diff options
| author | Stefan Schubert <schubi@suse.de> | 2021-12-09 15:19:29 +0100 |
|---|---|---|
| committer | Dmitry V. Levin <ldv@altlinux.org> | 2022-01-25 14:24:26 +0000 |
| commit | c11b0f5d8f9f6abcc76594af9e3b5e647b19f61f (patch) | |
| tree | a5c4bb2b95ee796fc85719715d8662235d37965b /modules/pam_group/pam_group.8.xml | |
| parent | 4d96b59360a57a7a96443e6c34d2cfd13ea3f5e3 (diff) | |
| download | pam-c11b0f5d8f9f6abcc76594af9e3b5e647b19f61f.tar.gz pam-c11b0f5d8f9f6abcc76594af9e3b5e647b19f61f.tar.bz2 pam-c11b0f5d8f9f6abcc76594af9e3b5e647b19f61f.zip | |
pam_group: use vendor specific group.conf as fallback
Use the vendor directory defined by --enable-vendordir=DIR configure
option as fallback for the distribution provided default config file
if there is no configuration in /etc.
* modules/pam_group/pam_group.c: Include <errno.h>.
[VENDOR_SCONFIGDIR] (VENDOR_PAM_GROUP_CONF): New macro.
(read_field): Add conf_filename argument, use it instead of PAM_GROUP_CONF.
(check_account) <conf_filename>: New variable, initialize it to
PAM_GROUP_CONF, pass it to read_field().
[VENDOR_PAM_GROUP_CONF]: Assign VENDOR_PAM_GROUP_CONF to conf_filename
when PAM_GROUP_CONF file does not exist.
* modules/pam_group/pam_group.8.xml: Describe it.
Co-authored-by: Dmitry V. Levin <ldv@altlinux.org>
Resolves: https://github.com/linux-pam/linux-pam/pull/412
Diffstat (limited to 'modules/pam_group/pam_group.8.xml')
| -rw-r--r-- | modules/pam_group/pam_group.8.xml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/pam_group/pam_group.8.xml b/modules/pam_group/pam_group.8.xml index 2c1c9058..e4a59dfd 100644 --- a/modules/pam_group/pam_group.8.xml +++ b/modules/pam_group/pam_group.8.xml @@ -38,6 +38,10 @@ By default rules for group memberships are taken from config file <filename>/etc/security/group.conf</filename>. </para> + <para condition="with_vendordir"> + If <filename>/etc/security/group.conf</filename> does not exist, + <filename>%vendordir%/security/group.conf</filename> is used. + </para> <para> This module's usefulness relies on the file-systems accessible to the user. The point being that once granted the |