[Pkg-shadow-commits] r566 - in trunk: . debian

[Alexander Gattin]

Author: xrgtn-guest
Date: 2005-10-05 14:57:19 +0000 (Wed, 05 Oct 2005)
New Revision: 566

Modified:
   trunk/TODO
   trunk/debian/passwd.chfn.pam
   trunk/debian/passwd.chsh.pam
Log:
Tomasz performed pam-ification of chfn and chsh, so we have to update
corresponding pam.d files (to allow root using the tools without entering
her password).


Modified: trunk/TODO
===================================================================
--- trunk/TODO	2005-10-04 20:56:29 UTC (rev 565)
+++ trunk/TODO	2005-10-05 14:57:19 UTC (rev 566)
@@ -30,9 +30,8 @@
 Other points (not related to the release of a syncronized shadow):
  * su concatenation of arguments anouncement on debian-devel
  * compare the source with the usages and man pages
- * perform pam-ification of chsh/chfn, update theirs pam.d files and possibly
-   add to theirs manpages a sentence about authentication required for ordinary
-   users
+   + probably add a sentence to chsh/chfn's manpages about authentication
+     required for ordinary users
  * do something (a tool) for the variables in login.defs
    In Debian, some tools are not compiled with the PAM support, so upstream
    getdef.c won't be OK.

Modified: trunk/debian/passwd.chfn.pam
===================================================================
--- trunk/debian/passwd.chfn.pam	2005-10-04 20:56:29 UTC (rev 565)
+++ trunk/debian/passwd.chfn.pam	2005-10-05 14:57:19 UTC (rev 566)
@@ -2,6 +2,10 @@
 # The PAM configuration file for the Shadow `chfn' service
 #
 
+# This allows root to change user infomation without being
+# prompted for a password
+auth		sufficient	pam_rootok.so
+
 # The standard Unix authentication modules, used with
 # NIS (man nsswitch) as well as normal /etc/passwd and
 # /etc/shadow entries.

Modified: trunk/debian/passwd.chsh.pam
===================================================================
--- trunk/debian/passwd.chsh.pam	2005-10-04 20:56:29 UTC (rev 565)
+++ trunk/debian/passwd.chsh.pam	2005-10-05 14:57:19 UTC (rev 566)
@@ -7,6 +7,10 @@
 # accounts with special shells from changing them.
 auth       required   pam_shells.so
 
+# This allows root to change user shell without being
+# prompted for a password
+auth		sufficient	pam_rootok.so
+
 # The standard Unix authentication modules, used with
 # NIS (man nsswitch) as well as normal /etc/passwd and
 # /etc/shadow entries.