Opened 18 years ago
Closed 18 years ago
#2550 closed defect (fixed)
sudo: /etc/pam.d/sudo should not contain pam_rootok.so
| Reported by: | Jeremy Henty | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | 6.3 |
| Component: | BOOK | Version: | 6.3 |
| Severity: | medium | Keywords: | sudo pam |
| Cc: |
Description
A PAM-enabled sudo never prompts for a password if /etc/pam.d/sudo contains pam_rootok.so . (This has already been noted at http://www.linuxfromscratch.org/pipermail/blfs-dev/2007-March/016895.html .) Therefore the sudo instructions should delete any such entry, eg. by adding a /pam_rootok/d command to the sed command that creates /etc/pam.d/sudo .
Note:
See TracTickets
for help on using tickets.
Confirmed.
Modified the instruction to create the pam.d file correctly.
Thanks for the report, Jeremy