security-misc/usr/share/pam-configs/wheel-security-misc

Name: group sudo membership required to use su (by package security-misc)
Default: yes
Priority: 280
Auth-Type: Primary
Auth:
	[success=1 default=ignore]	pam_exec.so	seteuid quiet /usr/libexec/security-misc/pam_only_if_su
	requisite	pam_wheel.so group=sudo debug
split usr/share/pam-configs/security-misc into usr/share/pam-configs/tally2-security-misc usr/share/pam-configs/wheel-security-misc 2019-08-01 18:04:22 +07:00			`Name: group sudo membership required to use su (by package security-misc)`
			`Default: yes`
PAM: abort on locked password to avoid needlessly bumping pam_tally2 counter https://forums.whonix.org/t/restrict-root-access/7658/1 2019-08-17 17:33:47 +07:00			`Priority: 280`
split usr/share/pam-configs/security-misc into usr/share/pam-configs/tally2-security-misc usr/share/pam-configs/wheel-security-misc 2019-08-01 18:04:22 +07:00			`Auth-Type: Primary`
			`Auth:`
fix: apply PAM wheal only to `su` PAM service 2025-01-06 16:24:44 +07:00			`[success=1 default=ignore] pam_exec.so seteuid quiet /usr/libexec/security-misc/pam_only_if_su`
use requisite rather than required to avoid asking for password needlessly if login will fail anyhow 2019-08-15 14:30:56 +07:00			`requisite pam_wheel.so group=sudo debug`