Some detail questions

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Some detail questions

Postby countermode » Tue Jan 28, 2014 5:51 pm

Hi,

How can I make gradm use PAM? More specifically, how does gradm interact with PAM?
Code: Select all
gradm -p admin
PAM authentication failed.

What now? The wikibook doesn't say anything more specific.
countermode
 
Posts: 27
Joined: Mon Sep 16, 2013 6:59 pm

Re: Some detail questions

Postby spender » Tue Jan 28, 2014 6:33 pm

You need to create a PAM entry for gradm similar to any other service that uses PAM (see viewtopic.php?f=1&t=2831). We don't provide one by default as each user will likely want some different authentication method. You also need to ensure the "P" flag is on the special role for which you want to use PAM authentication. FWIW, I don't recommend this for a fully-privileged admin role.

Once you have it working, feel free to update the wiki.

Thanks,
-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support

cron