CaROS/meta-selinux
3
0
Fork 0
mirror of git://git.yoctoproject.org/meta-selinux synced 2026-01-01 13:58:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

shadow: drop select_context for login pam_selinux

Browse Source 
select_context param for pam_selinux module attempt to ask the user
for a custom security context role while login.

Admins and linux distros hardly use this param to the pam configs,
because this adds a new step in login process, and users could use
"newrole" command instead after login in.

Moreover, this is totally unnecessary for policy types without
multiple roles.

Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
This commit is contained in:
Xin Ouyang 2013-04-23 13:20:56 +08:00
parent dc917209fd
commit e6ed027e03
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
recipes-extended/shadow/files/pam.d/login
View File

@ -93,6 +93,6 @@ session include common-session
# SELinux needs to intervene at login time to ensure that the process
# starts in the proper default security context. Only sessions which are
# intended to run in the user's context should be run after this.
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open select_context
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
# When the module is present, "required" would be sufficient (When SELinux
# is disabled, this returns success.)

2
recipes-extended/shadow/shadow_4.1.4.3.bbappend
View File

@ -1,4 +1,4 @@
PR .= ".4"
PR .= ".5"
inherit with-selinux with-audit