Skip to content
Jump to bottom

Add /etc/local/access.conf symlink #313

Merged
merged 1 commit into from
Mar 31, 2023
Merged

Add /etc/local/access.conf symlink #313

merged 1 commit into from
Mar 31, 2023

Commits on Mar 30, 2023

  1. Add /etc/local/access.conf symlink 

    Currently, /etc/security/access.conf is a wild file (not installed by a
package) and has no function (just a copy of
/etc/security/access.conf.sample) with comments only.

/etc/security/access.conf is used by pam_access which is configured for
sshd and most other pam services.

Create a symlink from /etc/security/access.conf to
/etc/local/access.conf, so that we can install a host specific access
file. This is going to be used to restrict access to certain machines to
trusted users. Such a file could, for example, look like this:

    + : ALL : LOCAL
    + : root (admin) : ALL
    - : ALL : ALL

to allow remote access to root user and the admin group only.

If the target file doesn't exists, which should be the default case,
pam_access doesn't block the authentication.
    @donald
    donald committed Mar 30, 2023
    Configuration menu
    Copy the full SHA
    6d27dca View commit details
    Browse the repository at this point in the history