[Lunar-commits] <moonbase-core> shadow: Changed pam file for su not to include system-auth

Stefan Wold ratler at lunar-linux.org
Tue Jan 1 12:57:52 CET 2013


commit fd2251b8b30db13f8f0320f6c4920a855257afcb
Author: Stefan Wold <ratler at lunar-linux.org>
Date: Tue, 01 Jan 2013 03:57:52 -0800
URL: https://github.com/lunar-linux/moonbase-core/commit/fd2251b8b30db13f8f0320f6c4920a855257afcb

shadow: Changed pam file for su not to include system-auth

Due to session/seat issues using su with pam_systemd.so that part
was removed.
---
  security/shadow/DETAILS  | +1/-1     
  security/shadow/pam.d/su | +11/-10   
  2 files changed, 12 insertions(+), 11 deletions(-)

--- a/security/shadow/DETAILS
+++ b/security/shadow/DETAILS
@@ -6,7 +6,7 @@
         WEB_SITE=http://packages.qa.debian.org/s/shadow.html
       MAINTAINER=ratler at lunar-linux.org
          ENTERED=20010922
-         UPDATED=20110701
+         UPDATED=20130101
            SHORT="Contains the shadow password file utilities"
 PSAFE=no
 
--- a/security/shadow/pam.d/su
+++ b/security/shadow/pam.d/su
@@ -1,13 +1,14 @@
 #%PAM-1.0
-auth		sufficient	pam_rootok.so
+auth      sufficient  pam_rootok.so
 # Uncomment the following line to implicitly trust users in the "wheel" group.
-#auth		sufficient	pam_wheel.so trust use_uid
+#auth     sufficient  pam_wheel.so trust use_uid
 # Uncomment the following line to require a user to be in the "wheel" group.
-#auth		required	pam_wheel.so use_uid
-auth		include		system-auth
-account		sufficient	pam_succeed_if.so uid = 0 use_uid quiet
-account		include		system-auth
-password	include		system-auth
-session		include		system-auth
-session		optional	pam_xauth.so
-
+#auth     required    pam_wheel.so use_uid
+auth      include     system-auth
+account   sufficient  pam_succeed_if.so uid = 0 use_uid quiet
+account   include     system-auth
+password  include     system-auth
+session   optional    pam_keyinit.so revoke
+session   required    pam_limits.so
+session   required    pam_unix.so
+session   optional    pam_xauth.so




More information about the Lunar-commits mailing list