From 454e1358220abf75def0d88a22426086a55c0802 Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@riseup.net>
Date: Thu, 15 Aug 2019 07:33:41 +0000
Subject: [PATCH] pam_tally2.so even_deny_root

---
 usr/share/pam-configs/tally2-security-misc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/usr/share/pam-configs/tally2-security-misc b/usr/share/pam-configs/tally2-security-misc
index 11385c8..bfa0e6f 100644
--- a/usr/share/pam-configs/tally2-security-misc
+++ b/usr/share/pam-configs/tally2-security-misc
@@ -3,7 +3,7 @@ Default: yes
 Priority: 260
 Auth-Type: Primary
 Auth:
-	requisite	pam_tally2.so deny=100 onerr=fail audit debug
+	requisite	pam_tally2.so even_deny_root deny=100 onerr=fail audit debug
 Account-Type: Primary
 Account:
 	requisite	pam_tally2.so debug