PAM: abort on locked password

to avoid needlessly bumping pam_tally2 counter

https://forums.whonix.org/t/restrict-root-access/7658/1
This commit is contained in:
Patrick Schleizer
2019-08-17 10:33:47 +00:00
parent e0e25364e2
commit 41b2819ec8
4 changed files with 26 additions and 13 deletions

View File

@ -0,0 +1,6 @@
Name: abort on locked password (by package security-misc)
Default: yes
Priority: 280
Auth-Type: Primary
Auth:
requisite pam_exec.so debug stdout seteuid /usr/lib/security-misc/pam-abort-on-locked-password

View File

@ -1,6 +1,6 @@
Name: group sudo membership required to use su (by package security-misc)
Default: yes
Priority: 270
Priority: 280
Auth-Type: Primary
Auth:
requisite pam_wheel.so group=sudo debug