security-misc/usr/share/pam-configs/wheel-security-misc

Name: group sudo membership required to use su (by package security-misc)
Default: yes
Priority: 1050
Auth-Type: Primary
Auth:
	[success=1 default=ignore]	pam_exec.so	seteuid quiet /usr/libexec/security-misc/pam_only_if_su
	requisite	pam_wheel.so group=sudo debug
split usr/share/pam-configs/security-misc into usr/share/pam-configs/tally2-security-misc usr/share/pam-configs/wheel-security-misc 2019-08-01 11:04:22 +00:00			`Name: group sudo membership required to use su (by package security-misc)`
			`Default: yes`
increase priority of pam wheel so it is checked even before faillock in case of attemtping to use `su` without being a member of the required group `sudo`, it's useful to abort the PAM stack as early as possible to avoid needlessly propmting for a password to later be rejected tu to lack of group membership 2025-01-06 05:29:40 -05:00			`Priority: 1050`
split usr/share/pam-configs/security-misc into usr/share/pam-configs/tally2-security-misc usr/share/pam-configs/wheel-security-misc 2019-08-01 11:04:22 +00:00			`Auth-Type: Primary`
			`Auth:`
fix: apply PAM wheal only to `su` PAM service 2025-01-06 04:24:44 -05:00			`[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_only_if_su`
use requisite rather than required to avoid asking for password needlessly if login will fail anyhow 2019-08-15 07:30:56 +00:00			`requisite pam_wheel.so group=sudo debug`