diff options
| author | Thorsten Kukuk <kukuk@suse.com> | 2024-11-14 10:27:28 +0100 |
|---|---|---|
| committer | Thorsten Kukuk <kukuk@suse.com> | 2024-11-18 23:09:45 +0100 |
| commit | 940747f88c16e029b69a74e80a2e94f65cb3e628 (patch) | |
| tree | a116319f772564a78195b095305723f3f00103fb /modules/pam_access/access.conf.5.xml | |
| parent | 37b416c152ed833dcc55c84068c77eb713748d24 (diff) | |
| download | pam-940747f88c16e029b69a74e80a2e94f65cb3e628.tar.gz pam-940747f88c16e029b69a74e80a2e94f65cb3e628.tar.bz2 pam-940747f88c16e029b69a74e80a2e94f65cb3e628.zip | |
pam_access: rework resolving of tokens as hostname
* modules/pam_access/pam_access.c: separate resolving of IP addresses
from hostnames. Don't resolve TTYs or display variables as hostname
(#834).
Add "nodns" option to disallow resolving of tokens as hostname.
* modules/pam_access/pam_access.8.xml: document nodns option
* modules/pam_access/access.conf.5.xml: document that hostnames should
be written as FQHN.
Diffstat (limited to 'modules/pam_access/access.conf.5.xml')
| -rw-r--r-- | modules/pam_access/access.conf.5.xml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/pam_access/access.conf.5.xml b/modules/pam_access/access.conf.5.xml index 0b93db00..10b8ba92 100644 --- a/modules/pam_access/access.conf.5.xml +++ b/modules/pam_access/access.conf.5.xml @@ -233,6 +233,10 @@ An IPv6 link local host address must contain the interface identifier. IPv6 link local network/netmask is not supported. </para> + <para> + Hostnames should be written as Fully-Qualified Host Name (FQHN) to avoid + confusion with device names or PAM service names. + </para> </refsect1> <refsect1 xml:id="access.conf-see_also"> |