aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDiego Elio 'Flameeyes' Pettenò <flameeyes@gmail.com>2010-03-10 01:29:35 +0100
committerDiego Elio 'Flameeyes' Pettenò <flameeyes@gmail.com>2010-03-10 01:29:35 +0100
commit2cc5de847cec6868408550b2973faaf1381f7834 (patch)
tree1e7844571c6407ea2f3182dfd07dc65abad33936 /system-session.inc
parentDon't change the default path of the tally module, since the two use differen... (diff)
downloadpambase-2cc5de847cec6868408550b2973faaf1381f7834.tar.gz
pambase-2cc5de847cec6868408550b2973faaf1381f7834.tar.bz2
pambase-2cc5de847cec6868408550b2973faaf1381f7834.zip
Improve handling of services and the session chain.pambase-20100310
The system-services stack will now provide auth (always permitted) and account (use system-auth stack) chains, so that services like fcron can use it. Session handling is instead split out of system-auth and system-services into not a stack but an included file providing the session chain for both of them, this allows to edit a single file in pambase and provide the two session chains, that might very well be separated (indeed, services don't use pam_ssh).
Diffstat (limited to 'system-session.inc')
-rw-r--r--system-session.inc13
1 files changed, 13 insertions, 0 deletions
diff --git a/system-session.inc b/system-session.inc
new file mode 100644
index 0000000..9d4aea1
--- /dev/null
+++ b/system-session.inc
@@ -0,0 +1,13 @@
+#if HAVE_LIMITS
+session required pam_limits.so DEBUG
+#endif
+#if HAVE_ENV
+session required pam_env.so DEBUG
+#endif
+#if HAVE_MKTEMP
+session optional pam_mktemp.so
+#endif
+#if SUPPORT_UNIX_SESSION
+session required pam_unix.so DEBUG
+#endif
+session optional pam_permit.so