Changeset 5150d54

Timestamp:

03/02/2024 10:03:00 AM (2 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

ken/TL2024, lazarus, trunk, xry111/llvm18

Children:

3923e4ef

Parents:

7e3400e

Message:

linux-pam: Mention kernel AUDIT configuration

pam_loginuid.so will do nothing if AUDIT not enabled.

Files:

• kernel-config/postlfs/security/linux-pam.toml (added)
• postlfs/security/linux-pam-kernel.xml (added)
• postlfs/security/linux-pam.xml (modified) (1 diff)

postlfs/security/linux-pam.xml

@@ -136 +136 @@
       </para>
     </note>
+
+  </sect2>
+
+  <sect2 role="kernel" id="linux-pam-kernel">
+    <title>Kernel Configuration</title>
+
+    <para>
+      For the PAM module <filename
+      class='libraryfile'>pam_loginuid.so</filename> (referred by
+      the PAM configuration file <filename>system-session</filename> if
+      <phrase revision='sysv'><xref linkend='elogind'/> is
+      built</phrase><phrase revision='systemd'><xref linkend='systemd'/> is
+      rebuilt with PAM support</phrase> later) to work,
+      a kernel configuration parameter need to be set or the module will
+      just do nothing:
+    </para>
+
+    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
+      href="linux-pam-kernel.xml"/>
+
+    <indexterm zone="linux-pam linux-pam-kernel">
+      <primary sortas="d-linux-pam">Linux-PAM</primary>
+    </indexterm>
 
   </sect2>