From f433d6afed50d2f9f8ee32c54e49e42a4f80e7b1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dag-Erling=20Sm=C3=B8rgrav?= Date: Thu, 24 Jan 2002 13:35:06 +0000 Subject: [PATCH] Document the even_root option. Sponsored by: DARPA, NAI Labs --- lib/libpam/modules/pam_self/pam_self.8 | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/lib/libpam/modules/pam_self/pam_self.8 b/lib/libpam/modules/pam_self/pam_self.8 index 8bc6db52dd76..7344ab442d12 100644 --- a/lib/libpam/modules/pam_self/pam_self.8 +++ b/lib/libpam/modules/pam_self/pam_self.8 @@ -62,9 +62,13 @@ The Self authentication component .Pq Fn pam_sm_authenticate , returns success if and only if the target user's user ID is identical with the current real user ID. +If the current real user ID is non-zero, authentication will fail, +unless the +.Cm even_root +option was specified. .Pp The following options may be passed to the authentication module: -.Bl -tag -width ".Cm no_warn" +.Bl -tag -width ".Cm even_root" .It Cm debug .Xr syslog 3 debugging information at @@ -74,6 +78,8 @@ level. suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined. +.It Cm even_root +do not automatically fail if the current real user ID is 0. .El .Sh SEE ALSO .Xr getuid 2 ,