From be8c10496f26d33378deb2427e56892771456ee5 Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed, 1 Sep 2021 15:55:53 -0400
Subject: [PATCH] fix faillock implementation

dovecot / ssh are exempted
---
 usr/share/pam-configs/faillock2-security-misc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/usr/share/pam-configs/faillock2-security-misc b/usr/share/pam-configs/faillock2-security-misc
index f5eb508..7bc5fb7 100644
--- a/usr/share/pam-configs/faillock2-security-misc
+++ b/usr/share/pam-configs/faillock2-security-misc
@@ -3,5 +3,6 @@ Default: yes
 Priority: 245
 Auth-Type: Primary
 Auth:
+	[success=2 default=ignore]	pam_exec.so	seteuid quiet /usr/libexec/security-misc/pam_faillock_not_if_x
 	[default=die]  pam_faillock.so authfail
 	sufficient     pam_faillock.so authsucc