From 55e7f8f5dc7ac5a0620fbf5ca2f52da4dfc2abda Mon Sep 17 00:00:00 2001
From: Eelco Dolstra <eelco.dolstra@logicblox.com>
Date: Tue, 16 Jan 2007 22:25:28 +0000
Subject: [PATCH] * Use pam_xauth in su to pass the X cookies.

svn path=/nixos/trunk/; revision=7702
---
 system/etc.nix      | 1 +
 system/etc/pam.d/su | 1 +
 2 files changed, 2 insertions(+)

diff --git a/system/etc.nix b/system/etc.nix
index d0978353d108..d29c869ba976 100644
--- a/system/etc.nix
+++ b/system/etc.nix
@@ -97,6 +97,7 @@ import ../helpers/make-etc.nix {
             if config.get ["users" "ldap" "enable"]
             then pkgs.pam_ldap
             else "/no-such-path";
+          inherit (pkgs.xorg) xauth;
         };
         target = "pam.d/" + program;
       }
diff --git a/system/etc/pam.d/su b/system/etc/pam.d/su
index 5fbdc16359a9..ca777155cc63 100644
--- a/system/etc/pam.d/su
+++ b/system/etc/pam.d/su
@@ -3,3 +3,4 @@ auth     include        common-auth
 account  include        common-account
 password include        common-password
 session  include        common-session
+session  optional       pam_xauth.so xauthpath=@xauth@/bin/xauth systemuser=99