- switch from pam_make to pam_exec

[packages/shadow.git] / chfn.pamd

diff --git a/chfn.pamd b/chfn.pamd
index b8ed8e315aa1503b9291b9c47da59a501b68e3fb..64167a2972a421b7bef5dfd2112e9cbacc56a4c8 100644 (file)
--- a/chfn.pamd
+++ b/chfn.pamd
@@ -1,10 +1,9 @@
 #%PAM-1.0
-auth required /lib/security/pam_listfile.so item=user sense=allow file=/etc/security/chfn onerr=fail
-auth       sufficient   /lib/security/pam_rootok.so
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-session    required    /lib/security/pam_pwdb.so
-
-
+auth           sufficient      pam_rootok.so
+auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chfn.allow onerr=fail
+auth           required        pam_unix.so
+account                required        pam_unix.so
+password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        pam_unix.so md5 shadow use_authtok
+password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+session                required        pam_unix.so