From fd70881fc93256f3198d282ba0304bf77246e969 Mon Sep 17 00:00:00 2001 From: James Meyer Date: Tue, 7 Aug 2012 12:50:07 -0500 Subject: pambase: 20120701 -new --- abs/core/pambase/PKGBUILD | 41 ++++++++++++++++++++++++++++++++++++ abs/core/pambase/other | 5 +++++ abs/core/pambase/system-auth | 17 +++++++++++++++ abs/core/pambase/system-local-login | 6 ++++++ abs/core/pambase/system-login | 20 ++++++++++++++++++ abs/core/pambase/system-remote-login | 6 ++++++ abs/core/pambase/system-services | 11 ++++++++++ 7 files changed, 106 insertions(+) create mode 100644 abs/core/pambase/PKGBUILD create mode 100644 abs/core/pambase/other create mode 100644 abs/core/pambase/system-auth create mode 100644 abs/core/pambase/system-local-login create mode 100644 abs/core/pambase/system-login create mode 100644 abs/core/pambase/system-remote-login create mode 100644 abs/core/pambase/system-services diff --git a/abs/core/pambase/PKGBUILD b/abs/core/pambase/PKGBUILD new file mode 100644 index 0000000..4b52457 --- /dev/null +++ b/abs/core/pambase/PKGBUILD @@ -0,0 +1,41 @@ +# $Id: PKGBUILD 162994 2012-07-04 21:45:33Z dreisner $ +# Maintainer: Dave Reisner + +pkgname=pambase +pkgver=20120701 +pkgrel=1 +pkgdesc="Base PAM configuration for services" +arch=('any') +url="http://www.archlinux.org" +license=('GPL') +source=('system-auth' + 'system-local-login' + 'system-login' + 'system-remote-login' + 'system-services' + 'other') +backup=('etc/pam.d/system-auth' + 'etc/pam.d/system-local-login' + 'etc/pam.d/system-login' + 'etc/pam.d/system-remote-login' + 'etc/pam.d/system-services' + 'etc/pam.d/other') +md5sums=('5f169a4ffe7ed69f58e106cdd2d760df' + '477237985820117a0e6e1b13a86eb599' + '17c691f2da319df8fe851bc47cc1d662' + '477237985820117a0e6e1b13a86eb599' + '30fe7d41e054ee43fab7855bf88a07e5' + '6e6c8719e5989d976a14610f340bd33a') + +package() { + install -dm755 "$pkgdir/etc/pam.d" + install -m644 -t "$pkgdir/etc/pam.d" \ + system-auth \ + system-local-login \ + system-login \ + system-remote-login \ + system-services \ + other +} + +# vim:set ts=2 sw=2 et: diff --git a/abs/core/pambase/other b/abs/core/pambase/other new file mode 100644 index 0000000..08498b4 --- /dev/null +++ b/abs/core/pambase/other @@ -0,0 +1,5 @@ +#%PAM-1.0 +auth required pam_unix.so +account required pam_unix.so +password required pam_unix.so +session required pam_unix.so diff --git a/abs/core/pambase/system-auth b/abs/core/pambase/system-auth new file mode 100644 index 0000000..b28a7e9 --- /dev/null +++ b/abs/core/pambase/system-auth @@ -0,0 +1,17 @@ +#%PAM-1.0 + +auth required pam_env.so +auth required pam_unix.so try_first_pass nullok +auth optional pam_permit.so + +account required pam_unix.so +account optional pam_permit.so +account required pam_time.so + +password required pam_unix.so try_first_pass nullok sha512 shadow +password optional pam_permit.so + +session required pam_limits.so +session required pam_env.so +session required pam_unix.so +session optional pam_permit.so diff --git a/abs/core/pambase/system-local-login b/abs/core/pambase/system-local-login new file mode 100644 index 0000000..347b815 --- /dev/null +++ b/abs/core/pambase/system-local-login @@ -0,0 +1,6 @@ +#%PAM-1.0 + +auth include system-login +account include system-login +password include system-login +session include system-login diff --git a/abs/core/pambase/system-login b/abs/core/pambase/system-login new file mode 100644 index 0000000..c3bfd7c --- /dev/null +++ b/abs/core/pambase/system-login @@ -0,0 +1,20 @@ +#%PAM-1.0 + +auth required pam_tally.so onerr=succeed file=/var/log/faillog +auth required pam_shells.so +auth requisite pam_nologin.so +auth include system-auth + +account required pam_access.so +account required pam_nologin.so +account include system-auth + +password include system-auth + +session optional pam_loginuid.so +session required pam_env.so +session include system-auth +session optional pam_motd.so motd=/etc/motd +session optional pam_mail.so dir=/var/spool/mail standard +-session optional pam_ck_connector.so nox11 +-session optional pam_systemd.so diff --git a/abs/core/pambase/system-remote-login b/abs/core/pambase/system-remote-login new file mode 100644 index 0000000..347b815 --- /dev/null +++ b/abs/core/pambase/system-remote-login @@ -0,0 +1,6 @@ +#%PAM-1.0 + +auth include system-login +account include system-login +password include system-login +session include system-login diff --git a/abs/core/pambase/system-services b/abs/core/pambase/system-services new file mode 100644 index 0000000..311c0d6 --- /dev/null +++ b/abs/core/pambase/system-services @@ -0,0 +1,11 @@ +#%PAM-1.0 + +auth sufficient pam_permit.so + +account include system-auth + +session optional pam_loginuid.so +session required pam_limits.so +session required pam_env.so +session required pam_unix.so +session optional pam_permit.so -- cgit v0.12