Matthew Garrett 3865f77ecd sys-auth/pambase: Fall back to pam_deny in auth ...

Setting pam_unix and pam_sss to sufficient means that if both fail,
control will be passed to the following pam module. If this is
pam_permit then permission will be granted even if the previous modules
failed. Switch to pam_deny and require it rather than permitting it to
be optional - if sss or unix succeed, we'll jump out before we get to
this point.

2016-05-15 21:12:57 -07:00

..

src/third_party/coreos-overlay

sys-auth/pambase: Fall back to pam_deny in auth

2016-05-15 21:12:57 -07:00