Move config to /etc/security/pam-weblogin.conf

Question

Move config to /etc/security/pam-weblogin.conf

Closed this issue a year ago · 2 comments

baszoetekouw commented 2 years ago

Consider moving the config to /etc/security/pam-weblogin.conf
Currently in /etc/pam-weblogin.conf.

Answer 1 · 2023-05-04T11:16:44.000Z

pam-weblogin should search both location, prefer the security one, and install there by defualt

Answer 2 · 2023-06-14T09:05:12.000Z

I think more important than location are the file permission flags. At this moment they are :

gitpod /workspace/pam-weblogin (fix-conf-location) $ ls -l /etc/security/pam-weblogin.conf 
-rw-r--r-- 1 root root 115 Jun 14 08:52 /etc/security/pam-weblogin.conf

I suggest to have this changed to 600

CORRECTION: Above is true as far as the makefile creates this file via command sudo make install
During execution the file permissions are validated and must be 600, otherwise the file is ingnored

Conclusion: Fix is accepted