pam tally and faillog questions

[Tangren, Bill]

Once upon a time, xscreensaver could not write to the faillog for security reasons (a user's xscreensaver is owned by the user). AFAIK, this problem was never resolved. I get around it by copying the /etc/pam.d/system-auth text into the /etc/pam.d/gnome-screensaver (substitute your screensaver module here), but I remove the pam_tally lines. Not as secure as I'd like, but it’s the best I can do.

HTH,

Bill Tangren

-----Original Message-----
From: pam-list-bounces at redhat.com [mailto:pam-list-bounces at redhat.com] On Behalf Of Dan White
Sent: Tuesday, December 07, 2010 12:28 PM
To: pam-list at redhat.com
Subject: pam tally and faillog questions

REFERENCE: <http://www.redhat.com/archives/fedora-list/2004-April/msg02907.html>

I am still seeing this misbehavior in RHEL 5

I found a Bugzilla reference <https://bugzilla.redhat.com/show_bug.cgi?id=166682>
but could not determine if it had actually been fixed.

Any clues for this clueless one ?


“Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.”
Bill Waterson (Calvin & Hobbes)

_______________________________________________
Pam-list mailing list
Pam-list at redhat.com
https://www.redhat.com/mailman/listinfo/pam-list
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5784 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pam-list/attachments/20101207/40bbfe42/attachment.bin>