Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-08-19 04:27:48 -04:00
Code Issues Projects Releases Packages Wiki Activity

port from pam_tally2 to pam_faillock

Browse source 
since pam_tally2 was deprecated upstream
This commit is contained in:
Patrick Schleizer 2021-08-10 17:13:00 -04:00
parent 2bf0e7471c
commit 582492d6d8
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
6 changed files with 107 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

6
usr/share/pam-configs/faillock-security-misc
View file

@ -1,11 +1,11 @@
Name: lock accounts after 50 failed authentication attempts (by package security-misc)
Name: lock accounts after 50 failed authentication attempts (part 1) (by package security-misc)
Default: yes
Priority: 290
Auth-Type: Primary
Auth:
optional pam_exec.so debug stdout seteuid /usr/libexec/security-misc/pam-info
[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_faillock_not_if_x
requisite pam_faillock.so even_deny_root deny=50 onerr=fail audit debug
required pam_faillock.so preauth
Account-Type: Primary
Account:
requisite pam_faillock.so debug
requisite pam_faillock.so

7
usr/share/pam-configs/faillock2-security-misc Normal file
View file

@ -0,0 +1,7 @@
Name: lock accounts after 50 failed authentication attempts (part 2) (by package security-misc)
Default: yes
Priority: 245
Auth-Type: Primary
Auth:
[default=die] pam_faillock.so authfail
sufficient pam_faillock.so authsucc