Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-31 20:48:35 -04:00
Code Issues Projects Releases Packages Wiki Activity

use pam_acccess only for /etc/pam.d/login

Browse source 
remove "Allow members of group 'ssh' to login."
remove "+:ssh:ALL EXCEPT LOCAL"
This commit is contained in:
Patrick Schleizer 2019-12-12 09:00:08 -05:00
parent 22b6480bc4
commit 729fa26eca
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
4 changed files with 25 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

3
usr/share/pam-configs/console-lockdown-security-misc
View file

@ -1,6 +1,7 @@
Name: allow only members of group console / ssh to login/incoming ssh (by package security-misc)
Name: allow only members of group console to use login (by package security-misc)
Default: no
Priority: 280
Account-Type: Primary
Account:
[success=1 default=ignore] pam_exec.so seteuid quiet /usr/lib/security-misc/pam_only_if_login
required pam_access.so accessfile=/etc/security/access-security-misc.conf debug