Comment 10 for bug 1033899

Revision history for this message
Francis Pereira (francispereira) wrote :

Mike I am trying to get users of group root and xapi to authenticate but the following config does not work

#%PAM-1.0
@include common-auth
auth required pam_succeed_if.so user ingroup root
# Uncomment below if you want users of group xapi to successfully authenticate.
# The group xapi should be manually created.
auth required pam_succeed_if.so user ingroup xapi

I would like users of group xapi to successfully authenticate so that VM admins (members of group xapi ) (administering vm via XenCenter ) don't have to be members of group root in dom0. This adds to dom0 security.

Someone from Ubuntu Security team please comment