[Pkg-shadow-commits] r555 - trunk/debian

[Nicolas FRANCOIS]

Author: nekral-guest
Date: 2005-09-30 21:48:41 +0000 (Fri, 30 Sep 2005)
New Revision: 555

Modified:
   trunk/debian/changelog
   trunk/debian/login.su.pam
Log:
pam_wheel example moved after pam_rootok in config.
Also documents that with 'pam_wheel.so group=foo', root may need to
be in the foo group.
Fixes 330630, 330855.


Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2005-09-30 18:56:34 UTC (rev 554)
+++ trunk/debian/changelog	2005-09-30 21:48:41 UTC (rev 555)
@@ -1,3 +1,14 @@
+shadow (1:4.0.12-7) UNRELEASED; urgency=low
+
+  * The "Maroilles" release
+  * Debian packaging fixes:
+    - debian/login.su.pam:
+      pam_wheel example moved after pam_rootok in config.
+      Also documents that with 'pam_wheel.so group=foo', root may need to
+      be in the foo group. Closes: #330630, #330855
+
+ -- Christian Perrier <bubulle at debian.org>  Wed, 28 Sep 2005 19:59:31 +0200
+
 shadow (1:4.0.12-6) unstable; urgency=low
 
   * The "Reblochon" release

Modified: trunk/debian/login.su.pam
===================================================================
--- trunk/debian/login.su.pam	2005-09-30 18:56:34 UTC (rev 554)
+++ trunk/debian/login.su.pam	2005-09-30 21:48:41 UTC (rev 555)
@@ -2,10 +2,14 @@
 # The PAM configuration file for the Shadow `su' service
 #
 
+# This allows root to su without passwords (normal operation)
+auth       sufficient pam_rootok.so
+
 # Uncomment this to force users to be a member of group root
 # before they can use `su'. You can also add "group=foo" to
 # to the end of this line if you want to use a group other
-# than the default "root".
+# than the default "root" (you may want to add root to this
+# group if you don't use the pam_rootok module earlier).
 # (Replaces the `SU_WHEEL_ONLY' option from login.defs)
 # auth       required   pam_wheel.so
 
@@ -17,9 +21,6 @@
 # be allowed to use su at all.
 # auth       required   pam_wheel.so deny group=nosu
 
-# This allows root to su without passwords (normal operation)
-auth       sufficient pam_rootok.so
-
 # Uncomment and edit /etc/security/time.conf if you need to set
 # time restrainst on su usage.
 # (Replaces the `PORTTIME_CHECKS_ENAB' option from login.defs