[opensuse-factory] vote for enhancement 943474
Hello geeko minions, I've been told on irc to advocate for my enhancement request also like this here, so doing it .. You can find my proposal at: https://bugzilla.suse.com/show_bug.cgi?id=943474 I think it's reasonable ... Let's go and be one step forward before our competitors and other foes :) .. regards, daniel S Pozdravem / Best Regards ------------------------------------------------------- Daniel Pecka - dpecka@opensuse.org SCSA, SCNA, RHCE, CLP -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On August 28, 2015 8:50:36 PM EDT, Daniel Pecka <dpecka@opensuse.org> wrote:
I don't know Pam well, but as a broader idea I like the concept of a local config files that overrides a static config file. Fail2ban's latest release (not yet in factory as far as I know, but it is in the maintainer's OBS home project ) uses a primary config file that defines all sorts of disabled possible monitoring activities, then a jail.local file that provides overrides. It makes it much easier to see what the local changes are. It also makes upgrades easier. I'm not sure what would happen when you throw YAST into the mix. Ie. In fail2ban's case if a yast module were written, should it edit the static config file, of the jail.local override file? Greg -- Sent from my Android device with K-9 Mail. Please excuse my brevity. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Yes, pam-config needs some new features. I have an easier problem with pam_u2f.so and pam_yubico.so. My first solution was to add this modules to pam-config, but what you want is much more difficult to support it with the idea of pam-config. And an other restriction is the static control field. No choise for required or sufficent or [ default=1 ... ]. We need a solution to support user settings. My suggestion is to parse the config files for unknown entries and add a key comment header to mark it as user settings. A switch could turn on or off the user settings to get a safe and stable state in the hole PAM configuration. Torsten Am 29.08.2015 um 02:50 schrieb Daniel Pecka:
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (3)
-
Daniel Pecka -
greg.freemyer＠gmail.com -
Torsten Gruner