96cf4771d1
Move the rootauth group line before the wheel check, so that rootauth users are not required to be in wheel [still commented out]
20 lines
561 B
Plaintext
20 lines
561 B
Plaintext
# $NetBSD: su,v 1.6 2005/04/05 18:23:36 christos Exp $
|
|
#
|
|
# PAM configuration for the "su" service
|
|
#
|
|
|
|
# auth
|
|
auth sufficient pam_rootok.so no_warn
|
|
auth sufficient pam_self.so no_warn
|
|
auth sufficient pam_ksu.so no_warn try_first_pass
|
|
#auth sufficient pam_group.so no_warn group=rootauth root_only authenticate
|
|
auth requisite pam_group.so no_warn group=wheel root_only fail_safe
|
|
auth required pam_unix.so no_warn try_first_pass nullok
|
|
|
|
# account
|
|
account required pam_login_access.so
|
|
account include system
|
|
|
|
# session
|
|
session required pam_permit.so
|