diff --git a/templates/sudo/etc/pam.d/sudo.erb b/templates/sudo/etc/pam.d/sudo.erb index c0d4bcb04935a39185221545f6e701b0694b87ab..3d12af27e85b07a2bd2f61da2e84aec99bddd479 100644 --- a/templates/sudo/etc/pam.d/sudo.erb +++ b/templates/sudo/etc/pam.d/sudo.erb @@ -15,6 +15,7 @@ password include common-auth session optional pam_keyinit.so revoke session required pam_limits.so <%- if (@debuild) then -%> + # Instead of including the stock common-session-noninteractive we # use parts of it, overriding minimum_uid for pam_afs_session # so that sudo will be able to get AFS tokens (helps with cowbuilder)