tree 48dd5aebfefa4ec1d73938433025f05062b43475
parent 9257b20e3d83be1e7f0350080efac62de44c3600
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1572710069 +0530
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1572961607 +0000

pam: Disable sensitive log & nullok

pam_unix logs user name when sessions are established, quiet
the same in configuraiton. This is done to avoid logging user name
as logs will be exported as part of debug log dump etc, thereby
compramising sensitive information.
Also disallow nullok login from security point of it.

Tested:
1. Verified that session establishment are not recorded with user
name.
2. Verfieid webui, redfish, ipmi, ssh login works as expected.

Change-Id: I3ddd0644fdc9c25f8252d0ca82d0d62b597c4447
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>