|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
ca47f63 |
#%PAM-1.0
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
6a5e296 |
auth required pam_sepermit.so
|
|
![](https://seccdn.libravatar.org/avatar/11afc4766506506a582e83bf5dad6005aad98d91726c9c0c041d9eb354dae101?s=16&d=retro) |
4330e6a |
auth include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
ca47f63 |
account required pam_nologin.so
|
|
![](https://seccdn.libravatar.org/avatar/11afc4766506506a582e83bf5dad6005aad98d91726c9c0c041d9eb354dae101?s=16&d=retro) |
4330e6a |
account include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/11afc4766506506a582e83bf5dad6005aad98d91726c9c0c041d9eb354dae101?s=16&d=retro) |
4330e6a |
password include password-auth
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
1961bc1 |
# pam_selinux.so close should be the first session rule
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
1961bc1 |
session required pam_selinux.so close
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
ca47f63 |
session required pam_loginuid.so
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
1961bc1 |
# pam_selinux.so open should only be followed by sessions to be executed in the user context
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
1961bc1 |
session required pam_selinux.so open env_params
|
|
![](https://seccdn.libravatar.org/avatar/dedd662cd18533e6b346ba9fced85f9b3e4c6ff8041e69506ad783477abed011?s=16&d=retro) |
1961bc1 |
session optional pam_keyinit.so force revoke
|
|
![](https://seccdn.libravatar.org/avatar/11afc4766506506a582e83bf5dad6005aad98d91726c9c0c041d9eb354dae101?s=16&d=retro) |
4330e6a |
session include password-auth
|