GitHub - nuvious/pam-duress: A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensitive network connections, etc if a user is coerced into giving a threat actor a password.
github.com
A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensit...
    • wewbull@feddit.ukEnglish
      161·
      2 months ago

      It’s a few hundred lines of C across 7-8 files. It checks the password hash against a set of predefined ones and then calls a script if it matches.

      It doesn’t need a lot of maintaining.