Skip to content

Commit 495ea15

Browse files
committed
update
1 parent 06853c5 commit 495ea15

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

58 files changed

+515
-0
lines changed

pam.d/atd

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
#%PAM-1.0
2+
3+
auth required pam_unix.so
4+
auth required pam_env.so
5+
6+
account required pam_access.so
7+
account required pam_unix.so
8+
account required pam_time.so
9+
10+
session required pam_loginuid.so
11+
session required pam_limits.so
12+
session required pam_unix.so

pam.d/chfn

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
#%PAM-1.0
2+
auth sufficient pam_rootok.so
3+
auth required pam_unix.so
4+
account required pam_unix.so
5+
session required pam_unix.so
6+
password required pam_permit.so

pam.d/chpasswd

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
#%PAM-1.0 | /etc/pam.d/chpasswd
2+
auth sufficient pam_rootok.so
3+
account required pam_permit.so
4+
password include system-auth

pam.d/chrome-remote-desktop

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
auth required pam_unix.so
2+
account required pam_unix.so
3+
password required pam_unix.so
4+
session required pam_unix.so

pam.d/chsh

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
#%PAM-1.0 | /etc/pam.d/chsh
2+
auth sufficient pam_fprintd.so
3+
auth sufficient pam_rootok.so
4+
auth required pam_unix.so
5+
account required pam_unix.so
6+
session required pam_unix.so
7+
password required pam_permit.so

pam.d/crond

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
#
2+
# The PAM configuration file for the cron daemon
3+
#
4+
#
5+
# Although no PAM authentication is called, auth modules
6+
# are used for credential setting
7+
auth include system-auth
8+
account required pam_access.so
9+
account include system-auth
10+
session required pam_loginuid.so
11+
session include system-auth

pam.d/cups

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
auth required pam_unix.so
2+
account required pam_unix.so
3+
session required pam_unix.so

pam.d/ddm

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
#%PAM-1.0
2+
3+
auth include system-login
4+
-auth optional pam_gnome_keyring.so
5+
-auth optional pam_kwallet5.so
6+
7+
account include system-login
8+
9+
password include system-login
10+
-password optional pam_gnome_keyring.so use_authtok
11+
12+
session optional pam_keyinit.so force revoke
13+
session include system-login
14+
-session optional pam_gnome_keyring.so auto_start
15+
-session optional pam_kwallet5.so auto_start

pam.d/ddm-autologin

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
#%PAM-1.0
2+
auth required pam_env.so
3+
auth required pam_faillock.so preauth
4+
auth required pam_shells.so
5+
auth required pam_nologin.so
6+
auth required pam_permit.so
7+
-auth optional pam_gnome_keyring.so
8+
-auth optional pam_kwallet5.so
9+
account include system-local-login
10+
password include system-local-login
11+
session include system-local-login
12+
-session optional pam_gnome_keyring.so auto_start
13+
-session optional pam_kwallet5.so auto_start

pam.d/ddm-greeter

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
#%PAM-1.0
2+
3+
# Load environment from /etc/environment and ~/.pam_environment
4+
auth required pam_env.so
5+
6+
# Always let the greeter start without authentication
7+
auth required pam_permit.so
8+
9+
# No action required for account management
10+
account required pam_permit.so
11+
12+
# Can't change password
13+
password required pam_deny.so
14+
15+
# Setup session
16+
session required pam_unix.so
17+
session optional pam_systemd.so

pam.d/doas

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth include system-auth
4+
account include system-auth
5+
session include system-auth

pam.d/dovecot

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth include system-auth
4+
account include system-auth
5+
session include system-auth
6+
password include system-auth

pam.d/gdm-autologin

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
#%PAM-1.0
2+
3+
auth required pam_shells.so
4+
auth requisite pam_nologin.so
5+
auth optional pam_permit.so
6+
auth required pam_env.so
7+
auth [success=ok default=1] pam_gdm.so
8+
auth optional pam_gnome_keyring.so
9+
10+
account include system-local-login
11+
12+
password required pam_deny.so
13+
14+
session include system-local-login
15+
session optional pam_gnome_keyring.so auto_start

