blob: f0f833d8dd48186d3445ab146e425b5529aa8953 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
#
# $FreeBSD$
#
# PAM configuration for the "su" service
#
# auth
auth sufficient pam_rootok.so no_warn
auth sufficient pam_self.so no_warn
auth requisite pam_wheel.so no_warn auth_as_self noroot_ok
#auth sufficient pam_kerberosIV.so no_warn
#auth sufficient pam_krb5.so no_warn try_first_pass auth_as_self
auth sufficient pam_opie.so no_warn no_fake_prompts
auth requisite pam_opieaccess.so no_warn
#auth required pam_ssh.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass nullok
# account
#account required pam_kerberosIV.so
#account required pam_krb5.so
account required pam_unix.so
# session
#session required pam_kerberosIV.so
#session required pam_krb5.so
#session required pam_ssh.so
session required pam_unix.so
# password
password required pam_permit.so
# If you want a "WHEELSU"-type su(1), then comment out the
# above, and uncomment the entries below.
## auth
#auth sufficient pam_rootok.so no_warn
##auth sufficient pam_kerberosIV.so no_warn
##auth sufficient pam_krb5.so no_warn
#auth required pam_opie.so no_warn auth_as_self no_fake_prompts
#auth required pam_unix.so no_warn try_first_pass auth_as_self
## account
##account required pam_kerberosIV.so
##account required pam_krb5.so
#account required pam_unix.so
## session
##session required pam_kerberosIV.so
##session required pam_krb5.so
##session required pam_ssh.so
#session required pam_unix.so
## password
#password required pam_permit.so
|
