Page MenuHomeDevCentral

Disable pam_nologin for SSH connections
ClosedPublic

Authored by dereckson on Apr 28 2017, 09:42.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Sep 23, 03:14
Unknown Object (File)
Mon, Sep 22, 10:42
Unknown Object (File)
Sun, Sep 21, 21:37
Unknown Object (File)
Sun, Sep 21, 16:52
Unknown Object (File)
Sun, Sep 21, 09:32
Unknown Object (File)
Sun, Sep 21, 09:26
Unknown Object (File)
Sun, Sep 21, 05:15
Unknown Object (File)
Sun, Sep 21, 00:45
Subscribers
None

Details

Summary

systemd likes to touch /run/nologin to prevent SSH connections
while not fully initialized, a behavior frowned upon as there
isn't any warranty the file will be removed on system failure.

Furthermore, restrict non root login isn't a solution on servers
where root access isn't possible through SSH.

Fixes T1194.

Test Plan

Running the state on Eglide, output was well the expected diff:

-account    required     pam_nologin.so                                                                                        
+#account    required     pam_nologin.so

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Apr 28 2017, 21:12
This revision was automatically updated to reflect the committed changes.