diff options
| author | Michael Raskin <7c6f434c@mail.ru> | 2014-09-02 00:58:30 +0400 |
|---|---|---|
| committer | Michael Raskin <7c6f434c@mail.ru> | 2014-09-02 00:58:30 +0400 |
| commit | 419031bcfce177ea6142286d555499b6cd54d141 (patch) | |
| tree | f39d2a781ab33ac5fdaa3b762e95864d8e43a261 /nixos/modules/programs/shadow.nix | |
| parent | 292196630079f602613df2bf0d934c2242ef7314 (diff) | |
| parent | 1d5d7fdee2e85460e44b9931f3259254c2092806 (diff) | |
Merge pull request #2644 from lethalman/pam_tally
pam: Add logFailures option for adding pam_tally to su
Diffstat (limited to 'nixos/modules/programs/shadow.nix')
| -rw-r--r-- | nixos/modules/programs/shadow.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/programs/shadow.nix b/nixos/modules/programs/shadow.nix index 5a467e112c232..5c2ea07c5549b 100644 --- a/nixos/modules/programs/shadow.nix +++ b/nixos/modules/programs/shadow.nix @@ -83,7 +83,7 @@ in security.pam.services = { chsh = { rootOK = true; }; chfn = { rootOK = true; }; - su = { rootOK = true; forwardXAuth = true; }; + su = { rootOK = true; forwardXAuth = true; logFailures = true; }; passwd = {}; # Note: useradd, groupadd etc. aren't setuid root, so it # doesn't really matter what the PAM config says as long as it |