mirror of
https://git.yoctoproject.org/poky
synced 2026-07-08 17:13:39 +02:00
For CVE-2011-0721: http://lists.debian.org/debian-security-announce/2011/msg00030.html Signed-off-by: Yu Ke <ke.yu@intel.com>
625 B
625 B
The PAM configuration file for the Shadow `chsh' service
This will not allow a user to change their shell unless
their current one is listed in /etc/shells. This keeps
accounts with special shells from changing them.
auth required pam_shells.so
This allows root to change user shell without being
prompted for a password
auth sufficient pam_rootok.so
The standard Unix authentication modules, used with
NIS (man nsswitch) as well as normal /etc/passwd and
/etc/shadow entries.
auth include common-auth account include common-account session include common-session