Linux PAM
- linux-pam/linux-pam
- https://pkgs.alpinelinux.org/contents?file=&path=&name=linux-pam&branch=edge&arch=x86_64
pam.conf
/etc/pam.d/<service>
type control module-path module-arguments
- service
- su
- login
other
- 默认
- type
- account
- auth
- password
- session
- control
- required
- requisite
- sufficient
- optional
- include
- substack
value1=action1 value2=action2
- module-path
- 完整或相对
/lib/security/
,/lib64/security/
/etc/pam.d/su
# basic PAM configuration for Alpine.
auth sufficient pam_rootok.so
auth include base-auth
account include base-account
password include base-password
session include base-session-noninteractive
pam.d
-
base-account
account required pam_unix.so
-
base-auth
auth required pam_env.so
auth required pam_unix.so nullok_secure
auth required pam_nologin.so successok
auth sufficient pam_unix.so nullok try_first_pass
account required pam_nologin.so
account sufficient pam_unix.so
password sufficient pam_unix.so nullok sha512 shadow try_first_pass use_authtok
-session optional pam_loginuid.so
-session optional pam_elogind.so
session sufficient pam_unix.so -
base-password
password required pam_unix.so nullok md5 sha512
-
base-session
session include base-session-noninteractive
session required pam_motd.so
-session optional pam_elogind.so -
base-session-noninteractive
session required pam_limits.so
session required pam_unix.so