Merge pull request #12491 from 89luca89/fix/linux_pam_configs

wolfi-dev · Feb 7, 2024 · a24f873 · a24f873
2 parents a0d9ab7 + 522ef60
commit a24f873
Show file tree

Hide file tree

Showing 8 changed files with 38 additions and 0 deletions.
diff --git a/util-linux/base-account.pamd b/util-linux/base-account.pamd
@@ -0,0 +1,4 @@
+# basic PAM configuration for Wolfi.
+
+account required pam_unix.so
+account required pam_nologin.so
diff --git a/util-linux/base-auth.pamd b/util-linux/base-auth.pamd
@@ -0,0 +1,5 @@
+# basic PAM configuration for Wolfi.
+
+auth required pam_unix.so nullok
+auth required pam_nologin.so
+auth required pam_env.so
diff --git a/util-linux/base-password.pamd b/util-linux/base-password.pamd
@@ -0,0 +1,3 @@
+# basic PAM configuration for Wolfi.
+
+password required pam_unix.so nullok sha512 shadow
diff --git a/util-linux/base-session-noninteractive.pamd b/util-linux/base-session-noninteractive.pamd
@@ -0,0 +1,5 @@
+# basic PAM configuration for Wolfi.
+
+session required pam_env.so
+session required pam_limits.so
+session required pam_unix.so
diff --git a/util-linux/base-session.pamd b/util-linux/base-session.pamd
@@ -0,0 +1,3 @@
+# basic PAM configuration for Wolfi.
+
+session include base-session-noninteractive
diff --git a/util-linux/other.pamd b/util-linux/other.pamd
@@ -0,0 +1,6 @@
+#%PAM-1.0
+# default config for any service don't specified
+auth     include    base-auth
+account  include    base-account
+password include    base-password
+session  include    base-session-noninteractive
diff --git a/util-linux/su-l.pamd b/util-linux/su-l.pamd
@@ -0,0 +1,6 @@
+# basic PAM configuration for Wolfi.
+auth     sufficient pam_rootok.so
+auth     include    base-auth
+account  include    base-account
+password include    base-password
+session  include    base-session
diff --git a/util-linux/su.pamd b/util-linux/su.pamd
@@ -0,0 +1,6 @@
+# basic PAM configuration for Wolfi.
+auth     sufficient pam_rootok.so
+auth     include    base-auth
+account  include    base-account
+password include    base-password
+session  include    base-session
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		# basic PAM configuration for Wolfi.

		password required pam_unix.so nullok sha512 shadow
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		# basic PAM configuration for Wolfi.

		session include base-session-noninteractive