diff options
| author | Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> | 2020-01-28 12:32:37 +0300 |
|---|---|---|
| committer | Brad Bishop <bradleyb@fuzziesquirrel.com> | 2020-02-05 16:16:05 +0300 |
| commit | 02292605d87ce193aba654b4e0241aae25d143cc (patch) | |
| tree | 508cb4e027c1dcfc9969dfee5d7a2dbab5b0adf0 /meta-phosphor/recipes-extended | |
| parent | e60ab2abf8c51428f9bd18d142d39b871056373b (diff) | |
| download | openbmc-02292605d87ce193aba654b4e0241aae25d143cc.tar.xz | |
[pam]: Include pam-succeed-if to verify group role
Include pam-succeed-if to the rootfs file system. This will be
used to do pam_authenticate restriction based on group ownership.
Tested:
Along with pam-webserver changes with authenticate required, verified
that users belonging to redfish group are only allowed to login to
bmcweb.
(From meta-phosphor rev: 8c65b60518d8c447918371f3dbc7aceca35aaaa5)
Change-Id: Ie81c0c9c6a2d3188a5d74a845c2a584b9ad36101
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Diffstat (limited to 'meta-phosphor/recipes-extended')
| -rw-r--r-- | meta-phosphor/recipes-extended/pam/libpam_%.bbappend | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-phosphor/recipes-extended/pam/libpam_%.bbappend b/meta-phosphor/recipes-extended/pam/libpam_%.bbappend index 770ffeafd..07dd54847 100644 --- a/meta-phosphor/recipes-extended/pam/libpam_%.bbappend +++ b/meta-phosphor/recipes-extended/pam/libpam_%.bbappend @@ -9,6 +9,7 @@ SRC_URI += " file://pam.d/common-password \ RDEPENDS_${PN}-runtime += "${MLPREFIX}pam-plugin-cracklib-${libpam_suffix} \ ${MLPREFIX}pam-plugin-tally2-${libpam_suffix} \ ${MLPREFIX}pam-plugin-pwhistory-${libpam_suffix} \ + ${MLPREFIX}pam-plugin-succeed-if-${libpam_suffix} \ " do_install_append() { |