l domsen: run verify_arg as root

This commit is contained in:
lassulus 2019-04-17 20:16:06 +02:00
parent 47c4919a06
commit 24d7e2fa03
2 changed files with 5 additions and 1 deletions

View File

@ -119,7 +119,7 @@ in {
authenticators.PLAIN = '' authenticators.PLAIN = ''
driver = plaintext driver = plaintext
public_name = PLAIN public_name = PLAIN
server_condition = ''${run{${config.lass.usershadow.path}/bin/verify_arg ${config.lass.usershadow.pattern} $auth2 $auth3}{yes}{no}} server_condition = ''${run{/run/wrappers/bin/shadow_verify_arg ${config.lass.usershadow.pattern} $auth2 $auth3}{yes}{no}}
''; '';
authenticators.LOGIN = '' authenticators.LOGIN = ''
driver = plaintext driver = plaintext

View File

@ -45,6 +45,10 @@
source = "${usershadow}/bin/verify_pam"; source = "${usershadow}/bin/verify_pam";
owner = "root"; owner = "root";
}; };
security.wrappers.shadow_verify_arg = {
source = "${usershadow}/bin/verify_arg";
owner = "root";
};
}; };
usershadow = let { usershadow = let {