pam: Allow only root to change shells and user info.

[matthijs/servers/drsnuggles.git] / etc / pam.d / chsh

diff --git a/etc/pam.d/chsh b/etc/pam.d/chsh
index 7eb604d722d38a00bc6b487f5049a3d00dd73a1c..2458371d01061002f94647cf223b5b87e3426da9 100644 (file)
--- a/etc/pam.d/chsh
+++ b/etc/pam.d/chsh
@@ -2,19 +2,5 @@
 # The PAM configuration file for the Shadow `chsh' service
 #
 
-# This will not allow a user to change their shell unless
-# their current one is listed in /etc/shells. This keeps
-# accounts with special shells from changing them.
-auth       required   pam_shells.so
-
-# This allows root to change user shell without being
-# prompted for a password
-auth           sufficient      pam_rootok.so
-
-# The standard Unix authentication modules, used with
-# NIS (man nsswitch) as well as normal /etc/passwd and
-# /etc/shadow entries.
-@include common-auth
-@include common-account
-@include common-session
-
+# This allows only root to change user shells at all.
+auth           required        pam_rootok.so