pam.d/gdm-fingerprint

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
#%PAM-1.0
2+
3+
auth required pam_shells.so
4+
auth requisite pam_nologin.so
5+
auth requisite pam_faillock.so preauth
6+
auth required pam_fprintd.so
7+
auth optional pam_permit.so
8+
auth required pam_env.so
9+
auth [success=ok default=1] pam_gdm.so
10+
auth optional pam_gnome_keyring.so
11+
12+
account include system-local-login
13+
14+
password required pam_deny.so
15+
16+
session include system-local-login
17+
session optional pam_gnome_keyring.so auto_start

pam.d/gdm-launch-environment

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
#%PAM-1.0
2+
3+
auth required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
4+
auth optional pam_permit.so
5+
auth required pam_env.so
6+
7+
account required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
8+
account optional pam_permit.so
9+
10+
password required pam_deny.so
11+
12+
session optional pam_loginuid.so
13+
session optional pam_keyinit.so force revoke
14+
session required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
15+
session optional pam_permit.so
16+
-session optional pam_systemd.so
17+
-session optional pam_elogind.so
18+
session required pam_env.so

pam.d/gdm-password

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
#%PAM-1.0
2+
3+
auth include system-local-login
4+
auth optional pam_gnome_keyring.so
5+
6+
account include system-local-login
7+
8+
password include system-local-login
9+
password optional pam_gnome_keyring.so use_authtok
10+
11+
session include system-local-login
12+
session optional pam_gnome_keyring.so auto_start

pam.d/gdm-smartcard

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
#%PAM-1.0
2+
3+
auth requisite pam_nologin.so
4+
auth requisite pam_faillock.so preauth
5+
auth required pam_pkcs11.so wait_for_card card_only
6+
auth required pam_shells.so
7+
auth optional pam_permit.so
8+
auth required pam_env.so
9+
auth [success=ok default=1] pam_gdm.so
10+
auth optional pam_gnome_keyring.so
11+
12+
account include system-local-login
13+
14+
password required pam_deny.so
15+
16+
session include system-local-login
17+
session optional pam_gnome_keyring.so auto_start

pam.d/greetd

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
#%PAM-1.0 | /etc/pam.d/greetd
2+
auth sufficient pam_fprintd.so
3+
auth required pam_securetty.so
4+
auth requisite pam_nologin.so
5+
auth include system-local-login
6+
account include system-local-login
7+
session include system-local-login

pam.d/groupmems

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
#%PAM-1.0 | /etc/pam.d/groupmems
2+
auth sufficient pam_fprintd.so
3+
auth sufficient pam_rootok.so
4+
account required pam_permit.so
5+
password include system-auth

pam.d/gtklock

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth include login

pam.d/hyprlock

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# #%PAM-1.0 | /etc/pam.d/hyprlock
2+
auth sufficient pam_fprintd.so
3+
auth include login
4+

pam.d/kde

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
#%PAM-1.0
2+
3+
auth include system-local-login
4+
5+
account include system-local-login
6+
7+
password include system-local-login
8+
9+
session include system-local-login

pam.d/kde-fingerprint

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
#%PAM-1.0
2+
3+
auth required pam_shells.so
4+
auth requisite pam_nologin.so
5+
auth requisite pam_faillock.so preauth
6+
-auth required pam_fprintd.so
7+
auth optional pam_permit.so
8+
auth required pam_env.so
9+
10+
account include system-local-login
11+
12+
password required pam_deny.so
13+
14+
session include system-local-login

pam.d/kde-smartcard

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
#%PAM-1.0
2+
3+
auth requisite pam_nologin.so
4+
auth requisite pam_faillock.so preauth
5+
-auth required pam_pkcs11.so wait_for_card card_only
6+
auth required pam_shells.so
7+
auth optional pam_permit.so
8+
auth required pam_env.so
9+
10+
account include system-local-login
11+
12+
password required pam_deny.so
13+
14+
session include system-local-login

