- switch from pam_make to pam_exec

[packages/X11.git] / xdm.pamd

diff --git a/xdm.pamd b/xdm.pamd
index 991b106524ad1ffcc3a3a66c1da33577067ebe09..a918f0ca8213435a1f1e019a3633c56cfa0597c7 100644 (file)
--- a/xdm.pamd
+++ b/xdm.pamd
@@ -1,8 +1,18 @@
 #%PAM-1.0
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-auth       required    /lib/security/pam_nologin.so
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-session    required    /lib/security/pam_pwdb.so
-session    optional    /lib/security/pam_console.so
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.xdm onerr=succeed
+auth           required        pam_unix.so
+auth           required        pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
+auth           required        pam_shells.so
+auth           required        pam_nologin.so
+account                required        pam_tally.so file=/var/log/faillog onerr=succeed
+account                required        pam_access.so
+account                required        pam_time.so
+account                required        pam_unix.so
+password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        pam_unix.so md5 shadow use_authtok
+password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
+session                required        pam_unix.so
+session                required        pam_env.so
+session                required        pam_limits.so change_uid
+session                optional        pam_console.so