summaryrefslogtreecommitdiff
path: root/debian/libpam-modules.templates
diff options
context:
space:
mode:
authorSam Hartman <hartmans@debian.org>2021-02-24 14:29:53 -0500
committerSteve Langasek <steve.langasek@canonical.com>2021-09-15 17:52:36 -0700
commit5580a437c37d76f78fe6fe410c9918f8f017ee8e (patch)
tree5fcc86721b42b0f652f1cc37bd3e93730a2e3421 /debian/libpam-modules.templates
parent952595e2b7cbcb2c7964c4c60c5d4a8fc5f56046 (diff)
debian/libpam-modules.preinst|templates: pam_tally deprecation
* Add a facility to detect enabled profiles that contain a particular module * If a profile contains an enabled module that is being removed, remove that profile and warn the user. * Use this to pam_tally and because of how the string search works pam_tally2
Diffstat (limited to 'debian/libpam-modules.templates')
-rw-r--r--debian/libpam-modules.templates9
1 files changed, 9 insertions, 0 deletions
diff --git a/debian/libpam-modules.templates b/debian/libpam-modules.templates
index b928751e..491bc5c1 100644
--- a/debian/libpam-modules.templates
+++ b/debian/libpam-modules.templates
@@ -7,3 +7,12 @@ _Description: xscreensaver and xlockmore must be restarted before upgrading
authenticate to these programs. You should arrange for these programs
to be restarted or stopped before continuing this upgrade, to avoid
locking your users out of their current sessions.
+
+Template: libpam-modules/profiles-disabled
+Type: error
+_Description: PAM Profiles with Deprecated Modules Disabled
+ Your system had PAM profiles enabled with the ${modules} PAM
+ modules. These modules have been removed from PAM. Leaving these PAM
+ profiles enabled would prevent users from accessing your system. As a
+ result, these profiles have been disabled.
+ \ No newline at end of file