Yeah, I know PAM has the ability to break a system, and that is why
I normally avoid it. But I was persuaded to try using it in my
current build. This system booted fine. I then built the docbook
packages, and then I added Linux-PAM and rebuilt shadow. Then I
rebooted to check it still worked - but it didn't. Unfortunately,
I did not back up the system before building PAM.
Now, when I boot it and try to login, both normal users and root get
a string of messages before the prompt for the password, and after
entering the passwd, 'Permission denied'.
Going back to the host system and mounting the new one at /mnt/lfs,
I can see the messages in /var/log/auth.log :
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM unable to
dlopen(/lib/security/pam_deny.so): /lib/security/pam_deny.so: cannot
open shared object file: No such file or directory
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM adding faulty module:
/lib/security/pam_deny.so
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM pam_start: invalid
argument: service == NULL
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM unable to
dlopen(/lib/security/pam_deny.so): /lib/security/pam_deny.so: cannot
open shared object file: No such file or directory
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM adding faulty module:
/lib/security/pam_deny.so
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM pam_start: invalid
argument: conv == NULL
Sep 20 18:34:20 jtm1 lt-tst-pam_start: PAM pam_start: invalid
argument: pamh == NULL
and a bit later, all the erorr messages which appeared on the
screen:
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`FAILLOG_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`LASTLOG_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`MAIL_CHECK_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`OBSCURE_CHECKS_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`PORTTIME_CHECKS_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`QUOTAS_ENAB'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`MOTD_FILE'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`FTMP_FILE'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`NOLOGINS_FILE'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`ENV_HZ'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`PASS_MIN_LEN'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`SU_WHEEL_ONLY'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`CRACKLIB_DICTPATH'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`PASS_CHANGE_TRIES'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`PASS_ALWAYS_WARN'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`CHFN_AUTH'
Sep 20 18:40:27 jtm1 login[1097]: unknown configuration item
`ENVIRON_FILE'
I mounted it at /mnt/lfs, and it seemed to me that all the linkages
were correct. Now, I've come back to it, chrooted, listed all the
PAM libs and their linkages into a file, copied that, and since all
the links do indeed appear fine, tried to boot it again, with the
same results.
The linkages are attached.
Looking at the files in /etc/pam.d 'other' is the restrictive
version, from the bottom of the Linux-PAM page, system-password is
the non-cracklib version, the others from PAM appear to match what
is on the page.
I see from the 'su' file:
# Uncomment the following line to implicitly trust users in the
# "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the
# "wheel" group.
auth required pam_wheel.so use_uid
So clearly I will need to comment that last line (since I do not
have a wheel group) to be able to su. But apart from that, I do not
see what is wrong. Contents attached as pam-files.
Any clues, please ?
ĸen
--
Il Porcupino Nil Sodomy Est! (if you will excuse my latatian)
aka "The hedgehog song"
/lib/security/pam_access.so
linux-vdso.so.1 (0x00007ffca39d3000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f333e055000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f333de51000)
