From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52000) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7pty-0004Rd-HV for guix-patches@gnu.org; Mon, 08 May 2017 17:09:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7ptu-0006h0-JG for guix-patches@gnu.org; Mon, 08 May 2017 17:09:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:57653) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d7ptu-0006gp-G4 for guix-patches@gnu.org; Mon, 08 May 2017 17:09:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1d7ptu-0000SD-B8 for guix-patches@gnu.org; Mon, 08 May 2017 17:09:02 -0400 Subject: bug#26827: [PATCH] system: Allow root to run "su" without password. Resent-To: guix-patches@gnu.org Resent-Message-ID: References: <20170508105233.20667-1-rekado@elephly.net> <87shkfl8bz.fsf@gnu.org> From: Ricardo Wurmus In-reply-to: <87shkfl8bz.fsf@gnu.org> Date: Mon, 08 May 2017 23:08:35 +0200 Message-ID: <871srzjbu4.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 26827-done@debbugs.gnu.org Ludovic Courtès writes: > Ricardo Wurmus skribis: > >> * gnu/system/pam.scm (unix-pam-service): Add pam-entry for "pam_rootok.so" to >> auth field when ALLOW-ROOT? is #T. >> (base-pam-services): Allow root to run "su" without authentication. > > LGTM, thanks for fixing it! Thanks for the review! Pushed to master with 0adb8e1f0178a08029583dadcd45cce80150e9d8. I’m glad it wasn’t so difficult to fix it. This annoyed me for a while, but I never got around to looking a little more closely… -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net