#62: merge pam_faillock
--------------------------+------------------------------
Reporter: jnewton | Owner: pam-developers@…
Type: enhancement | Status: new
Priority: minor | Component: modules
Version: | Keywords:
Blocked By: | Blocking:
--------------------------+------------------------------
I've spoken with the author of pam_faillock and I believe it to be
superior to pam_tally2, particularly concerning handling of
screensaver handling - so much so in addition to the following, that I've
requested my own distribution choice, opensuse/SUSE to incorporate the
module as well.
pam_faillock is part of the recommended RHEL configuration for secured
computers and holding out for pam_tally2 also presents a nasty
non-uniformity for nearly the same functionality (although, pam_tally2
doesn't work for screensavers). This can thus make it an issue to have an
approved configuration the scrutiny of security folks.
I've asked the author, Tomas Mraz, to make the patch available
standalone - which he has provided here for other users/distributions to
consider:
http://people.redhat.com/tmraz/pam_faillock/
But I think this should just go into master at this point.
--
Ticket URL: <
https://fedorahosted.org/linux-pam/ticket/62>
linux-pam <
http://fedorahosted.org/linux-pam>
The Linux-PAM (Pluggable Authentication Modules) project