Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

PR/29891: Arto Selonen: su(1) does not seem to honor SU_ROOTAUTH any more

Browse Source 
Move the rootauth group line before the wheel check, so that rootauth users
are not required to be in wheel [still commented out]
This commit is contained in:
christos 2005-04-05 18:23:36 +00:00
parent f8fbfd229c
commit 96cf4771d1
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/pam.d/su
View File

@ -1,4 +1,4 @@
# $NetBSD: su,v 1.5 2005/03/01 16:28:46 christos Exp $ # $NetBSD: su,v 1.6 2005/04/05 18:23:36 christos Exp $
# #
# PAM configuration for the "su" service # PAM configuration for the "su" service
# #
@ -7,8 +7,8 @@
auth sufficient pam_rootok.so no_warn auth sufficient pam_rootok.so no_warn
auth sufficient pam_self.so no_warn auth sufficient pam_self.so no_warn
auth sufficient pam_ksu.so no_warn try_first_pass auth sufficient pam_ksu.so no_warn try_first_pass
#auth sufficient pam_group.so no_warn group=rootauth root_only authenticate
auth requisite pam_group.so no_warn group=wheel root_only fail_safe auth requisite pam_group.so no_warn group=wheel root_only fail_safe
#auth sufficient pam_group.so no_warn group=rootauth root_only fail_safe authenticate
auth required pam_unix.so no_warn try_first_pass nullok auth required pam_unix.so no_warn try_first_pass nullok
# account # account