From 15574a43debfd23d83721737ad0b1ae6e5cd002e Mon Sep 17 00:00:00 2001 From: Yi Zhao Date: Wed, 24 Jul 2024 22:13:29 +0800 Subject: [PATCH] shadow: comment out pam_lastlog line in login pam file The pam_lastlog module is deprecated and disabled by default in linux-pam since 1.5.3[1]. Comment out this line to avoid loading pam_lastlog module by default. Users can use lastlog2 provided by util-linux as an alternative[2]. [1] https://github.com/linux-pam/linux-pam/commit/357a4ddbe9b4b10ebd805d2af3e32f3ead5b8816 [2] https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/commit/?id=c2e299d0acb2fa4ad1691452fa0eae76520bbdb0 Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald --- recipes-extended/shadow/files/pam.d/login | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-extended/shadow/files/pam.d/login b/recipes-extended/shadow/files/pam.d/login index ec5bba9..eb43f3b 100644 --- a/recipes-extended/shadow/files/pam.d/login +++ b/recipes-extended/shadow/files/pam.d/login @@ -66,7 +66,7 @@ session required pam_limits.so # Prints the last login info upon succesful login # (Replaces the `LASTLOG_ENAB' option from login.defs) -session optional pam_lastlog.so +#session optional pam_lastlog.so # Prints the motd upon succesful login # (Replaces the `MOTD_FILE' option in login.defs)