From 2f276cdb10aedf0d30c01d25e50b17cac7d1c62c Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Mon, 15 Jul 2019 08:44:28 -0400 Subject: [PATCH] set back to default group "root" rather than group "sudo" membership required to use su since root login will be locked by default anyhow Thanks to @madaidan for providing the rationale! https://forums.whonix.org/t/restrict-root-access/7658/42 --- usr/share/pam-configs/wheel | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr/share/pam-configs/wheel b/usr/share/pam-configs/wheel index 2c9c760..817407b 100644 --- a/usr/share/pam-configs/wheel +++ b/usr/share/pam-configs/wheel @@ -1,6 +1,6 @@ -Name: group sudo membership required to use su (by package security-misc) +Name: group root membership required to use su (by package security-misc) Default: yes Priority: 260 Auth-Type: Primary Auth: - required pam_wheel.so debug group=sudo + required pam_wheel.so debug