From ce45238ab82a9a6a601813cbcd9b8e68160c4876 Mon Sep 17 00:00:00 2001 From: mustard Date: Mon, 7 Oct 2024 20:47:11 +0200 Subject: [PATCH] Hmmmm --- sudo-dom0.sh | 2 +- sus | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/sudo-dom0.sh b/sudo-dom0.sh index d018d4d..ec263e8 100644 --- a/sudo-dom0.sh +++ b/sudo-dom0.sh @@ -4,7 +4,7 @@ sudo cp /etc/authselect/system-auth /etc/authselect/custom/sudo-dom0-prompt sudo sed -i '/^auth/d' /etc/authselect/custom/sudo-dom0-prompt/system-auth -sed -i '/^account/ i auth [success=1 default=ignore] pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$\nauth requisite pam_deny.so\nauth required pam_permit.so' /etc/authselect/custom/sudo-dom0-prompt/system-auth +sed -i '/^account/ i auth [success=1 default=ignore] pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$\nauth requisite pam_deny.so\nauth required pam_permit.so' /etc/authselect/custom/sudo-dom0-prompt/system-auth sudo authselect select custom/sudo-dom0-prompt diff --git a/sus b/sus index 2adc653..3f70fb7 100644 --- a/sus +++ b/sus @@ -4,9 +4,9 @@ # See authselect(8) for more details. -auth [success=1 default=ignore] pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$ -auth requisite pam_deny.so -auth required pam_permit.so +auth [success=1 default=ignore] pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$ +auth requisite pam_deny.so +auth required pam_permit.so account required pam_unix.so password requisite pam_pwquality.so