LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Looking for layman documentation for PAM (https://www.linuxquestions.org/questions/linux-security-4/looking-for-layman-documentation-for-pam-403403/)

Notwerk 01-14-2006 05:15 PM

Looking for layman documentation for PAM
 
As the title suggests, I'm looking for some documentation for PAM that is a little dumbbed-down :D

PS: I'm trying to get an FC3 box to allow ONLY root to reboot/shutdown/halt/poweroff. Also, I want the machine to automatically do an fsck EVERYTIME it is booted up (which happens very rarely).

Any recommendations appreciated.

acid_kewpie 01-15-2006 01:42 AM

there's very little documentation for it really.

for the halt access, i think you should just remove those users from the wheel group (gid 10) and that should prevent them doing it.

as for the fsck thing, use tune2fs to reduce the mount count, but really an ext3 or other journalling filesystem has no reason at all to do this.

Notwerk 01-15-2006 01:49 AM

Wheel group has root as its only member. Actually I'm pretty sure this is better handled through PAM (at least on FC3), but i can't seem to figure out how to use it.

Just so i'm clear on this point:
ext3 does NOT need fsck? What if bad blocks develop on the disk? would ext3 journalling still be able to recover from that?

Thanx for the info

acid_kewpie 01-15-2006 02:01 AM

ahh i was assuming it'd be the same as for fc4, which is using wheel (unless i added users myself and forgot. If you comment out the pam_console.so reference then that should top them too. basically that prevents acceptance for any known local users.

Notwerk 01-15-2006 02:23 AM

It would be very interesting to see where the Fedora Project is headed with regards to PAM. I think it will all be clear with the release of FC5.

Thanx for your help.

[edit]
i got it working, thanx to your last suggestion
[/edit]


All times are GMT -5. The time now is 05:12 PM.