From 522ef602f0221efe29868412302fca6ea2b493fc Mon Sep 17 00:00:00 2001 From: Luca Di Maio Date: Mon, 5 Feb 2024 17:59:09 +0100 Subject: [PATCH] fix: add missing configs to linux-pam package Signed-off-by: Luca Di Maio --- util-linux/base-account.pamd | 4 ++++ util-linux/base-auth.pamd | 5 +++++ util-linux/base-password.pamd | 3 +++ util-linux/base-session-noninteractive.pamd | 5 +++++ util-linux/base-session.pamd | 3 +++ util-linux/other.pamd | 6 ++++++ util-linux/su-l.pamd | 6 ++++++ util-linux/su.pamd | 6 ++++++ 8 files changed, 38 insertions(+) create mode 100644 util-linux/base-account.pamd create mode 100644 util-linux/base-auth.pamd create mode 100644 util-linux/base-password.pamd create mode 100644 util-linux/base-session-noninteractive.pamd create mode 100644 util-linux/base-session.pamd create mode 100644 util-linux/other.pamd create mode 100644 util-linux/su-l.pamd create mode 100644 util-linux/su.pamd diff --git a/util-linux/base-account.pamd b/util-linux/base-account.pamd new file mode 100644 index 00000000000..48008bf174b --- /dev/null +++ b/util-linux/base-account.pamd @@ -0,0 +1,4 @@ +# basic PAM configuration for Wolfi. + +account required pam_unix.so +account required pam_nologin.so diff --git a/util-linux/base-auth.pamd b/util-linux/base-auth.pamd new file mode 100644 index 00000000000..f3543936fb9 --- /dev/null +++ b/util-linux/base-auth.pamd @@ -0,0 +1,5 @@ +# basic PAM configuration for Wolfi. + +auth required pam_unix.so nullok +auth required pam_nologin.so +auth required pam_env.so diff --git a/util-linux/base-password.pamd b/util-linux/base-password.pamd new file mode 100644 index 00000000000..5101df97e18 --- /dev/null +++ b/util-linux/base-password.pamd @@ -0,0 +1,3 @@ +# basic PAM configuration for Wolfi. + +password required pam_unix.so nullok sha512 shadow diff --git a/util-linux/base-session-noninteractive.pamd b/util-linux/base-session-noninteractive.pamd new file mode 100644 index 00000000000..501c7161e2c --- /dev/null +++ b/util-linux/base-session-noninteractive.pamd @@ -0,0 +1,5 @@ +# basic PAM configuration for Wolfi. + +session required pam_env.so +session required pam_limits.so +session required pam_unix.so diff --git a/util-linux/base-session.pamd b/util-linux/base-session.pamd new file mode 100644 index 00000000000..1351193e362 --- /dev/null +++ b/util-linux/base-session.pamd @@ -0,0 +1,3 @@ +# basic PAM configuration for Wolfi. + +session include base-session-noninteractive diff --git a/util-linux/other.pamd b/util-linux/other.pamd new file mode 100644 index 00000000000..c64c363af90 --- /dev/null +++ b/util-linux/other.pamd @@ -0,0 +1,6 @@ +#%PAM-1.0 +# default config for any service don't specified +auth include base-auth +account include base-account +password include base-password +session include base-session-noninteractive diff --git a/util-linux/su-l.pamd b/util-linux/su-l.pamd new file mode 100644 index 00000000000..fbba4006e3f --- /dev/null +++ b/util-linux/su-l.pamd @@ -0,0 +1,6 @@ +# basic PAM configuration for Wolfi. +auth sufficient pam_rootok.so +auth include base-auth +account include base-account +password include base-password +session include base-session diff --git a/util-linux/su.pamd b/util-linux/su.pamd new file mode 100644 index 00000000000..fbba4006e3f --- /dev/null +++ b/util-linux/su.pamd @@ -0,0 +1,6 @@ +# basic PAM configuration for Wolfi. +auth sufficient pam_rootok.so +auth include base-auth +account include base-account +password include base-password +session include base-session