Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-07 02:02:40 -04:00
Code Issues Projects Releases Packages Wiki Activity

description

Browse source
This commit is contained in:
Patrick Schleizer 2019-12-12 09:39:39 -05:00
parent 300f010fc2
commit 2d5ef378f3
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

10
debian/control vendored
View file

@ -178,17 +178,13 @@ Description: enhances misc security settings
/etc/securetty.security-misc /etc/securetty.security-misc
. .
* Console Lockdown. * Console Lockdown.
Allow members of group 'console' to use console and members of group 'ssh' Allow members of group 'console' to use console.
to receive incoming SSH connections. Everyone else except members of group Everyone else except members of group
'console-unrestricted' are restricted from using console using ancient, 'console-unrestricted' are restricted from using console using ancient,
unpopular login methods such as using /bin/login over networks, which might unpopular login methods such as using /bin/login over networks, which might
be exploitable. (CVE-2001-0797) Using pam_access. be exploitable. (CVE-2001-0797) Using pam_access.
Not enabled by default in this package since this package does not know which Not enabled by default in this package since this package does not know which
users shall be added to group 'console' and/or 'ssh' and would break console, users shall be added to group 'console' and would break console.
X Window System and ssh login since files in
/usr/share/pam-configs/console-lockdown-security-misc result in modifications
of /etc/pam.d/common-account file which not only applies to /etc/pam.d/login
but also all other services such as /etc/pam.d/ssh.
/usr/share/pam-configs/console-lockdown-security-misc /usr/share/pam-configs/console-lockdown-security-misc
/etc/security/access-security-misc.conf /etc/security/access-security-misc.conf
. .