isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mention how to configure pam_hpsec on HP-UX to play nicely with sudo.

Browse Source
This commit is contained in:
Todd C. Miller
2011-12-08 09:10:07 -05:00
parent 666d8d6359
commit edd32aa8df
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
INSTALL
View File

@@ -738,6 +738,12 @@ HP-UX:
sudo session required libpam_hpsec.so.1 bypass_umask sudo session required libpam_hpsec.so.1 bypass_umask
If every command run via sudo displays information about the last
successful login and the last authentication failure you should
make use an /etc/pam.conf line like:
sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login
Digital UNIX: Digital UNIX:
By default, sudo will use SIA (Security Integration Architecture) By default, sudo will use SIA (Security Integration Architecture)
to validate a user. If you want to use an alternative authentication to validate a user. If you want to use an alternative authentication

8
configure vendored
View File

@@ -22023,6 +22023,14 @@ fi
if test "$with_pam" = "yes"; then if test "$with_pam" = "yes"; then
case $host in case $host in
*-*-hpux*)
if -f /usr/lib/security/libpam_hpsec.so.1 ; then
{ $as_echo "$as_me:${as_lineno-$LINENO}: You may wish to add the following line to /etc/pam.conf" >&5
$as_echo "$as_me: You may wish to add the following line to /etc/pam.conf" >&6;}
{ $as_echo "$as_me:${as_lineno-$LINENO}: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&5
$as_echo "$as_me: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&6;}
fi
;;
*-*-linux*) *-*-linux*)
{ $as_echo "$as_me:${as_lineno-$LINENO}: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&5 { $as_echo "$as_me:${as_lineno-$LINENO}: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&5
$as_echo "$as_me: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&6;} $as_echo "$as_me: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&6;}

6
configure.in
View File

@@ -3065,6 +3065,12 @@ dnl Spew any text the user needs to know about
dnl dnl
if test "$with_pam" = "yes"; then if test "$with_pam" = "yes"; then
case $host in case $host in
*-*-hpux*)
if [ -f /usr/lib/security/libpam_hpsec.so.1 ]; then
AC_MSG_NOTICE([You may wish to add the following line to /etc/pam.conf])
AC_MSG_NOTICE([sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login])
fi
;;
*-*-linux*) *-*-linux*)
AC_MSG_NOTICE([You will need to customize sample.pam and install it as /etc/pam.d/sudo]) AC_MSG_NOTICE([You will need to customize sample.pam and install it as /etc/pam.d/sudo])
;; ;;