From 26621fa3b893253370f8885e6f7a08c10a1220ac Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Thu, 3 Jul 2014 13:58:57 +0200 Subject: [PATCH] Add pam_reauthorize.so to sshd.pam (#1115977) --- sshd.pam | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sshd.pam b/sshd.pam index a80e450..d943434 100644 --- a/sshd.pam +++ b/sshd.pam @@ -2,6 +2,8 @@ auth required pam_sepermit.so auth substack password-auth auth include postlogin +# Used with polkit to reauthorize users in remote sessions +-auth optional pam_reauthorize.so prepare account required pam_nologin.so account include password-auth password include password-auth @@ -13,3 +15,5 @@ session required pam_selinux.so open env_params session optional pam_keyinit.so force revoke session include password-auth session include postlogin +# Used with polkit to reauthorize users in remote sessions +-session optional pam_reauthorize.so prepare