Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Currently, /etc/security/access.conf is a wild file (not installed by a package) and has no function (just a copy of /etc/security/access.conf.sample) with comments only. /etc/security/access.conf is used by pam_access which is configured for sshd and most other pam services. Create a symlink from /etc/security/access.conf to /etc/local/access.conf, so that we can install a host specific access file. This is going to be used to restrict access to certain machines to trusted users. Such a file could, for example, look like this: + : ALL : LOCAL + : root (admin) : ALL - : ALL : ALL to allow remote access to root user and the admin group only. If the target file doesn't exists, which should be the default case, pam_access doesn't block the authentication.
- Loading branch information