search

google / google-authenticator-libpam

Apache License 2.0
1.75k stars 280 forks source link

Does.google_authenticator have to be writable？ #233

Closed guchunqi-git closed 1 year ago

guchunqi-git commented 1 year ago

If you want to use google_authenticator in a read-only file system, can you use.google_authenticator if the file is not writable?

ThomasHabets commented 1 year ago

It's a really bad idea.

These are one-time codes. If you allow login without being able to update the config, codes can be replayed.

Please read the README for how.