- init var

[packages/util-linux.git] / login.pamd

diff --git a/login.pamd b/login.pamd
index 44d1ffa554ad7c79861c51e1c9689cfb81cdb35d..2bb64a884e6f4d3dcd216cb10a57943c2c7b00f7 100644 (file)
--- a/login.pamd
+++ b/login.pamd
@@ -1,12 +1,21 @@
 #%PAM-1.0
-auth       required    /lib/security/pam_securetty.so
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-auth       required    /lib/security/pam_nologin.so
-auth      optional     /lib/security/pam_mail.so
-account           required     /lib/security/pam_access.so
-account    required     /lib/security/pam_time.so
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-session    required    /lib/security/pam_pwdb.so
-session           required     /lib/security/pam_limits.so
\ No newline at end of file
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.login onerr=succeed
+auth           required        pam_securetty.so
+auth           required        pam_unix.so
+auth           required        pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
+auth           required        pam_shells.so
+auth           required        pam_nologin.so
+auth           optional        pam_mail.so
+account                required        pam_tally.so file=/var/log/faillog onerr=succeed
+account                required        pam_access.so
+account                required        pam_time.so
+account                required        pam_unix.so
+password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        pam_unix.so md5 shadow use_authtok
+password       required        pam_make.so /var/db
+session                required        pam_unix.so
+session                required        pam_env.so
+session                required        pam_limits.so change_uid
+#session       required        pam_selinux.so
+session                optional        pam_console.so