[packages/pam] - drop pam_tally from system-auth

baggins baggins at pld-linux.org
Sat Dec 23 10:53:39 CET 2023


commit fb0180c81fe07460f8f301520936c236df7e4021
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Sat Dec 23 09:12:05 2023 +0100

    - drop pam_tally from system-auth
    
    The default behavior was to not do anything (deny=0 - don't lock
    account) and replacing with pam_faillog is non trivial to do
    automatically.

 pam.spec         | 1 -
 system-auth.pamd | 2 --
 2 files changed, 3 deletions(-)
---
diff --git a/pam.spec b/pam.spec
index af061de..8daeb42 100644
--- a/pam.spec
+++ b/pam.spec
@@ -1,6 +1,5 @@
 # TODO
 # - fix pdf gen or disable it: No fo2pdf processor installed, skip PDF generation
-# - pam_tally, pam_tally2 are deprecated in favor of pam_faillock
 # NOTE: https://github.com/linux-pam/linux-pam/releases/download/v%{version}/Linux-PAM-%{version}-docs.tar.xz
 #   is not needed here: it contains documentation in target formats (HTML, PDF) built from sources included in main tarball
 #
diff --git a/system-auth.pamd b/system-auth.pamd
index bdf95ab..82d84b0 100644
--- a/system-auth.pamd
+++ b/system-auth.pamd
@@ -1,10 +1,8 @@
 #%PAM-1.0
 auth		required	pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
 auth		required	pam_env.so
-auth		required	pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
 auth		required	pam_unix.so try_first_pass
 
-account		required	pam_tally.so file=/var/log/faillog onerr=succeed
 account		required	pam_time.so
 account		required	pam_unix.so
 
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/pam.git/commitdiff/23fa49333acbd78ce8d4861c0734e45bd43d0437



More information about the pld-cvs-commit mailing list