6.30. pam_shells - check for valid login shell
Prev | Chapter 6. A reference guide for available modules | Next

## 6.30. pam_shells - check for valid login shell

`pam_shells.so`

### 6.30.1. DESCRIPTION

pam_shells is a PAM module that only allows access to the system if the users shell is listed in `/etc/shells`.

It also checks if `/etc/shells` is a plain file and not world writable.

### 6.30.2. OPTIONS

This module does not recognise any options.

### 6.30.3. MODULE TYPES PROVIDED

The `auth` and `account` module types are provided.

### 6.30.4. RETURN VALUES

PAM_AUTH_ERR

  Access to the system was denied.

PAM_SUCCESS

  The users login shell was listed as valid shell in `/etc/shells`.

PAM_SERVICE_ERR

  The module was not able to get the name of the user.

### 6.30.5. EXAMPLES

    auth  required  pam_shells.so

### 6.30.6. AUTHOR

pam_shells was written by Erik Troan <ewt@redhat.com>.

Prev | Up | Next
6.29. pam_selinux - set the default security context | Home | 6.31. pam_succeed_if - test account characteristics