From 79521397310f5e4e200291b2e2380e8e58953f18 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Thu, 5 Nov 2020 06:39:32 -0500 Subject: [PATCH] comment --- usr/lib/security-misc/pam-abort-on-locked-password | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/usr/lib/security-misc/pam-abort-on-locked-password b/usr/lib/security-misc/pam-abort-on-locked-password index 8ea4cc5..38f1797 100755 --- a/usr/lib/security-misc/pam-abort-on-locked-password +++ b/usr/lib/security-misc/pam-abort-on-locked-password @@ -3,6 +3,10 @@ ## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP ## See the file COPYING for copying conditions. +## This is only a usability feature to avoid needlessly bumping pam_tally2 +## counter. This is not a security feature. +## https://forums.whonix.org/t/restrict-root-access/7658/1 + if ! passwd_output="$(passwd -S "$PAM_USER" 2>/dev/null)" ; then echo "$0: ERROR: user \"$PAM_USER\" does not exist." >&2 exit 1