From 36825c7b14b92434705a58aa4c22b8c1710a9760 Mon Sep 17 00:00:00 2001 From: Dan McGregor Date: Tue, 12 Apr 2016 12:25:31 -0600 Subject: sudo: fix pam config on systemd systems Pam_keyinit revoke causes issues on systemd systems. Make its use optional. This brings it in line with Fedora 23 and Centos 7. Signed-off-by: Dan McGregor Signed-off-by: Richard Purdie --- meta/recipes-extended/sudo/files/sudo.pam | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/sudo/files/sudo.pam b/meta/recipes-extended/sudo/files/sudo.pam index 5bc26e7025..515eab0c6c 100644 --- a/meta/recipes-extended/sudo/files/sudo.pam +++ b/meta/recipes-extended/sudo/files/sudo.pam @@ -2,5 +2,5 @@ auth include common-auth account include common-account password include common-password -session required pam_keyinit.so revoke +session optional pam_keyinit.so revoke session required pam_limits.so -- cgit 1.2.3-korg