On Fri, Mar 4, 2016 at 4:02 AM, Dag-Erling Smørgrav <des@xxxxxx> wrote: > Lesley Kimmel <lesley.j.kimmel@xxxxxxxxx> writes: >> So I probably shouldn't have said "arbitrary" script. What I really >> want to do is to present a terms of service notice (/etc/issue). But I >> also want to get the user to actually confirm (by typing 'y') that >> they accept. If they try to exit or type anything other than 'y' they >> will be denied access. > > It is relatively trivial to write a PAM module to do that. > > DES > -- > Dag-Erling Smørgrav - des@xxxxxx Which will have the relevant configuration overwritten and disabled the next time you run "authconfig" on Red Hat based sysems. I'm not sure if this occurs with other systems, but tuning PAM is like tuning SELinux: it's a lot of extra work with little return-on-investment, and in this case for a change that will irritate *every single user* and break a number of API's. I can't recommend this approach. _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
