ASDPLNG-325 - Block all_disabled_usr in access.conf

ncsa · Feb 2, 2022 · 7e7799d · 7e7799d
1 parent f3d8d60
commit 7e7799d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/data/common.yaml b/data/common.yaml
@@ -13,7 +13,10 @@ profile_pam_access::allow_rules:
   "root defaults":
     user: "root"
     origin: "cron crond 127.0.0.1 :0 tty"
-profile_pam_access::deny_first_rules: {}
+profile_pam_access::deny_first_rules:
+  "deny all_disabled_usr":
+    group: "all_disabled_usr"
+    origin: "ALL"
 profile_pam_access::deny_rules: {}
 profile_pam_access::pam_config:
   "profile_pam_access Enforce access.conf in sshd":