From e22ae689df42fcb5a1c13a28ab4a1cee589db750 Mon Sep 17 00:00:00 2001 From: Aaron Guise Date: Mon, 30 Dec 2024 08:25:51 +1300 Subject: [PATCH] fix: Updated with default configs from RHEL 9 --- files/etc.pam.d.sshd | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/files/etc.pam.d.sshd b/files/etc.pam.d.sshd index bd6ab32..dd7d7ed 100644 --- a/files/etc.pam.d.sshd +++ b/files/etc.pam.d.sshd @@ -1,12 +1,10 @@ #%PAM-1.0 -auth required pam_sepermit.so auth substack password-auth auth required pam_env.so auth sufficient pam_duo.so auth required pam_deny.so auth include postlogin -# Used with polkit to reauthorize users in remote sessions --auth optional pam_reauthorize.so prepare +account required pam_sepermit.so account required pam_nologin.so account include password-auth password include password-auth @@ -17,7 +15,6 @@ session required pam_loginuid.so session required pam_selinux.so open env_params session required pam_namespace.so session optional pam_keyinit.so force revoke +session optional pam_motd.so session include password-auth -session include postlogin -# Used with polkit to reauthorize users in remote sessions --session optional pam_reauthorize.so prepare +session include postlogin \ No newline at end of file