RPMs/systemd
Watch
1
0
Fork
You've already forked systemd
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use upstream pam systemd-auth file with a patch, add pam_keyinit

Browse source 
This file changes rarely, but it does every one in a while. And since we have an
independent copy, we forget to adjust it. We have had already two bugs because
of this. I submitted a PR upstream to include pam_namespace (because that makes
sense for all distros), so the diff between upstream and us now is just the
inclusion of system-auth (which is not upstreamable).

Effectively, the only difference right now is that 'pam_keyinit force revoke'
is included. It was added upstream with the comment:

   We want that systemd --user gets its own keyring as usual, even if the
   barebones PAM snippet we ship upstream is used. If we don't do this we get
   the basic keyring systemd --system sets up for us.
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2022-12-14 22:35:52 +01:00
commit 2a3fc2e21f
6 changed files with 173 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

14
systemd-user
View file

@ -1,14 +0,0 @@
# This file is part of systemd.
#
# Used by systemd --user instances.
-account sufficient pam_systemd_home.so
account sufficient pam_unix.so no_pass_expiry
account include system-auth
session required pam_selinux.so close
session required pam_selinux.so nottys open
session required pam_loginuid.so
session required pam_namespace.so
-session optional pam_systemd_home.so
session include system-auth