969ec301d5
In Red Hat based distributions, there is no pam-configs like mechanism (authselect seems too heavy and is not configured by default), so instead, we replace the PAM file. Enable su for users in the qubes group, same as in the Debian package.
7 lines
208 B
Plaintext
7 lines
208 B
Plaintext
Name: allow su without password (by package qubes-core-agent-passwordless-root)
|
|
Default: yes
|
|
Priority: 258
|
|
Auth-Type: Primary
|
|
Auth:
|
|
sufficient pam_succeed_if.so use_uid user ingroup qubes service in su:su-l
|