From b4f7995e9a7f6f5ce54297ff0ab9b81d6bbbff40 Mon Sep 17 00:00:00 2001 From: Andreas Müller Date: Wed, 8 Jan 2014 10:46:46 +0100 Subject: shadow: set correct entries for pseudo terminals in /etc/securetty MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In commit 10cdd66fe800cffe3f2cbf5c95550b4f7902a311 Author: Ming Liu Date: Thu Jul 18 10:04:22 2013 +0800 libpam: add a new 'nullok_secure' option support to pam_unix 'null_ok_secure' option was fixed. Since that commit 'su' stopped working in pseudo terminals (created in X environments) for root-accounts with empty password. Background: The PAM configuration for 'su' includes 'common-auth' which uses 'nullok_secure' option for pam_unix. (From OE-Core rev: d28eba07553020bf9bfb1419663c1d18ab36ab66) Signed-off-by: Andreas Müller Signed-off-by: Saul Wold Signed-off-by: Richard Purdie --- meta/recipes-extended/shadow/files/securetty | 16 ++++------------ 1 file changed, 4 insertions(+), 12 deletions(-) (limited to 'meta/recipes-extended/shadow') diff --git a/meta/recipes-extended/shadow/files/securetty b/meta/recipes-extended/shadow/files/securetty index 467fc04398..0b1629f143 100644 --- a/meta/recipes-extended/shadow/files/securetty +++ b/meta/recipes-extended/shadow/files/securetty @@ -124,18 +124,10 @@ tty62 tty63 # Local X displays (allows empty passwords with pam_unix's nullok_secure) -:0 -:0.0 -:0.1 -:1 -:1.0 -:1.1 -:2 -:2.0 -:2.1 -:3 -:3.0 -:3.1 +pts/0 +pts/1 +pts/2 +pts/3 # Embedded Freescale i.MX ports ttymxc0 -- cgit v1.2.3-54-g00ecf