From 6b364875f96be6a888b5596aeddec8309dd896e3 Mon Sep 17 00:00:00 2001
From: Eelco Dolstra <eelco.dolstra@logicblox.com>
Date: Thu, 11 Jan 2007 15:32:48 +0000
Subject: [PATCH] * Enable setuid su.

svn path=/nixos/trunk/; revision=7634
---
 system/etc.nix      | 1 +
 system/etc/pam.d/su | 5 +++++
 system/system.nix   | 1 +
 3 files changed, 7 insertions(+)
 create mode 100644 system/etc/pam.d/su

diff --git a/system/etc.nix b/system/etc.nix
index cddae796a9b..12f5b4371c9 100644
--- a/system/etc.nix
+++ b/system/etc.nix
@@ -73,6 +73,7 @@ import ../helpers/make-etc.nix {
     )
     [
       "login"
+      "su"
       "other"
       "passwd"
       "shadow"
diff --git a/system/etc/pam.d/su b/system/etc/pam.d/su
new file mode 100644
index 00000000000..3807b8a3d27
--- /dev/null
+++ b/system/etc/pam.d/su
@@ -0,0 +1,5 @@
+auth     sufficient     pam_rootok.so
+auth     required       @pam_unix2@/lib/security/pam_unix2.so nullok
+account  required       @pam_unix2@/lib/security/pam_unix2.so
+password required       @pam_unix2@/lib/security/pam_unix2.so nullok
+session  required       @pam_unix2@/lib/security/pam_unix2.so
diff --git a/system/system.nix b/system/system.nix
index fdca1eee0fa..2cfc6f2ee7c 100644
--- a/system/system.nix
+++ b/system/system.nix
@@ -166,6 +166,7 @@ rec {
     pkgs.pwdutils
     pkgs.rsync
     pkgs.strace
+    pkgs.su
     pkgs.sysklogd
     pkgs.udev
     pkgs.upstart