbba..2e1633abef55f20e20430bca96e636367312ae3f 100644 (file)
--- a/userdb.pamd
+++ b/userdb.pamd
@@ -1,4 +1,6 @@
 #%PAM-1.0
 auth           sufficient      pam_rootok.so
+auth           required        pam_deny.so
 account                required        pam_permit.so
 password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+# password     required        pam_exec.so failok seteuid /usr/bin/make -C /var/yp