Patrick Williams | c124f4f | 2015-09-15 14:41:29 -0500 | [diff] [blame] | 1 | # |
| 2 | # /etc/pam.d/other - specify the PAM fallback behaviour |
| 3 | # |
| 4 | # Note that this file is used for any unspecified service; for example |
| 5 | #if /etc/pam.d/cron specifies no session modules but cron calls |
| 6 | #pam_open_session, the session module out of /etc/pam.d/other is |
| 7 | #used. |
| 8 | |
| 9 | # We use pam_warn.so to generate syslog notes that the 'other' |
| 10 | #fallback rules are being used (as a hint to suggest you should setup |
| 11 | #specific PAM rules for the service and aid to debugging). Then to be |
| 12 | #secure, deny access to all services by default. |
| 13 | |
| 14 | auth required pam_warn.so |
| 15 | auth required pam_deny.so |
| 16 | |
| 17 | account required pam_warn.so |
| 18 | account required pam_deny.so |
| 19 | |
| 20 | password required pam_warn.so |
| 21 | password required pam_deny.so |
| 22 | |
| 23 | session required pam_warn.so |
| 24 | session required pam_deny.so |