pam: Allow only root to change shells and user info.

[matthijs/servers/drsnuggles.git] / etc / pam.d / chfn

diff --git a/etc/pam.d/chfn b/etc/pam.d/chfn
index 10fcf07b12cc75d9f23dad40a434f9149ee76ec1..efbc34b954757ea2d8c7daa4a6f8d80b34bdaa10 100644 (file)
--- a/etc/pam.d/chfn
+++ b/etc/pam.d/chfn
@@ -2,15 +2,5 @@
 # The PAM configuration file for the Shadow `chfn' service
 #
 
-# This allows root to change user infomation without being
-# prompted for a password
-auth           sufficient      pam_rootok.so
-
-# The standard Unix authentication modules, used with
-# NIS (man nsswitch) as well as normal /etc/passwd and
-# /etc/shadow entries.
-@include common-auth
-@include common-account
-@include common-session
-
-
+# This allows only root to change user infomation at all.
+auth           required        pam_rootok.so