diff options
| author | Sam Hartman <hartmans@debian.org> | 2021-02-25 14:58:25 -0500 |
|---|---|---|
| committer | Steve Langasek <steve.langasek@canonical.com> | 2021-09-15 17:52:36 -0700 |
| commit | d2540f941667b1bdf71e73c0ea7eb752d4f5a4fa (patch) | |
| tree | 03bd1e3dbc4cbe88741ec44976c4cdb7c265ccdc /debian/libpam-modules.templates | |
| parent | 2547108793e587e35782a9ec96cd5f297b7afff1 (diff) | |
| download | pam-d2540f941667b1bdf71e73c0ea7eb752d4f5a4fa.tar.gz pam-d2540f941667b1bdf71e73c0ea7eb752d4f5a4fa.tar.bz2 pam-d2540f941667b1bdf71e73c0ea7eb752d4f5a4fa.zip | |
libpam-modules.preinst,templates: detect pam_tally
Detect any uses of pam_tally that are left after disabling profiles,
and halt upgrade on them.
Diffstat (limited to 'debian/libpam-modules.templates')
| -rw-r--r-- | debian/libpam-modules.templates | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/debian/libpam-modules.templates b/debian/libpam-modules.templates index 491bc5c1..fcc9e2d6 100644 --- a/debian/libpam-modules.templates +++ b/debian/libpam-modules.templates @@ -15,4 +15,14 @@ _Description: PAM Profiles with Deprecated Modules Disabled modules. These modules have been removed from PAM. Leaving these PAM profiles enabled would prevent users from accessing your system. As a result, these profiles have been disabled. -
\ No newline at end of file + +Template: libpam-modules/deprecate-tally +Type: error +_Description: you are using pam_Tally or pam_tally2 in your configuration + The pam_tally and pam_tally2 modules have been removed from PAM. You + are using one of these modules in your PAM configuration in + /etc/pam.d. You must remove the uses of these modules before PAM can + be upgraded; including these modules in your PAM configuration after + the upgrade will stop users from being able to log into the system. + . + Consider the pam_faillock module as a replacement for pam_tally. |