Berk Çakar
151 lines
3.8 KiB
Bash
Executable File
151 lines
3.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
cat > login << "EOF"
|
|
# Begin /etc/pam.d/login
|
|
|
|
# Set failure delay before next prompt to 3 seconds
|
|
auth optional pam_faildelay.so delay=3000000
|
|
|
|
# Check to make sure that the user is allowed to login
|
|
auth requisite pam_nologin.so
|
|
|
|
# Check to make sure that root is allowed to login
|
|
# Disabled by default. You will need to create /etc/securetty
|
|
# file for this module to function. See man 5 securetty.
|
|
#auth required pam_securetty.so
|
|
|
|
# Additional group memberships - disabled by default
|
|
#auth optional pam_group.so
|
|
|
|
# include system auth settings
|
|
auth include system-auth
|
|
|
|
# check access for the user
|
|
account required pam_access.so
|
|
|
|
# include system account settings
|
|
account include system-account
|
|
|
|
# Set default environment variables for the user
|
|
session required pam_env.so
|
|
|
|
# Set resource limits for the user
|
|
session required pam_limits.so
|
|
|
|
# Display date of last login - Disabled by default
|
|
#session optional pam_lastlog.so
|
|
|
|
# Display the message of the day - Disabled by default
|
|
#session optional pam_motd.so
|
|
|
|
# Check user's mail - Disabled by default
|
|
#session optional pam_mail.so standard quiet
|
|
|
|
# include system session and password settings
|
|
session include system-session
|
|
password include system-password
|
|
|
|
# End /etc/pam.d/login
|
|
EOF
|
|
|
|
cat > passwd << "EOF"
|
|
# Begin /etc/pam.d/passwd
|
|
|
|
password include system-password
|
|
|
|
# End /etc/pam.d/passwd
|
|
EOF
|
|
|
|
cat > su << "EOF"
|
|
# Begin /etc/pam.d/su
|
|
|
|
# always allow root
|
|
auth sufficient pam_rootok.so
|
|
|
|
# Allow users in the wheel group to execute su without a password
|
|
# disabled by default
|
|
#auth sufficient pam_wheel.so trust use_uid
|
|
|
|
# include system auth settings
|
|
auth include system-auth
|
|
|
|
# limit su to users in the wheel group
|
|
auth required pam_wheel.so use_uid
|
|
|
|
# include system account settings
|
|
account include system-account
|
|
|
|
# Set default environment variables for the service user
|
|
session required pam_env.so
|
|
|
|
# include system session settings
|
|
session include system-session
|
|
|
|
# End /etc/pam.d/su
|
|
EOF
|
|
|
|
cat > chage << "EOF"
|
|
# Begin /etc/pam.d/chage
|
|
|
|
# always allow root
|
|
auth sufficient pam_rootok.so
|
|
|
|
# include system auth, account, and session settings
|
|
auth include system-auth
|
|
account include system-account
|
|
session include system-session
|
|
|
|
# Always permit for authentication updates
|
|
password required pam_permit.so
|
|
|
|
# End /etc/pam.d/chage
|
|
EOF
|
|
|
|
cat > system-login << "EOF"
|
|
# Begin /etc/pam.d/system-login
|
|
|
|
# Set failure delay before next prompt to 3 seconds
|
|
auth optional pam_faildelay.so delay=3000000
|
|
|
|
# Check to make sure that the user is allowed to login
|
|
auth requisite pam_nologin.so
|
|
|
|
# Check to make sure that root is allowed to login
|
|
# Disabled by default. You will need to create /etc/securetty
|
|
# file for this module to function. See man 5 securetty.
|
|
#auth required pam_securetty.so
|
|
|
|
# Additional group memberships - disabled by default
|
|
#auth optional pam_group.so
|
|
|
|
# include the default auth settings
|
|
auth include system-auth
|
|
|
|
# check access for the user
|
|
account required pam_access.so
|
|
|
|
# include the default account settings
|
|
account include system-account
|
|
|
|
# Set default environment variables for the user
|
|
session required pam_env.so
|
|
|
|
# Set resource limits for the user
|
|
session required pam_limits.so
|
|
|
|
# Display date of last login - Disabled by default
|
|
#session optional pam_lastlog.so
|
|
|
|
# Display the message of the day - Disabled by default
|
|
#session optional pam_motd.so
|
|
|
|
# Check user's mail - Disabled by default
|
|
#session optional pam_mail.so standard quiet
|
|
|
|
# include the default session and password settings
|
|
session include system-session
|
|
password include system-password
|
|
|
|
# End /etc/pam.d/system-login
|
|
EOF
|