From 830111e99aa6f45688c4ba00a7f41ea323f15f2a Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Thu, 1 Aug 2019 11:04:22 +0000 Subject: [PATCH] split usr/share/pam-configs/security-misc into usr/share/pam-configs/tally2-security-misc usr/share/pam-configs/wheel-security-misc --- usr/share/pam-configs/security-misc | 7 ------- usr/share/pam-configs/tally2-security-misc | 6 ++++++ usr/share/pam-configs/wheel-security-misc | 6 ++++++ 3 files changed, 12 insertions(+), 7 deletions(-) delete mode 100644 usr/share/pam-configs/security-misc create mode 100644 usr/share/pam-configs/tally2-security-misc create mode 100644 usr/share/pam-configs/wheel-security-misc diff --git a/usr/share/pam-configs/security-misc b/usr/share/pam-configs/security-misc deleted file mode 100644 index 2cf08ca..0000000 --- a/usr/share/pam-configs/security-misc +++ /dev/null @@ -1,7 +0,0 @@ -Name: group sudo membership required to use su and lock accounts after 5 failed authentication attempts (by package security-misc) -Default: yes -Priority: 260 -Auth-Type: Primary -Auth: - required pam_wheel.so group=sudo debug - required pam_tally2.so deny=5 debug diff --git a/usr/share/pam-configs/tally2-security-misc b/usr/share/pam-configs/tally2-security-misc new file mode 100644 index 0000000..3639b13 --- /dev/null +++ b/usr/share/pam-configs/tally2-security-misc @@ -0,0 +1,6 @@ +Name: lock accounts after 5 failed authentication attempts (by package security-misc) +Default: yes +Priority: 260 +Auth-Type: Primary +Auth: + required pam_tally2.so deny=5 debug diff --git a/usr/share/pam-configs/wheel-security-misc b/usr/share/pam-configs/wheel-security-misc new file mode 100644 index 0000000..bf7442c --- /dev/null +++ b/usr/share/pam-configs/wheel-security-misc @@ -0,0 +1,6 @@ +Name: group sudo membership required to use su (by package security-misc) +Default: yes +Priority: 270 +Auth-Type: Primary +Auth: + required pam_wheel.so group=sudo debug