commit c0e3a9f6690cfcefaa390a63c89cfa2f074287ad parent b785ec90e5ba76d857e208a7d5d46a1b1b87b83f Author: Nathan Holstein <nathan.holstein@gmail.com> Date: Thu, 6 Aug 2015 01:16:35 -0400 Add PAM service definition for doas. These are the same configuration in MacOSX's default service definition for sudo. Diffstat:
| M | Makefile | | | 4 | ++++ |
| M | libopenbsd/auth_userokay.c | | | 2 | +- |
| A | pam.d__doas | | | 5 | +++++ |
3 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/Makefile b/Makefile @@ -14,3 +14,7 @@ COPTS+= -Wall -Wextra -Werror -pedantic -std=c11 LDFLAGS+= -lpam include bsd.prog.mk + +/etc/pam.d/doas: pam.d__doas + cp $< $@ +install: /etc/pam.d/doas diff --git a/libopenbsd/auth_userokay.c b/libopenbsd/auth_userokay.c @@ -27,7 +27,7 @@ #include "openbsd.h" -#define PAM_SERVICE "sudo" +#define PAM_SERVICE "doas" #define __UNUSED __attribute__ ((unused)) diff --git a/pam.d__doas b/pam.d__doas @@ -0,0 +1,5 @@ +# sudo: auth account password session +auth required pam_opendirectory.so +account required pam_permit.so +password required pam_deny.so +session required pam_permit.so