search

sudo-project / sudo

Utility to execute a command as another user
https://www.sudo.ws
Other
1.14k stars 209 forks source link

Add pam_silent configuration setting #368

Closed Ferdi265 closed 2 months ago

Ferdi265 commented 2 months ago

This commit adds a boolean setting 'pam_silent' that controls whether sudo will pass PAM_SILENT to pam_authenticate(). The default for this setting is 'true', which reflects the previous behaviour.

When this setting is set to 'false', pam messages such as faillock lockout message will be displayed, which is not the case for current 'sudo'.

Related to issue #216.

millert commented 2 months ago

Thanks for doing this. In ecdf0c80f36e971f3090c495377b03a11931816c I decided to make this a sudoers option instead (like the existing pam settings) rather than a sudo.conf option. Typically, I reserve sudo.conf for settings that control the sudo front-end itself.

Ferdi265 commented 2 months ago

Fine by me :) Thanks for reworking this!