Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-03-13 03:16:28 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix: apply PAM wheal only to su PAM service

Browse Source
This commit is contained in:
Patrick Schleizer 2025-01-06 04:24:44 -05:00
parent 40b23cfad4
commit d4767b7520
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
usr/libexec/security-misc/pam_only_if_su Executable file
View File

@ -0,0 +1,17 @@
#!/bin/bash
## Copyright (C) 2019 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## Similar to:
## /usr/libexec/security-misc/pam_only_if_login
set -x
true "PAM_SERVICE: $PAM_SERVICE"
if [ "$PAM_SERVICE" = "su" ]; then
exit 1
else
exit 0
fi

1
usr/share/pam-configs/wheel-security-misc
View File

@ -3,4 +3,5 @@ Default: yes
Priority: 280 Priority: 280
Auth-Type: Primary Auth-Type: Primary
Auth: Auth:
[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_only_if_su
requisite pam_wheel.so group=sudo debug requisite pam_wheel.so group=sudo debug