meta-hpe: add default login lockout config
standardize and harden hpe obmc builds
Change-Id: I6267c9dde4bfa8a9f205e7b8e48cf5470d4c65b5
Signed-off-by: John Weidenfeller <john.weidenfeller@hpe.com>
diff --git a/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf b/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf
new file mode 100644
index 0000000..d0da8c7
--- /dev/null
+++ b/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf
@@ -0,0 +1,2 @@
+deny=5
+unlock_time=900
diff --git a/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend b/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend
new file mode 100644
index 0000000..1aa78d3
--- /dev/null
+++ b/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
+
+SRC_URI += " file://faillock.conf \
+ "