libnsl.so.1 => /lib/libnsl.so.1 (0x00007f333dc38000)
libtirpc.so.1 => /lib64/libtirpc.so.1 (0x00007f333da12000)
libc.so.6 => /lib/libc.so.6 (0x00007f333d66e000)
/lib64/ld-linux-x86-64.so.2 (0x000055b6141e8000)
libpthread.so.0 => /lib/libpthread.so.0 (0x00007f333d450000)
/lib/security/pam_debug.so
linux-vdso.so.1 (0x00007ffde4fd5000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f14bc2bd000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f14bc0b9000)
libc.so.6 => /lib/libc.so.6 (0x00007f14bbd14000)
/lib64/ld-linux-x86-64.so.2 (0x000055c022100000)
/lib/security/pam_deny.so
linux-vdso.so.1 (0x00007ffc1bbaf000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f9ce3b04000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f9ce3900000)
libc.so.6 => /lib/libc.so.6 (0x00007f9ce355b000)
/lib64/ld-linux-x86-64.so.2 (0x000056272c6b8000)
/lib/security/pam_echo.so
linux-vdso.so.1 (0x00007ffcdbff6000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f7ef82c0000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f7ef80bc000)
libc.so.6 => /lib/libc.so.6 (0x00007f7ef7d17000)
/lib64/ld-linux-x86-64.so.2 (0x000055e63cf24000)
/lib/security/pam_env.so
linux-vdso.so.1 (0x00007fffdc1f4000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f2bc1178000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f2bc0f74000)
libc.so.6 => /lib/libc.so.6 (0x00007f2bc0bcf000)
/lib64/ld-linux-x86-64.so.2 (0x00005633c0c0d000)
/lib/security/pam_exec.so
linux-vdso.so.1 (0x00007fffebea8000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fcdbc429000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fcdbc225000)
libc.so.6 => /lib/libc.so.6 (0x00007fcdbbe80000)
/lib64/ld-linux-x86-64.so.2 (0x0000558156e0f000)
/lib/security/pam_faildelay.so
linux-vdso.so.1 (0x00007ffd61169000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f85a3e40000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f85a3c3c000)
libc.so.6 => /lib/libc.so.6 (0x00007f85a3897000)
/lib64/ld-linux-x86-64.so.2 (0x0000557dbaf80000)
/lib/security/pam_filter.so
linux-vdso.so.1 (0x00007ffcbd3f1000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fb348cb5000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fb348ab1000)
libc.so.6 => /lib/libc.so.6 (0x00007fb34870c000)
/lib64/ld-linux-x86-64.so.2 (0x0000563e23d17000)
/lib/security/pam_ftp.so
linux-vdso.so.1 (0x00007ffda05dc000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f36b0f99000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f36b0d95000)
libc.so.6 => /lib/libc.so.6 (0x00007f36b09f0000)
/lib64/ld-linux-x86-64.so.2 (0x0000558d83753000)
/lib/security/pam_group.so
linux-vdso.so.1 (0x00007ffce4cc9000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f302e9bc000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f302e7b8000)
libc.so.6 => /lib/libc.so.6 (0x00007f302e413000)
/lib64/ld-linux-x86-64.so.2 (0x00005615d847d000)
/lib/security/pam_issue.so
linux-vdso.so.1 (0x00007ffd1a9fe000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f048c5c7000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f048c3c3000)
libc.so.6 => /lib/libc.so.6 (0x00007f048c01e000)
/lib64/ld-linux-x86-64.so.2 (0x0000562149bda000)
/lib/security/pam_keyinit.so
linux-vdso.so.1 (0x00007ffcd51ef000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fa52cccd000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fa52cac9000)
libc.so.6 => /lib/libc.so.6 (0x00007fa52c724000)
/lib64/ld-linux-x86-64.so.2 (0x0000563875983000)
/lib/security/pam_lastlog.so
linux-vdso.so.1 (0x00007ffd1d1df000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f4f6b6e0000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f4f6b4dc000)
libutil.so.1 => /lib/libutil.so.1 (0x00007f4f6b2d8000)
libc.so.6 => /lib/libc.so.6 (0x00007f4f6af34000)
/lib64/ld-linux-x86-64.so.2 (0x000055afbfb5d000)
