[packages/pam] - drop pam_tally from system-auth
baggins
baggins at pld-linux.org
Sat Dec 23 10:53:39 CET 2023
commit fb0180c81fe07460f8f301520936c236df7e4021
Author: Jan Rękorajski <baggins at pld-linux.org>
Date: Sat Dec 23 09:12:05 2023 +0100
- drop pam_tally from system-auth
The default behavior was to not do anything (deny=0 - don't lock
account) and replacing with pam_faillog is non trivial to do
automatically.
pam.spec | 1 -
system-auth.pamd | 2 --
2 files changed, 3 deletions(-)
---
diff --git a/pam.spec b/pam.spec
index af061de..8daeb42 100644
--- a/pam.spec
+++ b/pam.spec
@@ -1,6 +1,5 @@
# TODO
# - fix pdf gen or disable it: No fo2pdf processor installed, skip PDF generation
-# - pam_tally, pam_tally2 are deprecated in favor of pam_faillock
# NOTE: https://github.com/linux-pam/linux-pam/releases/download/v%{version}/Linux-PAM-%{version}-docs.tar.xz
# is not needed here: it contains documentation in target formats (HTML, PDF) built from sources included in main tarball
#
diff --git a/system-auth.pamd b/system-auth.pamd
index bdf95ab..82d84b0 100644
--- a/system-auth.pamd
+++ b/system-auth.pamd
@@ -1,10 +1,8 @@
#%PAM-1.0
auth required pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
auth required pam_env.so
-auth required pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
auth required pam_unix.so try_first_pass
-account required pam_tally.so file=/var/log/faillog onerr=succeed
account required pam_time.so
account required pam_unix.so
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/pam.git/commitdiff/23fa49333acbd78ce8d4861c0734e45bd43d0437
More information about the pld-cvs-commit
mailing list