# $NetBSD: su,v 1.3 2005/02/01 22:56:14 christos Exp $
# $FreeBSD: src/etc/pam.d/su,v 1.16 2003/07/09 18:40:49 des Exp $
#
# PAM configuration for the "su" service
#

# auth
auth		sufficient	pam_rootok.so		no_warn
auth		sufficient	pam_self.so		no_warn
auth		requisite	pam_group.so		no_warn group=wheel root_only fail_safe
#auth		sufficient	pam_group.so		no_warn group=rootauth root_only fail_safe authenticate
auth		include		system

# account
account		include		system

# session
session		required	pam_permit.so