summaryrefslogtreecommitdiff
path: root/meta-hpe
diff options
context:
space:
mode:
authorjdubs11 <john.weidenfeller@hpe.com>2024-02-09 01:02:08 +0300
committerJohn Weidenfeller <john.weidenfeller@hpe.com>2024-02-21 00:55:15 +0300
commit55a026cb967283190204d98e7cad53085c18aaef (patch)
tree3866a075886c844f074708ca6886a58cb8a9672e /meta-hpe
parentd12aa11cc1ee9727e4b341fbae69bfd1847b58a9 (diff)
downloadopenbmc-55a026cb967283190204d98e7cad53085c18aaef.tar.xz
meta-hpe: add default login lockout config
standardize and harden hpe obmc builds Change-Id: I6267c9dde4bfa8a9f205e7b8e48cf5470d4c65b5 Signed-off-by: John Weidenfeller <john.weidenfeller@hpe.com>
Diffstat (limited to 'meta-hpe')
-rw-r--r--meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf2
-rw-r--r--meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend4
2 files changed, 6 insertions, 0 deletions
diff --git a/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf b/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf
new file mode 100644
index 0000000000..d0da8c7530
--- /dev/null
+++ b/meta-hpe/meta-common/recipes-extended/pam/libpam/faillock.conf
@@ -0,0 +1,2 @@
+deny=5
+unlock_time=900
diff --git a/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend b/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend
new file mode 100644
index 0000000000..1aa78d3390
--- /dev/null
+++ b/meta-hpe/meta-common/recipes-extended/pam/libpam_%.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
+
+SRC_URI += " file://faillock.conf \
+ "