diff options
-rw-r--r-- | files/2fa/sudo.pam | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/files/2fa/sudo.pam b/files/2fa/sudo.pam index aa59ebf7a..ae846a766 100644 --- a/files/2fa/sudo.pam +++ b/files/2fa/sudo.pam @@ -4,7 +4,10 @@ auth sufficient pam_url.so config=/etc/pam_url.conf auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_deny.so +{% if env == "production" %} auth include system-auth +{% endif %} + account include system-auth password include system-auth session optional pam_keyinit.so revoke |