diff options
author | nekral-guest <nekral-guest@5a98b0ae-9ef6-0310-add3-de5d479b70d7> | 2009-05-16 10:15:38 +0000 |
---|---|---|
committer | nekral-guest <nekral-guest@5a98b0ae-9ef6-0310-add3-de5d479b70d7> | 2009-05-16 10:15:38 +0000 |
commit | a97b3a382b97d2b867b19ef16fd03ad6ac7b6056 (patch) | |
tree | 31a07be8092ff83bc53e3e04fe8c94c334f2e654 /debian/login.pam | |
parent | f3ef07b8c788ecee75cd725b369d4319861b21ff (diff) | |
download | shadow-a97b3a382b97d2b867b19ef16fd03ad6ac7b6056.tar.gz |
* The "Banonet" release.
* debian/login.pam: Really ignore pam_selinux.so failures when the module do
not exist. Closes: #528673
Diffstat (limited to 'debian/login.pam')
-rw-r--r-- | debian/login.pam | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/debian/login.pam b/debian/login.pam index bdf85375..33e48a76 100644 --- a/debian/login.pam +++ b/debian/login.pam @@ -93,6 +93,6 @@ session optional pam_mail.so standard # SELinux needs to intervene at login time to ensure that the process # starts in the proper default security context. Only sessions which are # intended to run in the user's context should be run after this. -session required pam_selinux.so open +session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open # When the module is present, "required" would be sufficient (When SELinux # is disabled, this returns success.) |