373b7efdb3
This patch adds optional libselinux support to the util-linux package, and also tweaks the PAM files instealled by util-linux to work properly in an SELinux context. Like was done for linux-pam, the tweak is done by having the SELinux related lines commented out in the original PAM file, and uncommented when SELinux support is enabled. Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Reviewed-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Niranjan Reddy <niranjan.reddy@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Tested-by: Bryce Ferguson <bryce.ferguson@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
16 lines
400 B
Plaintext
16 lines
400 B
Plaintext
auth sufficient pam_rootok.so
|
|
auth required pam_wheel.so use_uid
|
|
auth required pam_env.so
|
|
auth required pam_unix.so nullok
|
|
|
|
account required pam_unix.so
|
|
|
|
password required pam_unix.so nullok
|
|
|
|
# session required pam_selinux.so close
|
|
session required pam_limits.so
|
|
session required pam_env.so
|
|
session required pam_unix.so
|
|
session optional pam_lastlog.so
|
|
# session required pam_selinux.so open
|