<html><body><div><span><span class="body-text-content">Šimon</span></span>'s suggestion was not posted to the list.<br></div><div>Long story short, he suggested I contact the software vendor - in this case Red Hat.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Again, thank you all for your thoughts.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>On May 31, 2018, at 06:42 AM, Dan White <d_e_white@icloud.com> wrote:<br><div><blockquote type="cite"><div class="msg-quote"><div>Trimmed for readability<br></div><div><br>On May 31, 2018, at 04:01 AM, Pavel Březina <pbrezina@redhat.com> wrote:<br><div><blockquote type="cite"><div class="msg-quote"><div class="_stretch"><span class="body-text-content">On 05/30/2018 06:44 PM, Dan White wrote:<br><br class="quoted-plain-text">There are several pam stacks managed by authconfig:<br>- password-auth<br>- system-auth<br>- smartcard-auth<br>- fingerprint-auth<br>- postlogin<br><br>These files are just symlinks to $name-ac files that are written by <br>authconfig. If you need to do any changes that should persist, remove <br>the symlink and than edit the file without -ac suffix. Of course this <br>means that you stop using authconfig, but that is alright for most cases <br>as you need to configure it only once.<br><br><blockquote type="cite" class="quoted-plain-text">That is the whole point of the query.</blockquote><blockquote type="cite" class="quoted-plain-text"><br></blockquote><blockquote type="cite" class="quoted-plain-text">This is for security hardening.</blockquote><blockquote type="cite" class="quoted-plain-text">Authconfig removes stuff that needs to stay in.</blockquote><blockquote type="cite" class="quoted-plain-text">I am suggesting updates for authconfig to provide the required settings</blockquote><blockquote type="cite" class="quoted-plain-text">it currently removes.</blockquote></span></div></div></blockquote></div><div><span><br></span></div><div><span>Not using authconfig would make following many Red Hat documents difficult<br></span></div><div><span><span class="body-text-content">Šimon</span> made a suggestion I plan to follow.<br></span></div><div><span><br></span></div><div><span>Thanks for sharing your time and thoughts.</span></div></div></div></blockquote></div><div><span><br data-mce-bogus="1"></span></div><div><span><div class="x-apple-signature">Dan White | d_e_white@icloud.com<br>------------------------------------------------<br>“Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” (Bill Waterson: Calvin & Hobbes)</div><div><br data-mce-bogus="1"></div> </span></div></div></body></html>