The mock pam.d file, added in 07709f793
("lineinfile is evil",
2018-05-27), was missing a '#' on the '%PAM-1.0' line. This causes parse
errors and prevents consolehelper from properly allowing users in the
mock group to execute mock without the root password.
The following error is logged in /var/log/secure when attempting to run
mock:
Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) illegal module type: %PAM-1.0
Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) no control flag supplied
Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) no module name supplied
15 lines
852 B
Text
15 lines
852 B
Text
#%PAM-1.0
|
|
auth sufficient pam_rootok.so
|
|
auth sufficient pam_succeed_if.so user ingroup mock use_uid quiet
|
|
# Uncomment the following line to implicitly trust users in the "wheel" group.
|
|
#auth sufficient pam_wheel.so trust use_uid
|
|
# Uncomment the following line to require a user to be in the "wheel" group.
|
|
#auth required pam_wheel.so use_uid
|
|
auth include system-auth
|
|
account sufficient pam_succeed_if.so user ingroup mock use_uid quiet
|
|
account include system-auth
|
|
password include system-auth
|
|
session include system-auth
|
|
account sufficient pam_succeed_if.so user ingroup packager use_uid quiet
|
|
auth sufficient pam_succeed_if.so user ingroup packager use_uid quiet
|
|
session optional pam_xauth.so
|