Date: Thursday, October 20, 2022 @ 09:59:50
Author: dvzrv
Revision: 458448
archrelease: copy trunk to testing-any
Added:
pambase/repos/testing-any/
pambase/repos/testing-any/PKGBUILD
(from rev 458447, pambase/trunk/PKGBUILD)
pambase/repos/testing-any/other
(from rev 458447, pambase/trunk/other)
pambase/repos/testing-any/system-auth
(from rev 458447, pambase/trunk/system-auth)
pambase/repos/testing-any/system-local-login
(from rev 458447, pambase/trunk/system-local-login)
pambase/repos/testing-any/system-login
(from rev 458447, pambase/trunk/system-login)
pambase/repos/testing-any/system-remote-login
(from rev 458447, pambase/trunk/system-remote-login)
pambase/repos/testing-any/system-services
(from rev 458447, pambase/trunk/system-services)
---------------------+
PKGBUILD | 44 ++++++++++++++++++++++++++++++++++++++++++++
other | 9 +++++++++
system-auth | 27 +++++++++++++++++++++++++++
system-local-login | 6 ++++++
system-login | 19 +++++++++++++++++++
system-remote-login | 6 ++++++
system-services | 11 +++++++++++
7 files changed, 122 insertions(+)
Copied: pambase/repos/testing-any/PKGBUILD (from rev 458447,
pambase/trunk/PKGBUILD)
===================================================================
--- testing-any/PKGBUILD (rev 0)
+++ testing-any/PKGBUILD 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,44 @@
+# Maintainer: David Runge <[email protected]>
+# Contributor: Dave Reisner <[email protected]>
+
+pkgname=pambase
+pkgver=20221020
+pkgrel=1
+pkgdesc="Base PAM configuration for services"
+arch=(any)
+url="https://www.archlinux.org";
+license=(GPL)
+backup=(
+ etc/pam.d/system-auth
+ etc/pam.d/system-local-login
+ etc/pam.d/system-login
+ etc/pam.d/system-remote-login
+ etc/pam.d/system-services
+ etc/pam.d/other
+)
+source=(
+ system-auth
+ system-local-login
+ system-login
+ system-remote-login
+ system-services
+ other
+)
+sha512sums=('881f2d76cd5f621b46cc710e9f63269b801b6e03fd3cacf0b31bd1ec2b846c1e610891e2f7a52bfc67917336f411005927a9a6a01f6173143c4ef89a034dc604'
+
'83cc3d84ef5afded9afd4d347132901b9adcbd8b21be45b80d010370a2082e8388a713eb78d052944bc47b07fd7383edf18e2674d9d0545215cc45e14a2e14b1'
+
'caa11946510c20d7d6429a941952f4831091c89e018cbcbedadf9a563f364c060b8d88abc1331db8cc62d0f0b52cd9b106a99a994602f140a5f04f3124d6ae36'
+
'83cc3d84ef5afded9afd4d347132901b9adcbd8b21be45b80d010370a2082e8388a713eb78d052944bc47b07fd7383edf18e2674d9d0545215cc45e14a2e14b1'
+
'5c2947f8644803783d19cc97ddc19fdaa234dac41a939edd32c9452e78bb2a4751bceeb4737d0791fb122ca932b8b941aab869b6dec3146bf90e94517d31724a'
+
'df554f70f017dd3f6023a3c62b95d19123eaf41c08deaac0c4bc343fcce6eeefcf468910f7cb9ba58ee2846abb88091d18d718eb0228e38f6ce26ebced94c407')
+b2sums=('2120f15bca3092ce6ed672a3244c1f2d9f13601db3fda83442029d1ceca3a5622b9ce8e215d821ac1e68d30f20556d3ad463fed9f3670778e4b87f4813d7df1b'
+
'900a5250f5a9e464c1c3ab8fc112475c99f4d76b597abf362041b661707dcc458cd385fd2cfeecf1ba9e3e831176ca8d183cffc9a913fb79e8ddcaa68223a7e6'
+
'0b9e817d51ee4fcb25ac769693ecc557ede1cd3ec502d41b90cb7f0a505967dc3803231cf860e2f1c58aeb7395719fd6f30bd89702dfda40a61b55e720c4958f'
+
'900a5250f5a9e464c1c3ab8fc112475c99f4d76b597abf362041b661707dcc458cd385fd2cfeecf1ba9e3e831176ca8d183cffc9a913fb79e8ddcaa68223a7e6'
+
'e11e8959c961036a384016096f0fce0696d8a3ecc63d0d12d8016cc7c27a7afc80f8580ab639c97360aed0d49af3159462d85260b4404b9d65963f440eb77243'
+
'3de32ccd196fecaf0a3cce8e61867f93f85fff651044519d8521a28d9f8d6ddaf51f3e30eac4979884c505f9f52d01f458e5bccc5d5adc4f1d7d372068dd02da')
+
+package() {
+ install -vDm 644 "${source[@]}" -t "$pkgdir/etc/pam.d/"
+}
+
+# vim:set ts=2 sw=2 et:
Copied: pambase/repos/testing-any/other (from rev 458447, pambase/trunk/other)
===================================================================
--- testing-any/other (rev 0)
