From 4ab6b08a51b8b6762b6b14472fa877630652d51e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kai=20L=C3=BCke?= Date: Tue, 23 Mar 2021 11:13:52 +0100 Subject: [PATCH] sys-apps/baselayout: enable pam_faillock with relaxed defaults This pulls in https://github.com/kinvolk/baselayout/pull/17 to enable the pam_faillock module as replacement for pam_tally2. The "faillock" binary can be used to see the login attempts and account lock status which before was available with the pam_tally command. While the tally defaults did not temporarily lock the account on wrong password login attempts, this is done by default with faillock. However, the default behavior was relaxed to allow more wrong attempts and have a shorter lock time span. --- .../coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild index d1fa928132..97eedbe85b 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild +++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/baselayout/baselayout-9999.ebuild @@ -9,7 +9,7 @@ CROS_WORKON_REPO="git://github.com" if [[ "${PV}" == 9999 ]]; then KEYWORDS="~amd64 ~arm ~arm64 ~x86" else - CROS_WORKON_COMMIT="8e4cd3c28786a03cdbfb9ffd73552b1a0714aa8b" # flatcar-master + CROS_WORKON_COMMIT="bbe3f2589c46f61a2c9628ab5dd19e31ff651477" # flatcar-master KEYWORDS="amd64 arm arm64 x86" fi