fix(lock): add complete bundled PAM services (#2685)

2026-06-24 12:05:21 -04:00 · 2026-06-23 21:26:51 +08:00
parent a98c4f6c54
commit 39c247d9cb
6 changed files with 25 additions and 2 deletions
@@ -1,3 +1,6 @@
 #%PAM-1.0

 auth    required    pam_fprintd.so  max-tries=5
+account required    pam_permit.so
+password required   pam_deny.so
+session required    pam_permit.so
@@ -3,3 +3,5 @@ auth      required     pam_env.so
 auth      sufficient   pam_unix.so       try_first_pass nullok
 auth      required     pam_deny.so
 account   required     pam_unix.so
+password  required     pam_deny.so
+session   required     pam_permit.so
@@ -0,0 +1,5 @@
+#%PAM-1.0
+auth     required    pam_deny.so
+account  required    pam_deny.so
+password required    pam_deny.so
+session  required    pam_deny.so
@@ -1,3 +1,6 @@
 #%PAM-1.0

 auth    required    pam_u2f.so  cue nouserok timeout=10
+account required    pam_permit.so
+password required   pam_deny.so
+session required    pam_permit.so