---
name: "pam_deny"
section: "8"
platform: "linux"
package: "pam"
version: "1.7.3-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux", "freebsd"]
url: "https://new.carta.tech/pam_deny"
---

# pam\_deny(8)

The locking-out PAM module

## NAME

pam\_deny - The locking-out PAM module

## SYNOPSIS

**pam\_deny.so**

## DESCRIPTION

This module can be used to deny access. It always indicates a failure to the application through the PAM framework. It might be suitable for using for default (the *OTHER*) entries.

## OPTIONS

This module does not recognise any options.

## MODULE TYPES PROVIDED

All module types (**account**, **auth**, **password** and **session**) are provided.

## RETURN VALUES

PAM\_AUTH\_ERR

This is returned by the account and auth services.

PAM\_CRED\_ERR

This is returned by the setcred function.

PAM\_AUTHTOK\_ERR

This is returned by the password service.

PAM\_SESSION\_ERR

This is returned by the session service.

## EXAMPLES

```
#%PAM-1.0
#
# If we don't have config entries for a service, the
# OTHER entries are used. To be secure, warn and deny
# access to everything.
other auth     required       pam_warn.so
other auth     required       pam_deny.so
other account  required       pam_warn.so
other account  required       pam_deny.so
other password required       pam_warn.so
other password required       pam_deny.so
other session  required       pam_warn.so
other session  required       pam_deny.so
```

## SEE ALSO

[**pam.conf**(5)](/pam.conf/5.md), [**pam.d**(5)](/pam.d/5.md), [**pam**(8)](/pam/8.md)

## AUTHOR

pam\_deny was written by Andrew G. Morgan \<morgan@kernel.org\>