From 971c07fc6812315c2b27015dfcc652a747f919ed Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Wed, 12 May 2021 10:33:27 +0200 Subject: [PATCH] =?UTF-8?q?pam:=20fix=20typo=20try=5Fauthtok=20=E2=86=92?= =?UTF-8?q?=20use=5Fauthtok?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This was a copy/paste mistae apparently, there's not "try_authtok" and this was supposed to copy what Fedora uses, which uses "use_authtok" correctly. Hence adjust this. Fixes: #19369 --- factory/etc/pam.d/system-auth | 2 +- man/pam_systemd.xml | 3 ++- man/pam_systemd_home.xml | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth index 522c51324af..c2d6240930f 100644 --- a/factory/etc/pam.d/system-auth +++ b/factory/etc/pam.d/system-auth @@ -13,7 +13,7 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok password required pam_deny.so -session optional pam_keyinit.so revoke diff --git a/man/pam_systemd.xml b/man/pam_systemd.xml index 21a2581b246..24174213e28 100644 --- a/man/pam_systemd.xml +++ b/man/pam_systemd.xml @@ -318,7 +318,8 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok + password required pam_deny.so -session optional pam_keyinit.so revoke diff --git a/man/pam_systemd_home.xml b/man/pam_systemd_home.xml index 93e84358058..906d1c15169 100644 --- a/man/pam_systemd_home.xml +++ b/man/pam_systemd_home.xml @@ -139,7 +139,7 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok password required pam_deny.so -session optional pam_keyinit.so revoke