/lib/security/pam_limits.so
linux-vdso.so.1 (0x00007ffdc79d0000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fcfb575f000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fcfb555b000)
libc.so.6 => /lib/libc.so.6 (0x00007fcfb51b6000)
/lib64/ld-linux-x86-64.so.2 (0x000055cf383f1000)
/lib/security/pam_listfile.so
linux-vdso.so.1 (0x00007ffd7c041000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fad227a2000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fad2259e000)
libc.so.6 => /lib/libc.so.6 (0x00007fad221f9000)
/lib64/ld-linux-x86-64.so.2 (0x00005555fcf98000)
/lib/security/pam_localuser.so
linux-vdso.so.1 (0x00007ffc4ebac000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f351ecca000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f351eac6000)
libc.so.6 => /lib/libc.so.6 (0x00007f351e721000)
/lib64/ld-linux-x86-64.so.2 (0x000055bc94752000)
/lib/security/pam_loginuid.so
linux-vdso.so.1 (0x00007ffc1271d000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fcac82e4000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fcac80e0000)
libc.so.6 => /lib/libc.so.6 (0x00007fcac7d3b000)
/lib64/ld-linux-x86-64.so.2 (0x000055c542f45000)
/lib/security/pam_mail.so
linux-vdso.so.1 (0x00007ffcc4c5b000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007efee0f64000)
libdl.so.2 => /lib/libdl.so.2 (0x00007efee0d60000)
libc.so.6 => /lib/libc.so.6 (0x00007efee09bb000)
/lib64/ld-linux-x86-64.so.2 (0x000055e655182000)
/lib/security/pam_mkhomedir.so
linux-vdso.so.1 (0x00007ffeda98c000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fec4fc94000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fec4fa90000)
libc.so.6 => /lib/libc.so.6 (0x00007fec4f6eb000)
/lib64/ld-linux-x86-64.so.2 (0x000055741e3c5000)
/lib/security/pam_motd.so
linux-vdso.so.1 (0x00007ffece7ad000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fdbd1d9b000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fdbd1b97000)
libc.so.6 => /lib/libc.so.6 (0x00007fdbd17f2000)
/lib64/ld-linux-x86-64.so.2 (0x0000561a9a7f5000)
/lib/security/pam_namespace.so
linux-vdso.so.1 (0x00007ffe3e125000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f7b68260000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f7b6805c000)
libc.so.6 => /lib/libc.so.6 (0x00007f7b67cb7000)
/lib64/ld-linux-x86-64.so.2 (0x0000556a5eae0000)
/lib/security/pam_nologin.so
linux-vdso.so.1 (0x00007ffce8988000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f0323400000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f03231fc000)
libc.so.6 => /lib/libc.so.6 (0x00007f0322e57000)
/lib64/ld-linux-x86-64.so.2 (0x00005619b0704000)
/lib/security/pam_permit.so
linux-vdso.so.1 (0x00007ffec672a000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fcdb2bd8000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fcdb29d4000)
libc.so.6 => /lib/libc.so.6 (0x00007fcdb262f000)
/lib64/ld-linux-x86-64.so.2 (0x000056292dea7000)
/lib/security/pam_pwhistory.so
linux-vdso.so.1 (0x00007ffcef7d8000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fd075919000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fd075715000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007fd0754dc000)
libc.so.6 => /lib/libc.so.6 (0x00007fd075138000)
/lib64/ld-linux-x86-64.so.2 (0x000055c37fe1a000)
/lib/security/pam_rhosts.so
linux-vdso.so.1 (0x00007ffdb19e9000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fd64d779000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fd64d575000)
libc.so.6 => /lib/libc.so.6 (0x00007fd64d1d0000)
/lib64/ld-linux-x86-64.so.2 (0x000055ea21250000)
/lib/security/pam_rootok.so
linux-vdso.so.1 (0x00007ffdb60e2000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007ffb1a8f1000)
libdl.so.2 => /lib/libdl.so.2 (0x00007ffb1a6ed000)
libc.so.6 => /lib/libc.so.6 (0x00007ffb1a348000)
/lib64/ld-linux-x86-64.so.2 (0x000055b271fb4000)
/lib/security/pam_securetty.so
