[openssh] Add pam_reauthorize.so to sshd.pam (#1115977)
plautrba
plautrba at fedoraproject.org
Tue Jul 8 10:56:12 UTC 2014
commit 26621fa3b893253370f8885e6f7a08c10a1220ac
Author: Stef Walter <stefw at redhat.com>
Date: Thu Jul 3 13:58:57 2014 +0200
Add pam_reauthorize.so to sshd.pam (#1115977)
sshd.pam | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
---
diff --git a/sshd.pam b/sshd.pam
index a80e450..d943434 100644
--- a/sshd.pam
+++ b/sshd.pam
@@ -2,6 +2,8 @@
auth required pam_sepermit.so
auth substack password-auth
auth include postlogin
+# Used with polkit to reauthorize users in remote sessions
+-auth optional pam_reauthorize.so prepare
account required pam_nologin.so
account include password-auth
password include password-auth
@@ -13,3 +15,5 @@ session required pam_selinux.so open env_params
session optional pam_keyinit.so force revoke
session include password-auth
session include postlogin
+# Used with polkit to reauthorize users in remote sessions
+-session optional pam_reauthorize.so prepare
More information about the scm-commits
mailing list