pam_group
PAM module for group access based on login context
TLDR
SYNOPSIS
pam_group.so
DESCRIPTION
pam_group is a PAM module that grants supplementary group memberships during the credential setting phase of authentication. It does not authenticate the user. Memberships are granted based on the service being accessed, the terminal, the user, and the time of login, as configured in /etc/security/group.conf. Groups are added in addition to those in /etc/group.
PARAMETERS
Configuration in /etc/security/group.conf:Format: services ; ttys ; users ; times ; groupsThis module does not accept any options.
CAVEATS
Only the auth module type is provided. Requires /etc/security/group.conf to be configured. Once granted group membership, a user could attempt to create a setgid binary; mount filesystems with the nosuid option to mitigate this.
SEE ALSO
group.conf(5), pam(8), pam.d(5), pam_time(8), pam_unix(8)
