diff options
| -rw-r--r-- | lib/libpam/modules/pam_self/pam_self.8 | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/lib/libpam/modules/pam_self/pam_self.8 b/lib/libpam/modules/pam_self/pam_self.8 index 8bc6db52dd76..7344ab442d12 100644 --- a/lib/libpam/modules/pam_self/pam_self.8 +++ b/lib/libpam/modules/pam_self/pam_self.8 @@ -62,9 +62,13 @@ The Self authentication component .Pq Fn pam_sm_authenticate , returns success if and only if the target user's user ID is identical with the current real user ID. +If the current real user ID is non-zero, authentication will fail, +unless the +.Cm even_root +option was specified. .Pp The following options may be passed to the authentication module: -.Bl -tag -width ".Cm no_warn" +.Bl -tag -width ".Cm even_root" .It Cm debug .Xr syslog 3 debugging information at @@ -74,6 +78,8 @@ level. suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined. +.It Cm even_root +do not automatically fail if the current real user ID is 0. .El .Sh SEE ALSO .Xr getuid 2 , |