- uniformized configs to use system-auth where possible

- sanitized
- uniform blacklist for pop3, imap and smtp services

Changed files:
    su.pamd -> 1.9

diff --git a/su.pamd b/su.pamd
index e79a5e8f44799a845a51a67480c7057807644fde..22d1434dc14ff16930e4fa99126af96f11ef5785 100644 (file)
--- a/su.pamd
+++ b/su.pamd
@@ -1,11 +1,9 @@
 #%PAM-1.0
 auth           sufficient      pam_rootok.so
 auth           required        pam_wheel.so group=wheel
-auth           required        pam_unix.so
-account                required        pam_unix.so
-password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password       required        pam_unix.so md5 shadow use_authtok
-session                required        pam_unix.so
-session                required        pam_env.so
-session                required        pam_limits.so change_uid
+auth           include         system-auth
+account                sufficient      pam_succeed_if.so uid = 0 use_uid quiet
+account                include         system-auth
+password       include         system-auth
+session                include         system-auth
 session                optional        pam_xauth.so