linux-vdso.so.1 (0x00007fff9abb9000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f1aeaf29000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f1aead25000)
libc.so.6 => /lib/libc.so.6 (0x00007f1aea980000)
/lib64/ld-linux-x86-64.so.2 (0x0000557999832000)
/lib/security/pam_shells.so
linux-vdso.so.1 (0x00007fff4f1b4000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f74c4219000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f74c4015000)
libc.so.6 => /lib/libc.so.6 (0x00007f74c3c70000)
/lib64/ld-linux-x86-64.so.2 (0x000055e08367b000)
/lib/security/pam_stress.so
linux-vdso.so.1 (0x00007ffcde5a9000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f2bbb828000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f2bbb624000)
libc.so.6 => /lib/libc.so.6 (0x00007f2bbb27f000)
/lib64/ld-linux-x86-64.so.2 (0x00005645d2447000)
/lib/security/pam_succeed_if.so
linux-vdso.so.1 (0x00007fff201a7000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f5db34de000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f5db32da000)
libc.so.6 => /lib/libc.so.6 (0x00007f5db2f35000)
/lib64/ld-linux-x86-64.so.2 (0x0000556f39185000)
/lib/security/pam_tally2.so
linux-vdso.so.1 (0x00007ffe54ff4000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f8e05c9c000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f8e05a98000)
libc.so.6 => /lib/libc.so.6 (0x00007f8e056f3000)
/lib64/ld-linux-x86-64.so.2 (0x00005642b516c000)
/lib/security/pam_tally.so
linux-vdso.so.1 (0x00007fff86cae000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f0947ad3000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f09478cf000)
libc.so.6 => /lib/libc.so.6 (0x00007f094752a000)
/lib64/ld-linux-x86-64.so.2 (0x00005612cf900000)
/lib/security/pam_time.so
linux-vdso.so.1 (0x00007ffd60bce000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f0f13aa2000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f0f1389e000)
libc.so.6 => /lib/libc.so.6 (0x00007f0f134f9000)
/lib64/ld-linux-x86-64.so.2 (0x000055f5f23ef000)
/lib/security/pam_timestamp.so
linux-vdso.so.1 (0x00007ffd2a99a000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007f15aa466000)
libdl.so.2 => /lib/libdl.so.2 (0x00007f15aa262000)
libc.so.6 => /lib/libc.so.6 (0x00007f15a9ebd000)
/lib64/ld-linux-x86-64.so.2 (0x000056437da75000)
/lib/security/pam_umask.so
linux-vdso.so.1 (0x00007ffe2a0b4000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fbc610dc000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fbc60ed8000)
libc.so.6 => /lib/libc.so.6 (0x00007fbc60b33000)
/lib64/ld-linux-x86-64.so.2 (0x000055f187360000)
/lib/security/pam_unix.so
linux-vdso.so.1 (0x00007ffe451fe000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fa6ba1aa000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fa6b9fa6000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007fa6b9d6d000)
libnsl.so.1 => /lib/libnsl.so.1 (0x00007fa6b9b55000)
libtirpc.so.1 => /lib64/libtirpc.so.1 (0x00007fa6b992f000)
libc.so.6 => /lib/libc.so.6 (0x00007fa6b958a000)
/lib64/ld-linux-x86-64.so.2 (0x0000561547934000)
libpthread.so.0 => /lib/libpthread.so.0 (0x00007fa6b936d000)
/lib/security/pam_userdb.so
linux-vdso.so.1 (0x00007ffdd06f7000)
libdb-6.1.so => /usr/lib64/libdb-6.1.so (0x00007fd91a59a000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007fd91a362000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fd91a153000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fd919f4f000)
libc.so.6 => /lib/libc.so.6 (0x00007fd919bab000)
libpthread.so.0 => /lib/libpthread.so.0 (0x00007fd91998d000)
/lib64/ld-linux-x86-64.so.2 (0x000055bcb2acf000)
/lib/security/pam_warn.so
linux-vdso.so.1 (0x00007fffe65b1000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fd2794ec000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fd2792e8000)
libc.so.6 => /lib/libc.so.6 (0x00007fd278f43000)
/lib64/ld-linux-x86-64.so.2 (0x000056045ccf5000)
