Which of the following PAM modules allows the system administrator to use an arbitrary file containing a list of user and group names with restrictions on the system resources available to them?
A. pam_filter
B. pam_limits
C. pam_listfile
D. pam_unix
|
Download Printable PDF. VALID exam to help you PASS. |
 |
A ver cavernicolas, buscán pam_limits y pam_listfile y sabréis la correcta, no confundamos al personal.
Vote for B – From man page: “The pam_limits PAM module sets limits on the system resources that can be obtained in a user-session.” and in man page of “limits.conf you’ll see there are options to limit CPU, Memory, Stack, Filesizes and more.
C is right
https://linux.die.net/man/8/pam_listfile
pam_listfile(8) – Linux man page
Name
pam_listfile – deny or allow services based on an arbitrary file
Synopsis
pam_listfile.so item=[tty|user|rhost|ruser|group|shell] sense=[allow|deny] file=/path/filename onerr=[succeed|fail] [apply=[user|@group]] [quiet]
Description
pam_listfile is a PAM module which provides a way to deny or allow services based on an arbitrary file.
The module gets the item of the type specified — user specifies the username, PAM_USER; tty specifies the name of the terminal over which the request has been made, PAM_TTY; rhost specifies the name of the remote host (if any) from which the request was made, PAM_RHOST; and ruser specifies the name of the remote user (if available) who made the request, PAM_RUSER — and looks for an instance of that item in the file=filename. filename contains one line per item listed. If the item is found, then if sense=allow, PAM_SUCCESS is returned, causing the authorization request to succeed; else if sense=deny, PAM_AUTH_ERR is returned, causing the authorization request to fail.
If an error is encountered (for instance, if filename does not exist, or a poorly-constructed argument is encountered), then if onerr=succeed, PAM_SUCCESS is returned, otherwise if onerr=fail, PAM_AUTH_ERR or PAM_SERVICE_ERR (as appropriate) will be returned.
An additional argument, apply=, can be used to restrict the application of the above to a specific user (apply=username) or a given group (apply=@groupname). This added restriction is only meaningful when used with the tty, rhost and shell items.
Besides this last one, all arguments should be specified; do not count on any default behavior.
No credentials are awarded by this module.
yes c is right!
Thanks the correct answer is C.
C is the correct Answer!
See: https://linux.die.net/man/8/pam_listfile