###############################################################################
# Pluggable Authentication Module settings:

# NB: The only busybox-1.10 module with PAM support is login.

# service_name
#	module_type
#		control_flag
#				module_path
#						options

###############################################################################
# Login application settings:

# Authenticate the user, use shadow & nologin files, allow empty passwords,
# Root only allowed on the console serial port:

auth	required	pam_securetty.so
auth	required	pam_unix.so	shadow nullok
auth	required	pam_nologin.so
# JITC req's a failed login delay, and SSH doesn't use BB login which has this.
# Unfortunately telnet does, which means it'll get 2x the delay this way.
auth	required	pam_faildelay.so	delay=4000000

# Ensure user's account and password are still active:

account	required	pam_unix.so

# Change the user's password, allow changing from empty passwords:

password required	pam_unix.so	shadow nullok

# Log the user's session info:

session	required	pam_unix.so
