“Today we’ll check the PAM framework, harden the basic services
that we expect to authenticate to, and look at new PAM modules that
might make our systems more secure…“First make sure that /etc/pam.conf doesn’t exist unless this is
an old system running an older version of PAM.“Next, make sure that /etc/pam.d exists, and contains PAM
configuration files…”
Related Story:
NewsForge:
Hardening Linux Authentication and User Identity(Sep 24,
2004)