- pam_rootok.so must be first

[packages/util-linux.git] / chsh.pamd

diff --git a/chsh.pamd b/chsh.pamd
index e7cc4a0e8c09d8d17037a9ec4fb29b583513fc70..aa411c1f20fc024b65433491e8cf38f4addb394f 100644 (file)
--- a/chsh.pamd
+++ b/chsh.pamd
@@ -1,11 +1,9 @@
 #%PAM-1.0
-auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chsh.allow onerr=fail
 auth           sufficient      pam_rootok.so
+auth           required        pam_listfile.so item=user sense=allow file=/etc/security/chsh.allow onerr=fail
 auth           required        pam_unix.so
 account                required        pam_unix.so
 password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
 password       required        pam_unix.so md5 shadow use_authtok
-password    required    pam_make.so /var/db
+password       required        pam_make.so /var/db
 session                required        pam_unix.so
-
-