/lib/security/pam_wheel.so
linux-vdso.so.1 (0x00007ffe803d6000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fe7a2404000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fe7a2200000)
libc.so.6 => /lib/libc.so.6 (0x00007fe7a1e5b000)
/lib64/ld-linux-x86-64.so.2 (0x00005562d2b09000)
/lib/security/pam_xauth.so
linux-vdso.so.1 (0x00007ffe52bbe000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007ff818c42000)
libdl.so.2 => /lib/libdl.so.2 (0x00007ff818a3e000)
libc.so.6 => /lib/libc.so.6 (0x00007ff818699000)
/lib64/ld-linux-x86-64.so.2 (0x000055f5c3ad0000)
/usr/lib/libpamc.so
linux-vdso.so.1 (0x00007ffce4dbb000)
libc.so.6 => /lib/libc.so.6 (0x00007fe2633ef000)
/lib64/ld-linux-x86-64.so.2 (0x0000559cc743b000)
/usr/lib/libpam_misc.so
linux-vdso.so.1 (0x00007fffa5d89000)
libpam.so.0 => /lib64/libpam.so.0 (0x00007fc8114c5000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fc8112c1000)
libc.so.6 => /lib/libc.so.6 (0x00007fc810f1c000)
/lib64/ld-linux-x86-64.so.2 (0x00005585a17ff000)
/usr/lib/libpam.so
linux-vdso.so.1 (0x00007fff1b4cf000)
libdl.so.2 => /lib/libdl.so.2 (0x00007fefe3f23000)
libc.so.6 => /lib/libc.so.6 (0x00007fefe3b7f000)
/lib64/ld-linux-x86-64.so.2 (0x00005620c121f000)
/mnt/lfs/etc/pam.d/chage
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/chfn
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/chgpasswd
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/chpasswd
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/chsh
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/groupadd
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/groupdel
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/groupmems
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/groupmod
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/login
#%PAM-1.0
auth required pam_securetty.so
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session required pam_selinux.so close
session include system-auth
session required pam_loginuid.so
session optional pam_console.so
session required pam_selinux.so open
/mnt/lfs/etc/pam.d/newusers
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/other
# Begin /etc/pam.d/other
auth required pam_warn.so
auth required pam_deny.so
account required pam_warn.so
account required pam_deny.so
password required pam_warn.so
password required pam_deny.so
session required pam_warn.so
session required pam_deny.so
# End /etc/pam.d/other
/mnt/lfs/etc/pam.d/passwd
#%PAM-1.0
auth include system-auth
account include system-auth
password include system-auth
/mnt/lfs/etc/pam.d/su
#%PAM-1.0
auth sufficient pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
auth required pam_wheel.so use_uid
auth include system-auth
account include system-auth
password include system-auth
session required pam_selinux.so close
session include system-auth
session required pam_selinux.so open multiple
session optional pam_xauth.so
/mnt/lfs/etc/pam.d/system-account
# Begin /etc/pam.d/system-account
account required pam_unix.so
# End /etc/pam.d/system-account
/mnt/lfs/etc/pam.d/system-auth
# Begin /etc/pam.d/system-auth
auth required pam_unix.so
# End /etc/pam.d/system-auth
/mnt/lfs/etc/pam.d/system-password
# Begin /etc/pam.d/system-password
# use sha512 hash for encryption, use shadow, and try to use any previously
# defined authentication token (chosen password) set by any prior module
password required pam_unix.so sha512 shadow try_first_pass
# End /etc/pam.d/system-password
/mnt/lfs/etc/pam.d/system-session
# Begin /etc/pam.d/system-session
session required pam_unix.so
# End /etc/pam.d/system-session
/mnt/lfs/etc/pam.d/useradd
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/userdel
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
/mnt/lfs/etc/pam.d/usermod
#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
password include system-auth
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
