commit: eb138196aa2d3cb860d5eb5ab1d05985df34ad2c Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Tue Oct 20 02:32:28 2020 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Tue Oct 20 02:38:20 2020 +0000 URL: https://gitweb.gentoo.org/proj/pambase.git/commit/?id=eb138196
templates/system-auth.tpl: use faillock in minimal case Bug: https://bugs.gentoo.org/748405 Signed-off-by: Sam James <sam <AT> gentoo.org> templates/system-auth.tpl | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index bc28468..faf18ee 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -7,13 +7,10 @@ auth sufficient pam_ssh.so auth [success=1 default=ignore] pam_krb5.so {{ krb5_params }} {% endif %} -auth required pam_unix.so try_first_pass {{ likeauth }} {{ nullok|default('', true) }} {{ debug|default('', true) }} auth optional pam_permit.so -{% if not minimal %} -auth required pam_faillock.so preauth -auth sufficient pam_unix.so nullok try_first_pass +auth requisite pam_faillock.so preauth +auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass auth [default=die] pam_faillock.so authfail -{% endif %} {% if krb5 %} account [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
