diff --git a/usr/share/pam-configs/security-misc b/usr/share/pam-configs/security-misc deleted file mode 100644 index 2cf08ca..0000000 --- a/usr/share/pam-configs/security-misc +++ /dev/null @@ -1,7 +0,0 @@ -Name: group sudo membership required to use su and lock accounts after 5 failed authentication attempts (by package security-misc) -Default: yes -Priority: 260 -Auth-Type: Primary -Auth: - required pam_wheel.so group=sudo debug - required pam_tally2.so deny=5 debug diff --git a/usr/share/pam-configs/tally2-security-misc b/usr/share/pam-configs/tally2-security-misc new file mode 100644 index 0000000..3639b13 --- /dev/null +++ b/usr/share/pam-configs/tally2-security-misc @@ -0,0 +1,6 @@ +Name: lock accounts after 5 failed authentication attempts (by package security-misc) +Default: yes +Priority: 260 +Auth-Type: Primary +Auth: + required pam_tally2.so deny=5 debug diff --git a/usr/share/pam-configs/wheel-security-misc b/usr/share/pam-configs/wheel-security-misc new file mode 100644 index 0000000..bf7442c --- /dev/null +++ b/usr/share/pam-configs/wheel-security-misc @@ -0,0 +1,6 @@ +Name: group sudo membership required to use su (by package security-misc) +Default: yes +Priority: 270 +Auth-Type: Primary +Auth: + required pam_wheel.so group=sudo debug