diff --git a/docs/command-line_tools/README.md b/docs/command-line_tools/README.md index 458f19af4..2885fdba6 100644 --- a/docs/command-line_tools/README.md +++ b/docs/command-line_tools/README.md @@ -3134,11 +3134,15 @@ Fails if CageFS is not enabled for suphp binary. #### check-usepam -Checks UsePAM in `/etc/ssh/sshd_config`. +Checks usepam setting in `sshd -T` output. -Checking if `/etc/ssh/sshd_config` config file contains `UsePAM yes` line, which is required for pam_lve correct work with sshd. +Checking if `sshd -T` output contains `usepam yes` line, which is required for pam_lve correct work with sshd. -Fails if `/etc/ssh/sshd_config` contains `UsePAM no` line. +Fails if `sshd -T` output contains `usepam no`. You could specify `UsePAM yes` in `/etc/ssh/sshd_config` + +::: tip Note +Cldiag checks `sshd -T` output in **lve-utils >= 6.4.8**. Lower versions check whether `/etc/ssh/sshd_config` file contains `UsePAM yes` line. +::: #### check-symlinkowngid