shadow/man/login.defs.d/CHFN_AUTH.xml

<!--
   SPDX-FileCopyrightText: 1991 - 1993, Julianne Frances Haugh
   SPDX-FileCopyrightText: 1991 - 1993, Chip Rosenthal
   SPDX-FileCopyrightText: 2007 - 2008, Nicolas François
   SPDX-License-Identifier: BSD-3-Clause
-->
<varlistentry condition="no_pam">
  <term><option>CHFN_AUTH</option> (boolean)</term>
  <listitem>
    <para>
      If <replaceable>yes</replaceable>, the <command>chfn</command>
      program will require authentication before making any changes,
      unless run by the superuser.
    </para>
  </listitem>
</varlistentry>