commit 8c65b60518d8c447918371f3dbc7aceca35aaaa5
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> Tue Jan 28 15:02:37 2020 +0530
committer Brad Bishop <bradleyb@fuzziesquirrel.com> Wed Feb 05 13:11:30 2020 +0000
tree e9aa1223923b6caa103233c0ab4052cc0154c57b
parent b51d6e3322ea6cfa93e99c74663b7fb9923c2f65

[pam]: Include pam-succeed-if to verify group role

Include pam-succeed-if to the rootfs file system. This will be
used to do pam_authenticate restriction based on group ownership.

Tested:
Along with pam-webserver changes with authenticate required, verified
that users belonging to redfish group are only allowed to login to
bmcweb.

Change-Id: I914ce993aa527511560326e2bf317ffdd41f3637
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>

recipes-extended/pam/libpam_%.bbappend

diff --git a/recipes-extended/pam/libpam_%.bbappend b/recipes-extended/pam/libpam_%.bbappend
index 770ffea..07dd548 100644
--- a/recipes-extended/pam/libpam_%.bbappend
+++ b/recipes-extended/pam/libpam_%.bbappend
@@ -9,6 +9,7 @@
 RDEPENDS_${PN}-runtime += "${MLPREFIX}pam-plugin-cracklib-${libpam_suffix} \
                            ${MLPREFIX}pam-plugin-tally2-${libpam_suffix} \
                            ${MLPREFIX}pam-plugin-pwhistory-${libpam_suffix} \
+                           ${MLPREFIX}pam-plugin-succeed-if-${libpam_suffix} \
                           "
 
 do_install_append() {