From: Ali Riza KESKIN Date: Fri, 4 Mar 2022 11:48:54 +0000 (+0000) Subject: fix PAM service files --without-selinux X-Git-Tag: 4.12~63 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=212d20c80e2bd3b8396b2fcf48862b506404487c;p=thirdparty%2Fshadow.git fix PAM service files --without-selinux Make pam_selinux.so optional in environments where the module isn't provided. --- diff --git a/etc/pam.d/login b/etc/pam.d/login index 5a648065b..c1649b37c 100644 --- a/etc/pam.d/login +++ b/etc/pam.d/login @@ -4,8 +4,8 @@ auth include system-auth account required pam_nologin.so account include system-auth password include system-auth -session required pam_selinux.so close +session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close session include system-auth session required pam_loginuid.so session optional pam_console.so -session required pam_selinux.so open +session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open diff --git a/etc/pam.d/su b/etc/pam.d/su index 7ef7134b9..35602bc88 100644 --- a/etc/pam.d/su +++ b/etc/pam.d/su @@ -7,7 +7,7 @@ auth required pam_wheel.so use_uid auth include system-auth account include system-auth password include system-auth -session required pam_selinux.so close +session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close session include system-auth -session required pam_selinux.so open multiple +session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open session optional pam_xauth.so