Changed pam stack to password-auth

This commit is contained in:
Jan F. Chadima 2009-09-16 08:12:30 +00:00
parent 3d51c727c3
commit 4330e6af2b
2 changed files with 8 additions and 5 deletions

View File

@ -63,7 +63,7 @@
Summary: An open source implementation of SSH protocol versions 1 and 2 Summary: An open source implementation of SSH protocol versions 1 and 2
Name: openssh Name: openssh
Version: 5.2p1 Version: 5.2p1
Release: 25%{?dist}%{?rescue_rel} Release: 26%{?dist}%{?rescue_rel}
URL: http://www.openssh.com/portable.html URL: http://www.openssh.com/portable.html
#Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz #Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
#Source1: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz.asc #Source1: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz.asc
@ -466,6 +466,9 @@ fi
%endif %endif
%changelog %changelog
* Wed Sep 16 2009 Jan F. Chadima <jchadima@redhat.com> - 5.2p1-26
- Changed pam stack to password-auth
* Fri Sep 11 2009 Jan F. Chadima <jchadima@redhat.com> - 5.2p1-25 * Fri Sep 11 2009 Jan F. Chadima <jchadima@redhat.com> - 5.2p1-25
- Dropped homechroot patch - Dropped homechroot patch

View File

@ -1,13 +1,13 @@
#%PAM-1.0 #%PAM-1.0
auth required pam_sepermit.so auth required pam_sepermit.so
auth include system-auth auth include password-auth
account required pam_nologin.so account required pam_nologin.so
account include system-auth account include password-auth
password include system-auth password include password-auth
# pam_selinux.so close should be the first session rule # pam_selinux.so close should be the first session rule
session required pam_selinux.so close session required pam_selinux.so close
session required pam_loginuid.so session required pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context # pam_selinux.so open should only be followed by sessions to be executed in the user context
session required pam_selinux.so open env_params session required pam_selinux.so open env_params
session optional pam_keyinit.so force revoke session optional pam_keyinit.so force revoke
session include system-auth session include password-auth