pam: Add logFailures option for adding pam_tally to su

2014-05-14 17:54:21 +02:00
parent 0138b81ed6
commit 1d5d7fdee2
2 changed files with 9 additions and 1 deletions
@@ -82,7 +82,7 @@ in
    security.pam.services =
      { chsh = { rootOK = true; };
        chfn = { rootOK = true; };
-        su = { rootOK = true; forwardXAuth = true; };
+        su = { rootOK = true; forwardXAuth = true; logFailures = true; };
        passwd = {};
        # Note: useradd, groupadd etc. aren't setuid root, so it
        # doesn't really matter what the PAM config says as long as it