comment

Kicksecure · Nov 5, 2020 · 7952139 · 7952139
1 parent bb72c12
commit 7952139
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/usr/lib/security-misc/pam-abort-on-locked-password b/usr/lib/security-misc/pam-abort-on-locked-password
@@ -3,6 +3,10 @@
 ## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
 ## See the file COPYING for copying conditions.
 
+## This is only a usability feature to avoid needlessly bumping pam_tally2
+## counter. This is not a security feature.
+## https://forums.whonix.org/t/restrict-root-access/7658/1
+
 if ! passwd_output="$(passwd -S "$PAM_USER" 2>/dev/null)" ; then
    echo "$0: ERROR: user \"$PAM_USER\" does not exist." >&2
    exit 1