* Use pam_xauth in su to pass the X cookies.

svn path=/nixos/trunk/; revision=7702

system/etc.nix

@@ -97,6 +97,7 @@ import ../helpers/make-etc.nix {
             if config.get ["users" "ldap" "enable"]
             then pkgs.pam_ldap
             else "/no-such-path";
+          inherit (pkgs.xorg) xauth;
         };
         target = "pam.d/" + program;
       }

system/etc/pam.d/su

@@ -3,3 +3,4 @@ auth     include        common-auth
 account  include        common-account
 password include        common-password
 session  include        common-session
+session  optional       pam_xauth.so xauthpath=@xauth@/bin/xauth systemuser=99