PAM 모듈 톺아보기

sshd PAM 모듈

원격 접속을 할 때 사용되는 ssh 데몬의 pam 설정이다.

#%PAM-1.0
auth       substack     password-auth
auth       include      postlogin
account    required     pam_sepermit.so
account    required     pam_nologin.so
account    include      password-auth
password   include      password-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session    required     pam_selinux.so open env_params
session    required     pam_namespace.so
session    optional     pam_keyinit.so force revoke
session    optional     pam_motd.so
session    include      password-auth
session    include      postlogin

Auth 타입

auth 타입에는 두가지 설정이 있다.

auth       substack     password-auth
auth       include      postlogin