aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSam James <sam@gentoo.org>2020-10-20 02:32:28 +0000
committerSam James <sam@gentoo.org>2020-10-20 02:38:20 +0000
commiteb138196aa2d3cb860d5eb5ab1d05985df34ad2c (patch)
tree5b7b4b2f5b1cefdee374f77b77e2b3944cd9c579
parenttemplates/system-auth.tpl: drop superfluous conf param on faillock (diff)
downloadpambase-eb138196aa2d3cb860d5eb5ab1d05985df34ad2c.tar.gz
pambase-eb138196aa2d3cb860d5eb5ab1d05985df34ad2c.tar.bz2
pambase-eb138196aa2d3cb860d5eb5ab1d05985df34ad2c.zip
templates/system-auth.tpl: use faillock in minimal casepambase-20201020
Bug: https://bugs.gentoo.org/748405 Signed-off-by: Sam James <sam@gentoo.org>
-rw-r--r--templates/system-auth.tpl7
1 files changed, 2 insertions, 5 deletions
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index bc28468..faf18ee 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -7,13 +7,10 @@ auth sufficient pam_ssh.so
auth [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif %}
-auth required pam_unix.so try_first_pass {{ likeauth }} {{ nullok|default('', true) }} {{ debug|default('', true) }}
auth optional pam_permit.so
-{% if not minimal %}
-auth required pam_faillock.so preauth
-auth sufficient pam_unix.so nullok try_first_pass
+auth requisite pam_faillock.so preauth
+auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass
auth [default=die] pam_faillock.so authfail
-{% endif %}
{% if krb5 %}
account [success=1 default=ignore] pam_krb5.so {{ krb5_params }}