Error in /etc/pam.d/su ??

[Dag-Erling Smørgrav]

Roman Kennke <roman at ontographics.com> writes:
> I just upgraded RELENG_5. Now it seems, that su lets me into root
> without a passwd.
> Checking /etc/pam.d/su it seems that there is an include control flag,
> which isn't recognized:
>
> auth            include         system
> account         include         system
>
> I suppose this must be changed to required or requisite? I am no PAM
> expert, but this seems like a serious bug to me.

You must have botched the upgrade.  OpenPAM has had support for the
"include" keyword since 2003-06-01.

DES
-- 
Dag-Erling Smørgrav - des at des.no