+++ testing-any/other 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,9 @@
+#%PAM-1.0
+auth required pam_deny.so
+auth required pam_warn.so
+account required pam_deny.so
+account required pam_warn.so
+password required pam_deny.so
+password required pam_warn.so
+session required pam_deny.so
+session required pam_warn.so
Copied: pambase/repos/testing-any/system-auth (from rev 458447,
pambase/trunk/system-auth)
===================================================================
--- testing-any/system-auth (rev 0)
+++ testing-any/system-auth 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,27 @@
+#%PAM-1.0
+
+auth required pam_faillock.so preauth
+# Optionally use requisite above if you do not want to prompt for the password
+# on locked accounts.
+-auth [success=2 default=ignore] pam_systemd_home.so
+auth [success=1 default=bad] pam_unix.so try_first_pass
nullok
+auth [default=die] pam_faillock.so authfail
+auth optional pam_permit.so
+auth required pam_env.so
+auth required pam_faillock.so authsucc
+# If you drop the above call to pam_faillock.so the lock will be done also
+# on non-consecutive authentication failures.
+
+-account [success=1 default=ignore] pam_systemd_home.so
+account required pam_unix.so
+account optional pam_permit.so
+account required pam_time.so
+
+-password [success=1 default=ignore] pam_systemd_home.so
+password required pam_unix.so try_first_pass
nullok shadow sha512
+password optional pam_permit.so
+
+-session optional pam_systemd_home.so
+session required pam_limits.so
+session required pam_unix.so
+session optional pam_permit.so
Copied: pambase/repos/testing-any/system-local-login (from rev 458447,
pambase/trunk/system-local-login)
===================================================================
--- testing-any/system-local-login (rev 0)
+++ testing-any/system-local-login 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,6 @@
+#%PAM-1.0
+
+auth include system-login
+account include system-login
+password include system-login
+session include system-login
Copied: pambase/repos/testing-any/system-login (from rev 458447,
pambase/trunk/system-login)
===================================================================
--- testing-any/system-login (rev 0)
+++ testing-any/system-login 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,19 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth requisite pam_nologin.so
+auth include system-auth
+
+account required pam_access.so
+account required pam_nologin.so
+account include system-auth
+
+password include system-auth
+
+session optional pam_loginuid.so
+session optional pam_keyinit.so force revoke
+session include system-auth
+session optional pam_motd.so
+session optional pam_mail.so dir=/var/spool/mail standard quiet
+-session optional pam_systemd.so
+session required pam_env.so
Copied: pambase/repos/testing-any/system-remote-login (from rev 458447,
pambase/trunk/system-remote-login)
===================================================================
--- testing-any/system-remote-login (rev 0)
+++ testing-any/system-remote-login 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,6 @@
+#%PAM-1.0
+
+auth include system-login
+account include system-login
+password include system-login
+session include system-login
Copied: pambase/repos/testing-any/system-services (from rev 458447,
pambase/trunk/system-services)
===================================================================
--- testing-any/system-services (rev 0)
+++ testing-any/system-services 2022-10-20 09:59:50 UTC (rev 458448)
@@ -0,0 +1,11 @@
+#%PAM-1.0
+
+auth sufficient pam_permit.so
+
+account include system-auth
+
+session optional pam_loginuid.so
+session required pam_limits.so
+session required pam_unix.so
+session optional pam_permit.so
+session required pam_env.so
