153 lines
11 KiB
Diff
153 lines
11 KiB
Diff
From a21f75d8194df780f83aff0f36d270f56af7f182 Mon Sep 17 00:00:00 2001
|
|
From: Jakub Hrozek <jakub.hrozek@posteo.se>
|
|
Date: Mon, 25 Feb 2019 21:48:18 +0100
|
|
Subject: [PATCH] Revert "profiles: make session pam_systemd required"
|
|
|
|
This reverts commit 297f48d60dd9fe4ba3fd2bdd1bdd5276ffa557d6.
|
|
---
|
|
profiles/nis/fingerprint-auth | 2 +-
|
|
profiles/nis/password-auth | 2 +-
|
|
profiles/nis/system-auth | 2 +-
|
|
profiles/sssd/fingerprint-auth | 2 +-
|
|
profiles/sssd/password-auth | 2 +-
|
|
profiles/sssd/smartcard-auth | 2 +-
|
|
profiles/sssd/system-auth | 2 +-
|
|
profiles/winbind/fingerprint-auth | 2 +-
|
|
profiles/winbind/password-auth | 2 +-
|
|
profiles/winbind/system-auth | 2 +-
|
|
10 files changed, 10 insertions(+), 10 deletions(-)
|
|
|
|
diff --git a/profiles/nis/fingerprint-auth b/profiles/nis/fingerprint-auth
|
|
index dc9e53b..278487b 100644
|
|
--- a/profiles/nis/fingerprint-auth
|
|
+++ b/profiles/nis/fingerprint-auth
|
|
@@ -17,7 +17,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth
|
|
index 60781bb..2ce77fd 100644
|
|
--- a/profiles/nis/password-auth
|
|
+++ b/profiles/nis/password-auth
|
|
@@ -22,7 +22,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth
|
|
index 3edbf34..d1f270a 100644
|
|
--- a/profiles/nis/system-auth
|
|
+++ b/profiles/nis/system-auth
|
|
@@ -23,7 +23,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/sssd/fingerprint-auth b/profiles/sssd/fingerprint-auth
|
|
index 3bdaf3e..01b70f3 100644
|
|
--- a/profiles/sssd/fingerprint-auth
|
|
+++ b/profiles/sssd/fingerprint-auth
|
|
@@ -19,7 +19,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth
|
|
index fbd6647..c61630d 100644
|
|
--- a/profiles/sssd/password-auth
|
|
+++ b/profiles/sssd/password-auth
|
|
@@ -28,7 +28,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/sssd/smartcard-auth b/profiles/sssd/smartcard-auth
|
|
index 5ec5e1d..82e82cc 100644
|
|
--- a/profiles/sssd/smartcard-auth
|
|
+++ b/profiles/sssd/smartcard-auth
|
|
@@ -16,7 +16,7 @@ account required pam_permit.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth
|
|
index 2879592..d70c7da 100644
|
|
--- a/profiles/sssd/system-auth
|
|
+++ b/profiles/sssd/system-auth
|
|
@@ -32,7 +32,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/winbind/fingerprint-auth b/profiles/winbind/fingerprint-auth
|
|
index 9264946..0beff74 100644
|
|
--- a/profiles/winbind/fingerprint-auth
|
|
+++ b/profiles/winbind/fingerprint-auth
|
|
@@ -18,7 +18,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/winbind/password-auth b/profiles/winbind/password-auth
|
|
index b694bed..455add4 100644
|
|
--- a/profiles/winbind/password-auth
|
|
+++ b/profiles/winbind/password-auth
|
|
@@ -25,7 +25,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
diff --git a/profiles/winbind/system-auth b/profiles/winbind/system-auth
|
|
index 88e1c07..5b383f7 100644
|
|
--- a/profiles/winbind/system-auth
|
|
+++ b/profiles/winbind/system-auth
|
|
@@ -26,7 +26,7 @@ password required pam_deny.so
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"}
|
|
-session required pam_systemd.so
|
|
+-session optional pam_systemd.so
|
|
session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"}
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|
|
--
|
|
2.19.2
|
|
|