xref: /netbsd-src/etc/pam.d/su.in (revision 000a9a1b5ac559b46dfb6a3b28e0423603680f79)
1# $NetBSD: su.in,v 1.1 2024/12/30 21:59:08 jmmv Exp $
2#
3# PAM configuration for the "su" service
4#
5
6# auth
7auth		sufficient	pam_rootok.so		no_warn
8auth		sufficient	pam_self.so		no_warn
9auth		sufficient	pam_skey.so		no_warn try_first_pass
10#auth		sufficient	pam_u2f.so		authfile=/etc/u2f_mappings cue
11#auth		sufficient	pam_ksu.so		no_warn try_first_pass
12#auth		sufficient	pam_group.so		no_warn group=rootauth root_only authenticate
13auth		requisite	pam_group.so		no_warn group=wheel root_only fail_safe
14auth		required	pam_unix.so		no_warn try_first_pass nullok
15
16# account
17account		required	pam_login_access.so
18account		include		system
19
20# session
21session		required	pam_permit.so
22