sudo-rs: add pam.services.su-l for su -l (#431219)

2025-08-24 16:58:52 -04:00
parent 831e9487a5 7404c06f30
commit 8aaa86b149
1 changed files with 14 additions and 7 deletions
@@ -298,13 +298,20 @@ in

    environment.systemPackages = [ cfg.package ];

-    security.pam.services.sudo = {
-      sshAgentAuth = true;
-      usshAuth = true;
-    };
-    security.pam.services.sudo-i = {
-      sshAgentAuth = true;
-      usshAuth = true;
+    security.pam.services = {
+      su-l = {
+        rootOK = true;
+        forwardXAuth = true;
+        logFailures = true;
+      };
+      sudo = {
+        sshAgentAuth = true;
+        usshAuth = true;
+      };
+      sudo-i = {
+        sshAgentAuth = true;
+        usshAuth = true;
+      };
    };

    environment.etc.sudoers = {