Merge pull request #2644 from lethalman/pam_tally

pam: Add logFailures option for adding pam_tally to su
2014-09-02 00:58:30 +04:00
parent 2921966300 1d5d7fdee2
commit 419031bcfc
2 changed files with 9 additions and 1 deletions
@@ -83,7 +83,7 @@ in
    security.pam.services =
      { chsh = { rootOK = true; };
        chfn = { rootOK = true; };
-        su = { rootOK = true; forwardXAuth = true; };
+        su = { rootOK = true; forwardXAuth = true; logFailures = true; };
        passwd = {};
        # Note: useradd, groupadd etc. aren't setuid root, so it
        # doesn't really matter what the PAM config says as long as it