1 # $NetBSD: su.in,v 1.1 2024/12/30 21:59:08 jmmv Exp $ 2 # 3 # PAM configuration for the "su" service 4 # 5 6 # auth 7 auth sufficient pam_rootok.so no_warn 8 auth sufficient pam_self.so no_warn 9 auth sufficient pam_skey.so no_warn try_first_pass 10 #auth sufficient pam_u2f.so authfile=/etc/u2f_mappings cue 11 #auth sufficient pam_ksu.so no_warn try_first_pass 12 #auth sufficient pam_group.so no_warn group=rootauth root_only authenticate 13 auth requisite pam_group.so no_warn group=wheel root_only fail_safe 14 auth required pam_unix.so no_warn try_first_pass nullok 15 16 # account 17 account required pam_login_access.so 18 account include system 19 20 # session 21 session required pam_permit.so 22