Question about /etc/pam.d/sudo

[dougg0k]

Hi,

I just saw this tool and was reading the instructions.

You recommend adding the following to /etc/pam.d/sudo and /etc/pam.d/sudo-i

session required pam_limits.so

@include common-auth
@include common-account
@include common-session-noninteractive

But currently, /etc/pam.d/sudo contains

 #%PAM-1.0
 auth        include     system-auth
 account     include     system-auth
 session     include     system-auth

Should it be overwriten or added below the current content?

Thanks.

[bjorn3]

That recommendation is for when

Of course, if you don't have Todd Miller's sudo installed, you also have to make sure that:

If you already have Todd's sudo installed as seems to be the case for you, you don't need to touch the pam files that ship with it.

[squell]

For our reference, what Linux distribution are you using?

[dougg0k]

An Arch based one.

[squell]

Thanks! I've clarified the README a bit to clarify that the example PAM config given is for Debian/Ubuntu. PAM configs tend to differ between distributions.