From aa7ff87871603a4edc375ce6972c59bbab10bb8d Mon Sep 17 00:00:00 2001 From: Jackie Huang Date: Tue, 10 Nov 2020 15:20:22 +0800 Subject: [PATCH] pam-config: add pam_deny module for password pam_deny module is required for password, or it always fail when changing password for sysadmin in the first login: login[49221]: err PAM bad jump in stack login[49221]: err Permission denied Issue-ID: INF-200 Signed-off-by: Jackie Huang Change-Id: I56776b7d02851833e8a330bca129c08baf73c82e --- meta-stx/recipes-core/stx-config-files/config-files_1.0.0.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-stx/recipes-core/stx-config-files/config-files_1.0.0.bb b/meta-stx/recipes-core/stx-config-files/config-files_1.0.0.bb index e8f0b93..82d1092 100644 --- a/meta-stx/recipes-core/stx-config-files/config-files_1.0.0.bb +++ b/meta-stx/recipes-core/stx-config-files/config-files_1.0.0.bb @@ -580,6 +580,9 @@ pkg_postinst_ontarget_pam-config() { cp -f ${datadir}/starlingx/stx.system-auth ${sysconfdir}/pam.d/system-auth cp -f ${datadir}/starlingx/sshd.pam ${sysconfdir}/pam.d/sshd + + sed -i -e '/password .*pam_ldap.so/,/session .*revoke/ s/^$/password required pam_deny.so\n/g' \ + ${sysconfdir}/pam.d/system-auth } pkg_postinst_ontarget_rabbitmq-server-config() { -- 2.16.6