pambase: 20120701

-new

7 files changed, 106 insertions, 0 deletions

diff --git a/abs/core/pambase/PKGBUILD b/abs/core/pambase/PKGBUILD
new file mode 100644
index 0000000..4b52457
--- /dev/null
+++ b/abs/core/pambase/PKGBUILD
@@ -0,0 +1,41 @@
+# $Id: PKGBUILD 162994 2012-07-04 21:45:33Z dreisner $
+# Maintainer: Dave Reisner <dreisner@archlinux.org>
+
+pkgname=pambase
+pkgver=20120701
+pkgrel=1
+pkgdesc="Base PAM configuration for services"
+arch=('any')
+url="http://www.archlinux.org"
+license=('GPL')
+source=('system-auth'
+        'system-local-login'
+        'system-login'
+        'system-remote-login'
+        'system-services'
+        'other')
+backup=('etc/pam.d/system-auth'
+        'etc/pam.d/system-local-login'
+        'etc/pam.d/system-login'
+        'etc/pam.d/system-remote-login'
+        'etc/pam.d/system-services'
+        'etc/pam.d/other')
+md5sums=('5f169a4ffe7ed69f58e106cdd2d760df'
+         '477237985820117a0e6e1b13a86eb599'
+         '17c691f2da319df8fe851bc47cc1d662'
+         '477237985820117a0e6e1b13a86eb599'
+         '30fe7d41e054ee43fab7855bf88a07e5'
+         '6e6c8719e5989d976a14610f340bd33a')
+
+package() {
+  install -dm755 "$pkgdir/etc/pam.d"
+  install -m644 -t "$pkgdir/etc/pam.d" \
+      system-auth \
+      system-local-login \
+      system-login \
+      system-remote-login \
+      system-services \
+      other
+}
+
+# vim:set ts=2 sw=2 et:
diff --git a/abs/core/pambase/other b/abs/core/pambase/other
new file mode 100644
index 0000000..08498b4
--- /dev/null
+++ b/abs/core/pambase/other
@@ -0,0 +1,5 @@
+#%PAM-1.0
+auth		required	pam_unix.so
+account		required	pam_unix.so
+password	required	pam_unix.so
+session		required	pam_unix.so
diff --git a/abs/core/pambase/system-auth b/abs/core/pambase/system-auth
new file mode 100644
index 0000000..b28a7e9
--- /dev/null
+++ b/abs/core/pambase/system-auth
@@ -0,0 +1,17 @@
+#%PAM-1.0
+
+auth      required  pam_env.so
+auth      required  pam_unix.so     try_first_pass nullok
+auth      optional  pam_permit.so
+
+account   required  pam_unix.so
+account   optional  pam_permit.so
+account   required  pam_time.so
+
+password  required  pam_unix.so     try_first_pass nullok sha512 shadow
+password  optional  pam_permit.so
+
+session   required  pam_limits.so
+session   required  pam_env.so
+session   required  pam_unix.so
+session   optional  pam_permit.so
diff --git a/abs/core/pambase/system-local-login b/abs/core/pambase/system-local-login
new file mode 100644
index 0000000..347b815
--- /dev/null
+++ b/abs/core/pambase/system-local-login
@@ -0,0 +1,6 @@
+#%PAM-1.0
+
+auth      include   system-login
+account   include   system-login
+password  include   system-login
+session   include   system-login
diff --git a/abs/core/pambase/system-login b/abs/core/pambase/system-login
new file mode 100644
index 0000000..c3bfd7c
--- /dev/null
+++ b/abs/core/pambase/system-login
@@ -0,0 +1,20 @@
+#%PAM-1.0
+
+auth       required   pam_tally.so         onerr=succeed file=/var/log/faillog
+auth       required   pam_shells.so
+auth       requisite  pam_nologin.so
+auth       include    system-auth
+
+account    required   pam_access.so
+account    required   pam_nologin.so
+account    include    system-auth
+
+password   include    system-auth
+
+session    optional   pam_loginuid.so
+session    required   pam_env.so
+session    include    system-auth
+session    optional   pam_motd.so          motd=/etc/motd
+session    optional   pam_mail.so          dir=/var/spool/mail standard
+-session   optional   pam_ck_connector.so  nox11
+-session   optional   pam_systemd.so
diff --git a/abs/core/pambase/system-remote-login b/abs/core/pambase/system-remote-login
new file mode 100644
index 0000000..347b815
--- /dev/null
+++ b/abs/core/pambase/system-remote-login
@@ -0,0 +1,6 @@
+#%PAM-1.0
+
+auth      include   system-login
+account   include   system-login
+password  include   system-login
+session   include   system-login
diff --git a/abs/core/pambase/system-services b/abs/core/pambase/system-services
new file mode 100644
index 0000000..311c0d6
--- /dev/null
+++ b/abs/core/pambase/system-services
@@ -0,0 +1,11 @@
+#%PAM-1.0
+
+auth      sufficient  pam_permit.so
+
+account   include     system-auth
+
+session   optional    pam_loginuid.so
+session   required    pam_limits.so
+session   required    pam_env.so
+session   required    pam_unix.so
+session   optional    pam_permit.so