diff --git a/login.pamd b/login.pamd index c164e3d..0379ae3 100644 --- a/login.pamd +++ b/login.pamd @@ -1,10 +1,14 @@ #%PAM-1.0 auth requisite pam_nologin.so -auth include common-auth -account include common-account -password include common-password +auth substack common-auth +auth include postlogin-auth +account substack common-account +account include postlogin-account +password substack common-password +password include postlogin-password session required pam_loginuid.so session optional pam_keyinit.so force revoke -session include common-session +session substack common-session +session include postlogin-session session optional pam_motd.so session optional pam_mail.so standard diff --git a/remote.pamd b/remote.pamd index 9819af2..795f019 100644 --- a/remote.pamd +++ b/remote.pamd @@ -3,10 +3,14 @@ # the -h option is used). auth requisite pam_nologin.so auth [user_unknown=ignore success=ok ignore=ignore auth_err=die default=bad] pam_securetty.so -auth include common-auth -account include common-account -password include common-password +auth substack common-auth +auth include postlogin-auth +account substack common-account +account include postlogin-account +password substack common-password +password include postlogin-password session required pam_loginuid.so session optional pam_keyinit.so force revoke -session include common-session +session substack common-session +session include postlogin-session session optional pam_mail.so standard diff --git a/runuser.pamd b/runuser.pamd index e71ab51..77501b4 100644 --- a/runuser.pamd +++ b/runuser.pamd @@ -3,5 +3,5 @@ # "auth sufficient pam_rootok.so" dummy line). auth sufficient pam_rootok.so session optional pam_keyinit.so revoke -session include common-session +session include common-session-nonlogin session optional pam_xauth.so diff --git a/util-linux.changes b/util-linux.changes index a8f9cad..1c3da9b 100644 --- a/util-linux.changes +++ b/util-linux.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Mon Mar 27 08:10:15 UTC 2023 - Thorsten Kukuk + +- login.pamd, remote.pamd: include postlogin-* rules +- runuser.pamd, su.pamd: Include common-session-nonlogin instead + of common-session + ------------------------------------------------------------------- Mon Mar 13 12:40:13 UTC 2023 - Daniel Garcia