security: Remove PAM configuration for 'access' module

- This was supposed to removed in MR #2309 in the commit
253540fb3d12254c920b632cc484be6a79d27229. It was overlooked.

- Version number of users app has not been incremented as it has already been
incremented in this release.

Tests:

- There is no directory /etc/security/access.conf.d.

- There are not directives in /etc/security/access.conf that are not commented
out.

- After applying the patch (assuming previously setup version is 24.20) and
manually removing the destination file, app setup for users app runs. It
succeeds. /etc/pam.d/common-account no longer contains the line 'account
required pam_access.so'.

- After the upgrade, users who are root and non-root are able to login via SSH
and Cockpit. After a reboot, users are able to login via SSH and Cockpit.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2024-09-24 14:10:32 -07:00 committed by James Valleroy
parent f084e1b3ea
commit b5e57c4ffc
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808
2 changed files with 1 additions and 7 deletions

View File

@ -1,6 +0,0 @@
Name: Restrict login using access control table file
Default: yes
Priority: 0
Account-Type: Additional
Account-Final:
required pam_access.so

View File

@ -60,7 +60,7 @@ def first_setup():
@privileged
def setup():
"""Setup LDAP."""
# Update pam configs for access and mkhomedir.
# Update pam config for mkhomedir.
subprocess.run(['pam-auth-update', '--package'], check=True)
_configure_ldapscripts()