Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-13 07:51:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

increase priority of pam wheel so it is checked even before faillock

Browse Source 
in case of attemtping to use `su` without being a member of the required group `sudo`, it's useful to abort the PAM stack as early as possible to avoid needlessly propmting for a password to later
be rejected tu to lack of group membership
This commit is contained in:
Patrick Schleizer 2025-01-06 05:29:40 -05:00
parent d4767b7520
commit 6e0787957b
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
usr/share/pam-configs/wheel-security-misc
View File

@ -1,6 +1,6 @@
Name: group sudo membership required to use su (by package security-misc)
Default: yes
Priority: 280
Priority: 1050
Auth-Type: Primary
Auth:
[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_only_if_su