finn/omarchy
1
0
Fork 0
mirror of https://github.com/basecamp/omarchy.git synced 2025-07-27 04:09:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

Increase pamlimit lockout

Browse Source
This commit is contained in:
David Heinemeier Hansson
2025-07-23 12:36:57 -04:00
parent c4c9cdc0f6
commit a12cd97922
2 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
install/4-config.sh
View File

@ -3,6 +3,9 @@
# Copy over Omarchy configs # Copy over Omarchy configs
cp -R ~/.local/share/omarchy/config/* ~/.config/ cp -R ~/.local/share/omarchy/config/* ~/.config/
# Use default bashrc from Omarchy
echo "source ~/.local/share/omarchy/default/bash/rc" >~/.bashrc
# Ensure application directory exists for update-desktop-database # Ensure application directory exists for update-desktop-database
mkdir -p ~/.local/share/applications mkdir -p ~/.local/share/applications
@ -13,8 +16,9 @@ sudo chmod 644 /etc/gnupg/dirmngr.conf
sudo gpgconf --kill dirmngr || true sudo gpgconf --kill dirmngr || true
sudo gpgconf --launch dirmngr || true sudo gpgconf --launch dirmngr || true
# Use default bashrc from Omarchy # Increase lockout limit to 10 and decrease timeout to 2 minutes
echo "source ~/.local/share/omarchy/default/bash/rc" >~/.bashrc sudo sed -i 's|^\(auth\s\+required\s\+pam_faillock.so\)\s\+preauth.*$|\1 preauth silent deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
sudo sed -i 's|^\(auth\s\+\[default=die\]\s\+pam_faillock.so\)\s\+authfail.*$|\1 authfail deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
# Set common git aliases # Set common git aliases
git config --global alias.co checkout git config --global alias.co checkout

6
migrations/1753286633.sh Normal file
View File

@ -0,0 +1,6 @@
echo "Increase lockout limit to 10, decrease timeout to 2 minutes"
if ! grep -q 'deny=10' /etc/pam.d/system-auth; then
sudo sed -i 's|^\(auth\s\+required\s\+pam_faillock.so\)\s\+preauth.*$|\1 preauth silent deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
sudo sed -i 's|^\(auth\s\+\[default=die\]\s\+pam_faillock.so\)\s\+authfail.*$|\1 authfail deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
fi