From 0d4fd5772986e5d73d2ecf23826c49cc1c91f6b0 Mon Sep 17 00:00:00 2001 From: "Jan F. Chadima" Date: Thu, 14 Jul 2011 13:46:20 +0200 Subject: [PATCH] Add postlogin to pam. (#718807) --- openssh.spec | 5 ++++- sshd.pam | 2 ++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/openssh.spec b/openssh.spec index 706d235..4a56e42 100644 --- a/openssh.spec +++ b/openssh.spec @@ -79,7 +79,7 @@ # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1 %define openssh_ver 5.8p2 -%define openssh_rel 12 +%define openssh_rel 13 %define pam_ssh_agent_ver 0.9.2 %define pam_ssh_agent_rel 31 @@ -765,6 +765,9 @@ fi %endif %changelog +* Thu Jul 14 2011 Jan F. Chadima - 5.8p2-13 + 0.9.2-31 +- Add postlogin to pam. (#718807) + * Tue Jun 28 2011 Jan F. Chadima - 5.8p2-12 + 0.9.2-31 - Systemd compatibility according to Mathieu Bridon - Split out the host keygen into their own command, to ease future migration diff --git a/sshd.pam b/sshd.pam index bf775a3..7455e91 100644 --- a/sshd.pam +++ b/sshd.pam @@ -1,6 +1,7 @@ #%PAM-1.0 auth required pam_sepermit.so auth include password-auth +auth include postlogin account required pam_nologin.so account include password-auth password include password-auth @@ -11,3 +12,4 @@ session required pam_loginuid.so session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth +session include postlogin