logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

authentication (1857B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2002-2009 Novell/SUSE
  4. #    Copyright (C) 2009-2012 Canonical Ltd
  5. #    Copyright (C) 2019-2021 Christian Boltz
  6. #
  7. #    This program is free software; you can redistribute it and/or
  8. #    modify it under the terms of version 2 of the GNU General Public
  9. #    License published by the Free Software Foundation.
  10. #
  11. # ------------------------------------------------------------------
  13.   abi <abi/3.0>,
  16.   # Some services need to perform authentication of users
  17.   # Such authentication almost certainly needs access to the local users
  18.   # databases containing passwords, PAM configuration files, PAM libraries
  19.   @{etc_ro}/nologin                r,
  20.   @{etc_ro}/pam.d/*                r,
  21.   @{etc_ro}/securetty              r,
  22.   @{etc_ro}/security/*             r,
  23.   @{etc_ro}/shadow                 r,
  24.   @{etc_ro}/gshadow                r,
  25.   @{etc_ro}/pwdb.conf              r,
  27.   /{usr/,}lib{,32,64}/security/pam_filter/*  mr,
  28.   /{usr/,}lib{,32,64}/security/pam_*.so      mr,
  29.   /{usr/,}lib{,32,64}/security/              r,
  30.   /{usr/,}lib/@{multiarch}/security/pam_filter/*  mr,
  31.   /{usr/,}lib/@{multiarch}/security/pam_*.so      mr,
  32.   /{usr/,}lib/@{multiarch}/security/              r,
  34.   # kerberos
  35.   include <abstractions/kerberosclient>
  36.   # SuSE's pwdutils are different:
  37.   @{etc_ro}/default/passwd         r,
  38.   @{etc_ro}/login.defs             r,
  39.   @{etc_ro}/login.defs.d/          r,
  40.   @{etc_ro}/login.defs.d/*.defs    r,
  42.   # nis
  43.   include <abstractions/nis>
  45.   # winbind
  46.   include <abstractions/winbind>
  48.   # likewise
  49.   include <abstractions/likewise>
  51.   # smbpass
  52.   include <abstractions/smbpass>
  54.   # p11-kit (PKCS#11 modules configuration)
  55.   include <abstractions/p11-kit>
  57.   # Include additions to the abstraction
  58.   include if exists <abstractions/authentication.d>