ansible/files/common/mock
Todd Zullinger ea5ab7b453 maintainer-test: fix mock PAM config
The mock pam.d file, added in 07709f793 ("lineinfile is evil",
2018-05-27), was missing a '#' on the '%PAM-1.0' line.  This causes parse
errors and prevents consolehelper from properly allowing users in the
mock group to execute mock without the root password.

The following error is logged in /var/log/secure when attempting to run
mock:

Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) illegal module type: %PAM-1.0
Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) no control flag supplied
Jul 28 14:11:28 arm03-packager01 userhelper[325]: PAM (mock) no module name supplied
2018-07-28 10:55:16 -04:00

15 lines
852 B
Text

#%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_succeed_if.so user ingroup mock use_uid quiet
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required pam_wheel.so use_uid
auth include system-auth
account sufficient pam_succeed_if.so user ingroup mock use_uid quiet
account include system-auth
password include system-auth
session include system-auth
account sufficient pam_succeed_if.so user ingroup packager use_uid quiet
auth sufficient pam_succeed_if.so user ingroup packager use_uid quiet
session optional pam_xauth.so