summaryrefslogtreecommitdiff
path: root/debian/login.pam
diff options
context:
space:
mode:
authornekral-guest <nekral-guest@5a98b0ae-9ef6-0310-add3-de5d479b70d7>2009-05-16 10:15:38 +0000
committernekral-guest <nekral-guest@5a98b0ae-9ef6-0310-add3-de5d479b70d7>2009-05-16 10:15:38 +0000
commita97b3a382b97d2b867b19ef16fd03ad6ac7b6056 (patch)
tree31a07be8092ff83bc53e3e04fe8c94c334f2e654 /debian/login.pam
parentf3ef07b8c788ecee75cd725b369d4319861b21ff (diff)
downloadshadow-a97b3a382b97d2b867b19ef16fd03ad6ac7b6056.tar.gz
* The "Banonet" release.
* debian/login.pam: Really ignore pam_selinux.so failures when the module do not exist. Closes: #528673
Diffstat (limited to 'debian/login.pam')
-rw-r--r--debian/login.pam2
1 files changed, 1 insertions, 1 deletions
diff --git a/debian/login.pam b/debian/login.pam
index bdf85375..33e48a76 100644
--- a/debian/login.pam
+++ b/debian/login.pam
@@ -93,6 +93,6 @@ session optional pam_mail.so standard
# SELinux needs to intervene at login time to ensure that the process
# starts in the proper default security context. Only sessions which are
# intended to run in the user's context should be run after this.
-session required pam_selinux.so open
+session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
# When the module is present, "required" would be sufficient (When SELinux
# is disabled, this returns success.)