1
0
mirror of https://github.com/altlinux/gpupdate.git synced 2025-03-21 18:50:38 +03:00

system-policy-gpupdate: add PAM-rules for ignore applying group policies

for local users and system users with uid less than 500
This commit is contained in:
Evgeny Sinelnikov 2021-09-26 19:55:45 +04:00
parent f3062668fa
commit aa10d5bbf9

View File

@ -1,4 +1,9 @@
#%PAM-1.0
session [success=2 perm_denied=ignore default=die] pam_localuser.so
session required pam_mkhomedir.so silent
session [default=1] pam_permit.so
session [default=3] pam_permit.so
session [success=ignore default=2] pam_succeed_if.so uid >= 500 quiet
-session required pam_oddjob_gpupdate.so
session optional pam_env.so user_readenv=1 conffile=/etc/gpupdate/environment user_envfile=.gpupdate_environment
session required pam_permit.so