From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D28E61382C5 for ; Sat, 19 Dec 2020 22:34:23 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E650DE08ED; Sat, 19 Dec 2020 22:34:22 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id CB020E08ED for ; Sat, 19 Dec 2020 22:34:22 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 8E7C234105B for ; Sat, 19 Dec 2020 22:34:21 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 17CBB4A for ; Sat, 19 Dec 2020 22:34:20 +0000 (UTC) From: "Mikle Kolyada" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Mikle Kolyada" Message-ID: <1608417015.b725e39af14b57b69a256818bc1c98f98122c6a1.zlogene@gentoo> Subject: [gentoo-commits] proj/pambase:master commit in: templates/ X-VCS-Repository: proj/pambase X-VCS-Files: templates/system-auth.tpl templates/system-session.tpl X-VCS-Directories: templates/ X-VCS-Committer: zlogene X-VCS-Committer-Name: Mikle Kolyada X-VCS-Revision: b725e39af14b57b69a256818bc1c98f98122c6a1 X-VCS-Branch: master Date: Sat, 19 Dec 2020 22:34:20 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 59ae77d9-b88f-40f8-b218-aac3123dffdf X-Archives-Hash: bd8996da05b30e3dc6753e76b8821574 commit: b725e39af14b57b69a256818bc1c98f98122c6a1 Author: Mikle KOlyada gentoo org> AuthorDate: Sat Dec 19 22:30:15 2020 +0000 Commit: Mikle Kolyada gentoo org> CommitDate: Sat Dec 19 22:30:15 2020 +0000 URL: https://gitweb.gentoo.org/proj/pambase.git/commit/?id=b725e39a strip pam_permit.so from system-auth Signed-off-by: Mikle KOlyada gentoo.org> templates/system-auth.tpl | 4 ---- templates/system-session.tpl | 2 -- 2 files changed, 6 deletions(-) diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index 19e08fa..01a29db 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -10,7 +10,6 @@ auth [success=3 default=ignore] pam_krb5.so {{ krb5_params }} auth requisite pam_faillock.so preauth auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass auth [default=die] pam_faillock.so authfail -auth optional pam_permit.so {% if caps %} -auth optional pam_cap.so @@ -21,7 +20,6 @@ account [success=2 default=ignore] pam_krb5.so {{ krb5_params }} {% endif %} account required pam_unix.so {{ debug|default('', true) }} account required pam_faillock.so -account optional pam_permit.so {% if passwdqc %} password required pam_passwdqc.so config=/etc/security/passwdqc.conf @@ -45,8 +43,6 @@ password required pam_unix.so try_first_pass {{ unix_authtok|default('', true) } password required pam_unix.so try_first_pass {{ nullok|default('', true) }} {{ unix_extended_encryption|default('', true) }} {{ debug|default('', true) }} {% endif %} -password optional pam_permit.so - {% if pam_ssh %} session optional pam_ssh.so {% endif %} diff --git a/templates/system-session.tpl b/templates/system-session.tpl index ce3afa5..2a7024b 100644 --- a/templates/system-session.tpl +++ b/templates/system-session.tpl @@ -9,5 +9,3 @@ session [success=1 default=ignore] pam_krb5.so {{ krb5_params }} {% endif %} session required pam_unix.so {{ debug|default('', true) }} - -session optional pam_permit.so