From 26621fa3b893253370f8885e6f7a08c10a1220ac Mon Sep 17 00:00:00 2001
From: Stef Walter <stefw@redhat.com>
Date: Jul 08 2014 10:46:52 +0000
Subject: Add pam_reauthorize.so to sshd.pam (#1115977)


---

diff --git a/sshd.pam b/sshd.pam
index a80e450..d943434 100644
--- a/sshd.pam
+++ b/sshd.pam
@@ -2,6 +2,8 @@
 auth	   required	pam_sepermit.so
 auth       substack     password-auth
 auth       include      postlogin
+# Used with polkit to reauthorize users in remote sessions
+-auth      optional     pam_reauthorize.so prepare
 account    required     pam_nologin.so
 account    include      password-auth
 password   include      password-auth
@@ -13,3 +15,5 @@ session    required     pam_selinux.so open env_params
 session    optional     pam_keyinit.so force revoke
 session    include      password-auth
 session    include      postlogin
+# Used with polkit to reauthorize users in remote sessions
+-session   optional     pam_reauthorize.so prepare