Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-26 18:59:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

improve console lockdown info output

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-31 02:53:02 -05:00
parent 788914de95
commit 20697db3ee
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 30 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
usr/lib/security-misc/pam_tally2-info
View File

@ -5,7 +5,14 @@
grep_result="$(grep "accessfile=/etc/security/access-security-misc.conf" /etc/pam.d/common-account 2>/dev/null)"
## Check if grep matched something.
if [ ! "$grep_result" = "" ]; then
## Yes, grep matched.
## Check if not out commented.
if ! echo "$grep_result" | grep -q "#" ; then
## Not out commented indeed.
## https://forums.whonix.org/t/etc-security-hardening-console-lockdown/8592
if id --name --groups --zero "$PAM_USER" | grep --quiet --null-data --line-regexp --fixed-strings "console"; then
@ -14,6 +21,7 @@ if ! echo "$grep_result" | grep -q "#" ; then
if id --name --groups --zero "$PAM_USER" | grep --quiet --null-data --line-regexp --fixed-strings "console-unrestricted"; then
console_allowed=true
fi
if [ ! "$console_allowed" = "true" ]; then
echo "$0: ERROR: PAM_USER: '$PAM_USER' is not a member of group 'console'" >&2
echo "$0: To unlock, run the following command as superuser:" >&2
@ -29,6 +37,7 @@ if ! echo "$grep_result" | grep -q "#" ; then
exit 0
fi
fi
fi
## https://forums.whonix.org/t/how-strong-do-linux-user-account-passwords-have-to-be-when-using-full-disk-encryption-fde-too/7698