site  contact  subhomenews

Attempt to disable pam

October 06, 2024 — BarryK

I think that PAM is an acronym for "Permission Access Management". In QV, it has caused trouble, and we want to disable it.

QV has 'pam-libs', not 'pam-base' and 'pam' packages that are also in the Void repository.

I have put a hack into the 'init' script in the initrd:

#20240423 attempt disable pam, this will zeroize these files...
#for aF in /mnt/${WKG_DEV}/${QV}/etc/pam.d/*; do >$aF; done
#20241006 try this instead...
#for aF in /mnt/${WKG_DEV}/${QV}/etc/pam.d/*; echo 'skip-authentication' >$aF; done
#or, if delete /etc/pam.d then pam will read /etc/pam.conf instead...
rm -rf /mnt/${WKG_DEV}/${QV}/etc/pam.d 2>/dev/null
#have pre-created this in rootfs-skeleton...
#echo 'skip-authentication' > /mnt/${WKG_DEV}/${QV}/etc/pam.conf

...there was an earlier attempt, 20240423, deleting everything in /etc/pam.d

From online reading, file /etc/pam.conf is ignored if folder /etc/pam.d exists. So the hack now trying is to delete /etc/pam.d entirely, and just have a global "skip-authentication" line in /etc/pam.conf

Haven't tried it yet.   

Tags: quirky