Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-08 04:25:05 -04:00
Code Issues Projects Releases Packages Wiki Activity

Avoid faillock lock/tally reset on reboot or timeout

Browse source
This commit is contained in:
Aaron Rainbolt 2024-10-19 23:49:07 -05:00
parent b6433309fd
commit 690e8dd826
No known key found for this signature in database
GPG key ID: A709160D73C79109
6 changed files with 37 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

5
usr/libexec/security-misc/pam-info
View file

@ -21,6 +21,9 @@ true "$0: START PHASE 2"
set -o pipefail
## Named constants.
pam_faillock_state_dir="/var/lib/security-misc/faillock"
## Debugging.
who_ami="$(whoami)"
true "$0: who_ami: $who_ami"
@ -102,7 +105,7 @@ fi
##
## Checking exit code to avoid breaking when read-only disk boot but
## without ro-mode-init or grub-live being used.
if ! pam_faillock_output="$(faillock --user -- "$PAM_USER")" ; then
if ! pam_faillock_output="$(faillock --dir "$pam_faillock_state_dir" --user "$PAM_USER")" ; then
true "$0: faillock non-zero exit code."
exit 0
fi