[PATCH 0/2] increasing delays after invalid login attempts (no PAM)

Hemmo Nieminen hemmo.nieminen at iki.fi
Wed Apr 14 11:18:58 UTC 2021


Hello,

In our project some delays after invalid login attempts were requested
and while PAM would already have supported that we didn't really want to
take PAM into use.

This is my attempt to implement that without using PAM. A file under /tmp
is used to store a counter that will be used as a multiplier for the
amount of time we wait after invalid login attempts.


Hemmo Nieminen (2):
  libbb: add support for tallying with files
  login: improve login delays after invalid attempts

 include/libbb.h      |  12 +-
 libbb/Config.src     |   6 +
 libbb/Kbuild.src     |   1 +
 libbb/bb_do_delay.c  |  32 ++-
 libbb/bb_tally.c     | 471 +++++++++++++++++++++++++++++++++++++++++++
 loginutils/login.c   |   5 +-
 loginutils/passwd.c  |   2 +-
 loginutils/su.c      |   2 +-
 loginutils/sulogin.c |   2 +-
 loginutils/vlock.c   |   2 +-
 10 files changed, 518 insertions(+), 17 deletions(-)
 create mode 100644 libbb/bb_tally.c

-- 
2.30.2



More information about the busybox mailing list