| [344] | 1 | # PAM configuration for the Secure Shell service | 
|---|
 | 2 |  | 
|---|
 | 3 | # Read environment variables from /etc/environment and | 
|---|
 | 4 | # /etc/security/pam_env.conf. | 
|---|
 | 5 | auth       required     pam_env.so # [1] | 
|---|
 | 6 | # In Debian 4.0 (etch), locale-related environment variables were moved to | 
|---|
 | 7 | # /etc/default/locale, so read that as well. | 
|---|
 | 8 | auth       required     pam_env.so envfile=/etc/default/locale | 
|---|
 | 9 |  | 
|---|
 | 10 | # Standard Un*x authentication. | 
|---|
 | 11 | @include common-auth | 
|---|
 | 12 |  | 
|---|
 | 13 | # Disallow non-root logins when /etc/nologin exists. | 
|---|
 | 14 | account    required     pam_nologin.so | 
|---|
 | 15 |  | 
|---|
 | 16 | # Uncomment and edit /etc/security/access.conf if you need to set complex | 
|---|
 | 17 | # access limits that are hard to express in sshd_config. | 
|---|
 | 18 | # account  required     pam_access.so | 
|---|
 | 19 |  | 
|---|
 | 20 | # Standard Un*x authorization. | 
|---|
 | 21 | @include common-account | 
|---|
 | 22 |  | 
|---|
 | 23 | # Standard Un*x session setup and teardown. | 
|---|
 | 24 | @include common-session | 
|---|
 | 25 |  | 
|---|
 | 26 | # Print the message of the day upon successful login. | 
|---|
 | 27 | #session    optional     pam_motd.so # [1] | 
|---|
 | 28 |  | 
|---|
 | 29 | # Print the status of the user's mailbox upon successful login. | 
|---|
 | 30 | session    optional     pam_mail.so standard noenv # [1] | 
|---|
 | 31 |  | 
|---|
 | 32 | # Set up user limits from /etc/security/limits.conf. | 
|---|
 | 33 | session    required     pam_limits.so | 
|---|
 | 34 |  | 
|---|
 | 35 | # Set up SELinux capabilities (need modified pam) | 
|---|
 | 36 | # session  required     pam_selinux.so multiple | 
|---|
 | 37 |  | 
|---|
 | 38 | # Standard Un*x password updating. | 
|---|
 | 39 | @include common-password | 
|---|