Replies: 2 comments
-
|
su(1) itself has no clue about this stuff. It's completely hidden on the PAM playground. So, if you don't like PAM configuration, then change it :) You can also try to use |
Beta Was this translation helpful? Give feedback.
-
|
@karelzak thank you, but if I remove So I think that code changes would be needed in |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Hello! Suppose that I add this line in /etc/pam.d/common-auth:
And this line in /etc/security/group.conf
With these, there's a problem in
suthat's not present insudo, and I was wondering if there's a solution:I.e. the problem is that su doesn't apply the correct groups to the user.
This happens because of the following lines at the top of /etc/pam.d/su:
# This allows root to su without passwords (normal operation) auth sufficient pam_rootok.soAFAIK the
sufficientflag prohibits all further processing of the entries in /etc/pam.d/su, like the ones in@include common-auth.Is there any way to avoid this issue which exists in su but not in sudo?
Beta Was this translation helpful? Give feedback.
All reactions