- pam_rootok.so must be first

[packages/pwdutils.git] / chfn.pamd

diff --git a/chfn.pamd b/chfn.pamd
index 7bdb82a929d1acff62ed160386263fede4e9c05c..68d74c23a567546d21acfc3a3167d0b2be985548 100644 (file)
--- a/chfn.pamd
+++ b/chfn.pamd
@@ -1,11 +1,9 @@
 #%PAM-1.0
-auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chfn.allow onerr=fail
 auth           sufficient      pam_rootok.so
+auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chfn.allow onerr=fail
 auth           required        pam_unix.so
 account                required        pam_unix.so
 password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
 password       required        pam_unix.so md5 shadow use_authtok
 password       required        pam_make.so /var/db
 session                required        pam_unix.so
-
-