[Lunar-commits] <moonbase-core> shadow: Changed pam file for su not to include system-auth
Stefan Wold
ratler at lunar-linux.org
Tue Jan 1 12:57:52 CET 2013
commit fd2251b8b30db13f8f0320f6c4920a855257afcb
Author: Stefan Wold <ratler at lunar-linux.org>
Date: Tue, 01 Jan 2013 03:57:52 -0800
URL: https://github.com/lunar-linux/moonbase-core/commit/fd2251b8b30db13f8f0320f6c4920a855257afcb
shadow: Changed pam file for su not to include system-auth
Due to session/seat issues using su with pam_systemd.so that part
was removed.
---
security/shadow/DETAILS | +1/-1
security/shadow/pam.d/su | +11/-10
2 files changed, 12 insertions(+), 11 deletions(-)
--- a/security/shadow/DETAILS
+++ b/security/shadow/DETAILS
@@ -6,7 +6,7 @@
WEB_SITE=http://packages.qa.debian.org/s/shadow.html
MAINTAINER=ratler at lunar-linux.org
ENTERED=20010922
- UPDATED=20110701
+ UPDATED=20130101
SHORT="Contains the shadow password file utilities"
PSAFE=no
--- a/security/shadow/pam.d/su
+++ b/security/shadow/pam.d/su
@@ -1,13 +1,14 @@
#%PAM-1.0
-auth sufficient pam_rootok.so
+auth sufficient pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
-#auth sufficient pam_wheel.so trust use_uid
+#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
-#auth required pam_wheel.so use_uid
-auth include system-auth
-account sufficient pam_succeed_if.so uid = 0 use_uid quiet
-account include system-auth
-password include system-auth
-session include system-auth
-session optional pam_xauth.so
-
+#auth required pam_wheel.so use_uid
+auth include system-auth
+account sufficient pam_succeed_if.so uid = 0 use_uid quiet
+account include system-auth
+password include system-auth
+session optional pam_keyinit.so revoke
+session required pam_limits.so
+session required pam_unix.so
+session optional pam_xauth.so
More information about the Lunar-commits
mailing list