|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
#%PAM-1.0
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
auth substack password-auth
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
auth include postlogin
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
c7d42e7 |
account required pam_sepermit.so
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
account required pam_nologin.so
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
account include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
password include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
# pam_selinux.so close should be the first session rule
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session required pam_selinux.so close
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session required pam_loginuid.so
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
# pam_selinux.so open should only be followed by sessions to be executed in the user context
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session required pam_selinux.so open env_params
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
04aef64 |
session required pam_namespace.so
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session optional pam_keyinit.so force revoke
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
db96e2a |
session optional pam_motd.so
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
99254d5 |
session include postlogin
|