More documentation to come... right now this is just enough to get folks started.

Installation

• Download a release or checkout from git using:

git clone git://git.capelis.dj/pam_escalate

• make
• make install or on OSX, make installosx

Soon there will be a proper ./configure, but not yet.

Configuring sudo for pam_escalate

/etc/pam.d/sudo:

#%PAM-1.0

auth required pam_escalate.so proxy
#@include common-auth
@include common-account

session required pam_permit.so
session required pam_limits.so

/etc/pam.d/pam_escalate: (only required if using "proxy")

@include common-auth
@include common-password
@include common-account
@include common-session

Configuring pam_escalate for su

Just add "auth required pam_escalate.so" to the top of /etc/pam.d/su Full file might look something like this: /etc/pam.d/su:

auth required pam_escalate.so
@include common-auth

@include common-account
@include common-session