diff options
| author | John Estabrook <jestabro@vyos.io> | 2025-05-13 09:27:04 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-05-13 09:27:04 -0500 |
| commit | 572400156976a5fc36e1dbe2fcdaf12d61510e13 (patch) | |
| tree | 36fd9d25181dd22f83086dd0ee38328e7db85bea /debian | |
| parent | cdffc31d8b717bee0b11cb94323e4ba8f934283c (diff) | |
| parent | 9cf35f96450263279aeed1affd37e907d71a3081 (diff) | |
| download | vyos-1x-572400156976a5fc36e1dbe2fcdaf12d61510e13.tar.gz vyos-1x-572400156976a5fc36e1dbe2fcdaf12d61510e13.zip | |
Merge pull request #4502 from c-po/pam-nologin
T7443: Un-restricting non-root logins after scheduled reboot/shutdown via pam_nologin
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/vyos-1x.postinst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/debian/vyos-1x.postinst b/debian/vyos-1x.postinst index 798ecaa1b..9dd06d5e2 100644 --- a/debian/vyos-1x.postinst +++ b/debian/vyos-1x.postinst @@ -50,6 +50,10 @@ if [[ -e /usr/share/pam-configs/tacplus ]]; then rm /usr/share/pam-configs/tacplus fi +# Disable pam_nologin.so behavior for regular users +sed -i '/^auth[[:space:]]\+requisite[[:space:]]\+pam_nologin\.so$/s/^/#/' /etc/pam.d/login +sed -i '/^account[[:space:]]\+required[[:space:]]\+pam_nologin\.so$/s/^/#/' /etc/pam.d/sshd + # Add TACACS system users required for TACACS based system authentication if ! grep -q '^tacacs' /etc/passwd; then # Add the tacacs group and all 16 possible tacacs privilege-level users to |