PAM: Remove pam_unix nullok from /usr/share/pam-configs/unix also

pyllyukko · Oct 26, 2024 · 9d7cda3 · 9d7cda3
1 parent 45ca8b8
commit 9d7cda3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tasks/pam.yml b/tasks/pam.yml
@@ -198,9 +198,13 @@
     - debian
   when: ansible_distribution == "Debian" or ansible_distribution == "Kali"
   ansible.builtin.replace:
-    path: /etc/pam.d/common-auth
+    path: '{{ item }}'
     regexp: '\s+nullok(_secure)?'
     replace: ''
+    backup: true
+  with_items:
+    - /etc/pam.d/common-auth
+    - /usr/share/pam-configs/unix
 
 # https://wiki.debian.org/WHEEL/PAM
 # This is not enabled in Slackware because it has a separate "Deny use of su" task