summaryrefslogtreecommitdiff
path: root/sshd.pam
diff options
context:
space:
mode:
authorCoprDistGit <infra@openeuler.org>2023-10-02 01:13:25 +0000
committerCoprDistGit <infra@openeuler.org>2023-10-02 01:13:25 +0000
commitf38978765535e8c844371dbcd8e2ae1ace135e08 (patch)
tree8f6f73cc41ec340be45959fae67da4c6abec1e21 /sshd.pam
parent151bd95e0af0e9382ca9065b0d6cc6d62f1ac794 (diff)
automatic import of opensshopeneuler20.03
Diffstat (limited to 'sshd.pam')
-rw-r--r--sshd.pam17
1 files changed, 17 insertions, 0 deletions
diff --git a/sshd.pam b/sshd.pam
new file mode 100644
index 0000000..780f62e
--- /dev/null
+++ b/sshd.pam
@@ -0,0 +1,17 @@
+#%PAM-1.0
+auth substack password-auth
+auth include postlogin
+account required pam_sepermit.so
+account required pam_nologin.so
+account include password-auth
+password include password-auth
+# pam_selinux.so close should be the first session rule
+session required pam_selinux.so close
+session required pam_loginuid.so
+# pam_selinux.so open should only be followed by sessions to be executed in the user context
+session required pam_selinux.so open env_params
+session required pam_namespace.so
+session optional pam_keyinit.so force revoke
+session optional pam_motd.so
+session include password-auth
+session include postlogin