Skip to content

Commit 7e7799d

Browse files
committed
ASDPLNG-325 - Block all_disabled_usr in access.conf
1 parent f3d8d60 commit 7e7799d

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

data/common.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,10 @@ profile_pam_access::allow_rules:
1313
"root defaults":
1414
user: "root"
1515
origin: "cron crond 127.0.0.1 :0 tty"
16-
profile_pam_access::deny_first_rules: {}
16+
profile_pam_access::deny_first_rules:
17+
"deny all_disabled_usr":
18+
group: "all_disabled_usr"
19+
origin: "ALL"
1720
profile_pam_access::deny_rules: {}
1821
profile_pam_access::pam_config:
1922
"profile_pam_access Enforce access.conf in sshd":

0 commit comments

Comments
 (0)