commit a4e66fb63d653e505db80a7f1eb8c3577ca26eee
Author: Elan Ruusamäe <[email protected]>
Date: Sun Mar 2 20:54:09 2014 +0000
pldize pam files
lightdm-autologin.pamd | 24 ++++++++++--------------
lightdm-greeter.pamd | 22 ++++++++++++----------
lightdm.pamd | 3 +++
3 files changed, 25 insertions(+), 24 deletions(-)
---
diff --git a/lightdm-autologin.pamd b/lightdm-autologin.pamd
index ba7a68c..73dcfe3 100644
--- a/lightdm-autologin.pamd
+++ b/lightdm-autologin.pamd
@@ -1,20 +1,16 @@
#%PAM-1.0
-
-# Block login if they are globally disabled
-auth required pam_nologin.so
-
-# Load environment from /etc/environment and ~/.pam_environment
-auth required pam_env.so
-
+auth required pam_listfile.so item=user sense=deny
file=/etc/security/blacklist.lightdm onerr=succeed
# Allow access without authentication
-auth required pam_permit.so
+auth required pam_permit.so
-# Stop autologin if account requires action
-account required pam_unix.so
+account required pam_shells.so
+account required pam_nologin.so
+account required pam_access.so
+account include system-auth
# Can't change password
-password required pam_deny.so
+password required pam_deny.so
-# Setup session
-session required pam_unix.so
-session optional pam_systemd.so
+session optional pam_keyinit.so force revoke
+session include system-auth
+session optional pam_console.so
diff --git a/lightdm-greeter.pamd b/lightdm-greeter.pamd
index 9a6862b..8a7f1d1 100644
--- a/lightdm-greeter.pamd
+++ b/lightdm-greeter.pamd
@@ -1,17 +1,19 @@
#%PAM-1.0
-
-# Load environment from /etc/environment and ~/.pam_environment
-auth required pam_env.so
-
+auth required pam_listfile.so item=user sense=deny
file=/etc/security/blacklist.lightdm onerr=succeed
# Always let the greeter start without authentication
-auth required pam_permit.so
+auth required pam_permit.so
+auth include system-auth
+account required pam_shells.so
+account required pam_nologin.so
+account required pam_access.so
# No action required for account management
-account required pam_permit.so
+account required pam_permit.so
+account include system-auth
# Can't change password
-password required pam_deny.so
+password required pam_deny.so
-# Setup session
-session required pam_unix.so
-session optional pam_systemd.so
+session optional pam_keyinit.so force revoke
+session include system-auth
+session optional pam_console.so
diff --git a/lightdm.pamd b/lightdm.pamd
index f71de1a..812f1fc 100644
--- a/lightdm.pamd
+++ b/lightdm.pamd
@@ -1,11 +1,14 @@
#%PAM-1.0
auth required pam_listfile.so item=user sense=deny
file=/etc/security/blacklist.lightdm onerr=succeed
auth include system-auth
+
account required pam_shells.so
account required pam_nologin.so
account required pam_access.so
account include system-auth
+
password include system-auth
+
session optional pam_keyinit.so force revoke
session include system-auth
session optional pam_console.so
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/lightdm.git/commitdiff/a4e66fb63d653e505db80a7f1eb8c3577ca26eee
_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
