I've confirmed that /usr/share/pam-configs/pam_script is NOT part of
upstream package.

There's even a warning in docs regarding PAM stack:

    "Pam_script.so is listed as "required" so failures will affect the outcome
    of the PAM stack, particularly for authentication, which will lock a
    user with greater than "deny" login failures."

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1411225

Title:
  bad pam stack allows introducing any password on all users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libpam-script/+bug/1411225/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to