|
 |
ca47f63 |
#%PAM-1.0
|
|
|
6a5e296 |
auth required pam_sepermit.so
|
|
Jan F. Chadima |
d3d3406 |
auth substack password-auth
|
|
Jan F. Chadima |
0d4fd57 |
auth include postlogin
|
|
 |
26621fa |
# Used with polkit to reauthorize users in remote sessions
|
|
|
26621fa |
-auth optional pam_reauthorize.so prepare
|
|
|
ca47f63 |
account required pam_nologin.so
|
|
 |
4330e6a |
account include password-auth
|
|
|
4330e6a |
password include password-auth
|
|
|
1961bc1 |
# pam_selinux.so close should be the first session rule
|
|
|
1961bc1 |
session required pam_selinux.so close
|
|
|
ca47f63 |
session required pam_loginuid.so
|
|
|
1961bc1 |
# pam_selinux.so open should only be followed by sessions to be executed in the user context
|
|
|
1961bc1 |
session required pam_selinux.so open env_params
|
|
 |
968dbc2 |
session required pam_namespace.so
|
|
|
1961bc1 |
session optional pam_keyinit.so force revoke
|
|
|
4330e6a |
session include password-auth
|
|
Jan F. Chadima |
0d4fd57 |
session include postlogin
|
|
|
26621fa |
# Used with polkit to reauthorize users in remote sessions
|
|
|
26621fa |
-session optional pam_reauthorize.so prepare
|