Re: Controlling PAM modules
- From: freebsd-security@xxxxxxxx
- Date: Wed, 17 Sep 2008 05:46:34 -0700 (PDT)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Do i have any standard way to skip one of the PAM module
with out changing the service conf file.
Why do you not want to change the per-service conf files? Those files _are_ the database.
There are a bunch of strategies that you could use to, e.g., maintain your alterations as a diff to the base-system config so to make upgrades easier, but a) to answer your question, no, there's nothing standard for that, and b) that is an especially risky approach - you could completely break your security, letting anyone in, or locking legitimate users out, etc.
-Jason
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)
Comment: See https://private.idealab.com/public/jason/jason.gpg
iD8DBQFI0PwqswXMWWtptckRAqLsAJ9taCFEPfVGwY6Rrt3qtLuHVvmNDwCfatyl
S++ho4Gf4Zl/3E6Vjkks26o=
=gGZG
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
- Follow-Ups:
- Re: Controlling PAM modules
- From: Ivan Grover
- Re: Controlling PAM modules
- References:
- Controlling PAM modules
- From: Ivan Grover
- Controlling PAM modules
- Prev by Date: Controlling PAM modules
- Next by Date: Re: Controlling PAM modules
- Previous by thread: Controlling PAM modules
- Next by thread: Re: Controlling PAM modules
- Index(es):
Relevant Pages
|