PAM configuration policy enforcement.

scripts/brp-cleanup

@@ -71,9 +71,21 @@ find .$RPM_CLEANUP_TOPDIR -type f \(	\
 find .$RPM_CLEANUP_TOPDIR -type d -name CVS -print0 |
 	xargs -r0 rm -vrf --
 
+if cd ./etc/pam.d >/dev/null 2>&1; then
+	find -type f -mindepth 1 -maxdepth 1 -print0 |
+	xargs -r0 subst -p '
+s,^\(#\?\)auth[[:space:]]\+,\1auth     ,g
+s,^\(#\?\)account[[:space:]]\+,\1account  ,g
+s,^\(#\?\)password[[:space:]]\+,\1password ,g
+s,^\(#\?\)session[[:space:]]\+,\1session  ,g
+s,\([[:space:]]\)/lib/security/\(pam_\),\1\2,g
+s,\([[:space:]]\)required[[:space:]]\+pam_stack.so[[:space:]]\+service=,\1include	,g
+' --
+fi
+
 # All the rest is perl cleanup stuff.
 
-cd ./usr/lib/perl5 &>/dev/null || exit 0
+cd ./usr/lib/perl5 >/dev/null 2>&1 || exit 0
 
 find -type f -name .packlist -print0 |
 	xargs -r0 rm -vf --