[24292] in Source-Commits
/svn/athena r23890 - in trunk/debathena/config/linerva-pam-config: debian files/etc/pam.d
daemon@ATHENA.MIT.EDU (Evan Broder)
Sat Jun 20 23:32:44 2009
Date: Sat, 20 Jun 2009 23:32:34 -0400
From: Evan Broder <broder@MIT.EDU>
Message-Id: <200906210332.n5L3WYp4014276@drugstore.mit.edu>
To: source-commits@mit.edu
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Author: broder
Date: 2009-06-20 23:32:33 -0400 (Sat, 20 Jun 2009)
New Revision: 23890
Added:
trunk/debathena/config/linerva-pam-config/files/etc/pam.d/common-session.debathena.debathena
Modified:
trunk/debathena/config/linerva-pam-config/debian/changelog
Log:
In linerva-pam-config:
* Actually add the /etc/pam.d/common-session.debathena.debathena that
keeps root out of a PAG.
Modified: trunk/debathena/config/linerva-pam-config/debian/changelog
===================================================================
--- trunk/debathena/config/linerva-pam-config/debian/changelog 2009-06-21 03:08:11 UTC (rev 23889)
+++ trunk/debathena/config/linerva-pam-config/debian/changelog 2009-06-21 03:32:33 UTC (rev 23890)
@@ -1,3 +1,10 @@
+debathena-linerva-pam-config (1.6.1) unstable; urgency=low
+
+ * Actually add the /etc/pam.d/common-session.debathena.debathena that
+ keeps root out of a PAG.
+
+ -- Evan Broder <broder@mit.edu> Sat, 20 Jun 2009 23:32:25 -0400
+
debathena-linerva-pam-config (1.6) unstable; urgency=low
* Don't put root in a PAG. It just makes life more complicated.
Added: trunk/debathena/config/linerva-pam-config/files/etc/pam.d/common-session.debathena.debathena
===================================================================
--- trunk/debathena/config/linerva-pam-config/files/etc/pam.d/common-session.debathena.debathena 2009-06-21 03:08:11 UTC (rev 23889)
+++ trunk/debathena/config/linerva-pam-config/files/etc/pam.d/common-session.debathena.debathena 2009-06-21 03:32:33 UTC (rev 23890)
@@ -0,0 +1,7 @@
+session required pam_unix.so
+session optional pam_krb5.so
+session optional pam_krb524.so
+session [default=1 success=ignore] pam_succeed_if.so uid > 0
+session optional pam_athena_locker.so
+session optional pam_debathena_home_type.so
+session optional pam_mktemp.so var=ATHENA_SESSION_TMPDIR prefix=/var/run/athena-sessions/session dir
