aboutsummaryrefslogtreecommitdiffstats
path: root/meta-openstack/recipes-connectivity/openssh/files/mcs-sshd
diff options
context:
space:
mode:
Diffstat (limited to 'meta-openstack/recipes-connectivity/openssh/files/mcs-sshd')
-rwxr-xr-xmeta-openstack/recipes-connectivity/openssh/files/mcs-sshd33
1 files changed, 33 insertions, 0 deletions
diff --git a/meta-openstack/recipes-connectivity/openssh/files/mcs-sshd b/meta-openstack/recipes-connectivity/openssh/files/mcs-sshd
new file mode 100755
index 00000000..3420bd24
--- /dev/null
+++ b/meta-openstack/recipes-connectivity/openssh/files/mcs-sshd
@@ -0,0 +1,33 @@
+# PAM configuration for the Secure Shell service
+
+# Standard Un*x authentication.
+auth include common-auth
+
+# Disallow non-root logins when /etc/nologin exists.
+account required pam_nologin.so
+
+# Uncomment and edit /etc/security/access.conf if you need to set complex
+# access limits that are hard to express in sshd_config.
+# account required pam_access.so
+
+# Standard Un*x authorization.
+account include common-account
+
+# Set the loginuid process attribute.
+session required pam_loginuid.so
+
+# Create a new session keyring.
+session optional pam_keyinit.so force revoke
+
+# Standard Un*x session setup and teardown.
+session include common-session
+
+# Set up user limits from /etc/security/limits.conf.
+session required pam_limits.so
+
+# Read environment variables from /etc/environment and
+# /etc/security/pam_env.conf.
+session required pam_env.so # [1]
+
+# Standard Un*x password updating.
+password include common-password