Bug 1196657

Summary:	[RFE] Support /usr/lib/pam.d/
Product:	[Fedora] Fedora	Reporter:	Jóhann B. Guðmundsson <johannbg>
Component:	pam	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	rawhide	CC:	tmraz
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-07-15 11:50:35 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jóhann B. Guðmundsson 2015-02-26 13:13:04 UTC

Description of problem:

PAM need to gain support for /usr/lib/pam.d/ which would contain built-in defaults or static vendor-supplied configuration files, for pam to support booting with empty /etc . 

Administrators should be able to override and or add additional local configuration files in /etc 

You can see a bit more about this here [1]  

1. http://0pointer.net/blog/revisiting-how-we-put-together-linux-systems.html

Comment 1 Tomas Mraz 2015-07-15 11:50:35 UTC

The support for the /usr/lib/pam.d is in rawhide. The migration of the configuration files there is another thing and I am not currently persuaded it is a right thing to do just now.

Comment 2 Jóhann B. Guðmundsson 2015-07-15 12:16:57 UTC

What's the issues you have against it?

Comment 3 Tomas Mraz 2015-07-15 12:20:09 UTC

For example there is no support for individual module configuration files in /usr/lib so you would still have things in /etc/security.