Protect Physical Console Access

$ sudo yum install screen

$ screen

ctrl+a x

$ sudo yum install opensc

$ sudo yum install pcsc-lite

$ sudo yum install pam_pkcs11

$ sudo systemctl enable pcscd.service

app default {
   ...
   card_drivers = ;
}

$ sudo pkcs11-switch opensc

# force_card_driver = customcos;

force_card_driver = ;

• https://docs.oracle.com/en/operating-systems/oracle-linux/7/userauth/userauth-AuthenticationConfiguration.html#ol7-s4-auth

cert_policy = ca, ocsp_on, signature;