Re: Big security hole in (my config of) PAM

On Tue, Aug 17, 2004 at 07:34:42AM +0800, John Darrington wrote: > Whenever I add the line > > authrequired pam_securetty.so It is not due to this line. > authsufficient pam_unix.so nullok_secure This is the problem. You are not requiring that people authenticate, thus an

Big security hole in (my config of) PAM

Whenever I add the line authrequired pam_securetty.so to my /etc/pam.d/common-auth Then ANY user can log in with ANY password (or with no password at all). Here's the file: #authrequired pam_securetty.so authrequiredpam_nologin.so authsufficient pam_un