factory: include pam_keyinit.so in PAM factory configuration

We use the keyring, so let's make sure it gets properly initialized for sessions in factory reset mode.
2019-07-12 12:48:51 +02:00 · 2019-07-12 12:48:51 +02:00 · 4c92bf408d
parent 29d30ae7b6
commit 4c92bf408d
1 changed files with 1 additions and 0 deletions
--- a/factory/etc/pam.d/system-auth
+++ b/factory/etc/pam.d/system-auth
@ -13,6 +13,7 @@ account  required   pam_permit.so
 password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
 password required   pam_deny.so

+-session optional   pam_keyinit.so revoke
 -session optional   pam_loginuid.so
 -session optional   pam_systemd.so
 session  sufficient pam_unix.so