6.29. pam_shells - check for valid login shell
Prev | Chapter 6. A reference guide for available modules | Next

## 6.29. pam_shells - check for valid login shell

`pam_shells.so`

### 6.29.1. DESCRIPTION

pam_shells is a PAM module that only allows access to the system if the user's shell is listed in `/etc/shells`.

It also checks if `/etc/shells` is a plain file and not world writable.

### 6.29.2. OPTIONS

This module does not recognise any options.

### 6.29.3. MODULE TYPES PROVIDED

The `auth` and `account` module types are provided.

### 6.29.4. RETURN VALUES

PAM_AUTH_ERR

  Access to the system was denied.

PAM_SUCCESS

  The user's login shell was listed as valid shell in `/etc/shells`.

PAM_SERVICE_ERR

  The module was not able to get the name of the user.

### 6.29.5. EXAMPLES

    auth  required  pam_shells.so

### 6.29.6. AUTHOR

pam_shells was written by Erik Troan <ewt@redhat.com>.

Prev | Up | Next
6.28. pam_selinux - set the default security context | Home | 6.30. pam_succeed_if - test account characteristics