GitHub - nuvious/pam-duress: A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensitive network connections, etc if a user is coerced into giving a threat actor a password.
github.com
A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensit...
  • wewbull@feddit.ukEnglish
    161·
    2 months ago

    It’s a few hundred lines of C across 7-8 files. It checks the password hash against a set of predefined ones and then calls a script if it matches.

    It doesn’t need a lot of maintaining.