From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Tue, 30 Dec 2008 16:04:28 +0000 (+0100)
Subject: pam: Deny everything in pam.d/other.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Fdrsnuggles.git;a=commitdiff_plain;h=dc84e38a62813df639ae0478fe47441f732044a4

pam: Deny everything in pam.d/other.
---

diff --git a/etc/pam.d/other b/etc/pam.d/other
index 59d776c..867cf91 100644
--- a/etc/pam.d/other
+++ b/etc/pam.d/other
@@ -4,13 +4,11 @@
 # Note that this file is used for any unspecified service; for example
 #if /etc/pam.d/cron  specifies no session modules but cron calls
 #pam_open_session, the session module out of /etc/pam.d/other is
-#used.  If you really want nothing to happen then use pam_permit.so or
-#pam_deny.so as appropriate.
-
-# We fall back to the system default in /etc/pam.d/common-*
-# 
+#used.  
+#
+# We deny any pam calls not explicitely allowed elsewhere.
 
-@include common-auth
-@include common-account
-@include common-password
-@include common-session
+auth        required pam_deny
+account     required pam_deny
+session     required pam_deny
+password    required pam_deny