PAM

Question 1

PAM config files

Answer 1

/etc/pam.d/

Question 2

Docs for PAM

Answer 2

/usr/share/pam-x.x.x/txt

Question 3

Create an account lockout policy with PAM

Answer 3

vim /etc/pam.d/password-auth
/etc/pam.d/system-auth
add second line:
auth required pam_faillock.so preauth silent audit deny=3 unlock_time=600

add first line into account section:
account required pam_failock.so

add second line into password section:
password required pam_pwhistory.so remember=30 use_authok

Question 4

Sections in PAM

Answer 4

auth
account
password
session

Question 5

Control flags

Answer 5

Optional -result is ignored

Required -result required to continue (to obfuscate which module failed)

Requisite- required with notification (if it fails, it will kick you out of the process)

Sufficient- result is ignored on failure