Trimmed for readability
On May 31, 2018, at 04:01 AM, Pavel Březina <[email protected]> wrote: On 05/30/2018 06:44 PM, Dan White wrote: There are several pam stacks managed by authconfig: - password-auth - system-auth - smartcard-auth - fingerprint-auth - postlogin These files are just symlinks to $name-ac files that are written by authconfig. If you need to do any changes that should persist, remove the symlink and than edit the file without -ac suffix. Of course this means that you stop using authconfig, but that is alright for most cases as you need to configure it only once. That is the whole point of the query. This is for security hardening. Authconfig removes stuff that needs to stay in. I am suggesting updates for authconfig to provide the required settings it currently removes. Not using authconfig would make following many Red Hat documents difficult Šimon made a suggestion I plan to follow. Thanks for sharing your time and thoughts. Dan White | [email protected] ------------------------------------------------ “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” (Bill Waterson: Calvin & Hobbes)
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