pam.d/login

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth requisite pam_nologin.so
4+
auth include system-local-login
5+
account include system-local-login
6+
session include system-local-login
7+
password include system-local-login

pam.d/newusers

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
#%PAM-1.0
2+
auth sufficient pam_rootok.so
3+
account required pam_permit.so
4+
password include system-auth

pam.d/nx

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# This is a default PAM configuration for NoMachine. It is based on
2+
# system's 'su' configuration and can be adjusted freely according
3+
# to administrative needs on the system.
4+
auth sufficient pam_fprintd.so
5+
auth include su
6+
account include su
7+
password include su
8+
session include su

pam.d/nxlimits

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# This is a default PAM configuration for NoMachine.
2+
# Used to obtain nx user and nxhtd user limits.
3+
4+
session optional pam_limits.so

pam.d/oauth2

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth sufficient pam_oauth2.so https://example.com/oauth2/tokeninfo?access_token= uid grp=tester,qaiadmin,qaidev
4+
auth include system-auth
5+
account sufficient pam_oauth2.so https://example.com/oauth2/tokeninfo?access_token= uid grp=tester,qaiadmin,qaidev
6+
account include system-auth

pam.d/other

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
#%PAM-1.0
2+
auth required pam_deny.so
3+
auth required pam_warn.so
4+
account required pam_deny.so
5+
account required pam_warn.so
6+
password required pam_deny.so
7+
password required pam_warn.so
8+
session required pam_deny.so
9+
session required pam_warn.so

pam.d/partimaged

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# PAM config file for Partimaged
2+
3+
auth required pam_unix.so
4+
auth required pam.warn.so
5+
auth required pam_listfile.so \
6+
onerr=fail item=user sense=allow \
7+
file=/etc/partimaged/partimagedusers

pam.d/passwd

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth include system-auth
4+
account include system-auth
5+
password include system-auth

pam.d/postgresql

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
auth sufficient pam_fprintd.so
2+
auth required pam_unix.so
3+
account required pam_unix.so
4+
session required pam_unix.so

pam.d/remote

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
#%PAM-1.0
2+
auth sufficient pam_fprintd.so
3+
auth required pam_securetty.so
4+
auth requisite pam_nologin.so
5+
auth include system-remote-login
6+
account include system-remote-login
7+
session include system-remote-login
8+
password include system-remote-login

pam.d/rlogin

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
#%PAM-1.0
2+
# For root login to succeed here with pam_securetty, "rlogin" must be
3+
# listed in /etc/securetty.
4+
auth required pam_nologin.so
5+
auth required pam_securetty.so
6+
auth required pam_env.so
7+
auth sufficient pam_rhosts.so
8+
auth include system-auth
9+
account include system-auth
10+
password include system-auth
11+
session optional pam_keyinit.so force revoke
12+
session required pam_loginuid.so
13+
session include system-auth

pam.d/rsh

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
#%PAM-1.0
2+
# For root login to succeed here with pam_securetty, "rsh" must be
3+
# listed in /etc/securetty.
4+
auth required pam_nologin.so
5+
auth required pam_securetty.so
6+
auth required pam_env.so
7+
auth required pam_rhosts.so
8+
account include system-auth
9+
session optional pam_keyinit.so force revoke
10+
session required pam_loginuid.so
11+
session include system-auth

pam.d/runuser

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
#%PAM-1.0
2+
3+
auth sufficient pam_rootok.so
4+
session include system-login

pam.d/runuser-l

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
#%PAM-1.0
2+
3+
auth sufficient pam_rootok.so
4+
session include system-login

pam.d/samba

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
auth required pam_unix.so
2+
account required pam_unix.so
3+
session required pam_unix.so

0 commit comments

Comments
 (0)