summaryrefslogtreecommitdiff
path: root/system/linux-pam/su.pamd
diff options
context:
space:
mode:
authorA. Wilcox <AWilcox@Wilcox-Tech.com>2019-05-08 23:50:33 +0000
committerA. Wilcox <AWilcox@Wilcox-Tech.com>2019-05-08 23:50:33 +0000
commit70e535f4073f219b6905fe82326ac1563d5c09ad (patch)
tree5a9ba9801d7ce6b9bb75e912789bf5d7315f5aa1 /system/linux-pam/su.pamd
parent9e76c2f03a2152530fb2e5936b77e288311ced57 (diff)
downloadpackages-70e535f4073f219b6905fe82326ac1563d5c09ad.tar.gz
packages-70e535f4073f219b6905fe82326ac1563d5c09ad.tar.bz2
packages-70e535f4073f219b6905fe82326ac1563d5c09ad.tar.xz
packages-70e535f4073f219b6905fe82326ac1563d5c09ad.zip
user/linux-pam: harden configuration
Refuse to allow logins for accounts with no password.
Diffstat (limited to 'system/linux-pam/su.pamd')
-rw-r--r--system/linux-pam/su.pamd7
1 files changed, 6 insertions, 1 deletions
diff --git a/system/linux-pam/su.pamd b/system/linux-pam/su.pamd
index 84f2ae7ea..d2cd9eb13 100644
--- a/system/linux-pam/su.pamd
+++ b/system/linux-pam/su.pamd
@@ -1,4 +1,9 @@
-# basic PAM configuration for Alpine.
+# Welcome to Adélie Linux.
+
+# This file allows root to become any user without needing that user's
+# password, via pam_rootok.so.
+# If you do not wish to allow this behaviour, simply remove that line.
+
auth sufficient pam_rootok.so
auth include base-auth
account include base-account