mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-13 01:09:16 +07:00
Code Issues Packages Projects Releases Wiki Activity

port from pam_tally2 to pam_faillock

Browse Source 
since pam_tally2 was deprecated upstream
This commit is contained in:
Patrick Schleizer
2021-08-10 17:13:00 -04:00
parent 2bf0e7471c
commit 582492d6d8
6 changed files with 107 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
usr/share/pam-configs/faillock-security-misc
View File

@ -1,11 +1,11 @@
Name: lock accounts after 50 failed authentication attempts (by package security-misc)
Name: lock accounts after 50 failed authentication attempts (part 1) (by package security-misc)
Default: yes
Priority: 290
Auth-Type: Primary
Auth:
optional pam_exec.so debug stdout seteuid /usr/libexec/security-misc/pam-info
[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_faillock_not_if_x
requisite pam_faillock.so even_deny_root deny=50 onerr=fail audit debug
required pam_faillock.so preauth
Account-Type: Primary
Account:
requisite pam_faillock.so debug
requisite pam_faillock.so

7
usr/share/pam-configs/faillock2-security-misc Normal file
View File

@ -0,0 +1,7 @@
Name: lock accounts after 50 failed authentication attempts (part 2) (by package security-misc)
Default: yes
Priority: 245
Auth-Type: Primary
Auth:
[default=die] pam_faillock.so authfail
sufficient pam_faillock.so authsucc