From 4c92bf408db4f91928389c49bf06cfe5d7383d9a Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 12 Jul 2019 12:48:51 +0200 Subject: [PATCH] factory: include pam_keyinit.so in PAM factory configuration We use the keyring, so let's make sure it gets properly initialized for sessions in factory reset mode. --- factory/etc/pam.d/system-auth | 1 + 1 file changed, 1 insertion(+) diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth index 9342dd1ccf..747efc1fbd 100644 --- a/factory/etc/pam.d/system-auth +++ b/factory/etc/pam.d/system-auth @@ -13,6 +13,7 @@ account required pam_permit.so password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok password required pam_deny.so +-session optional pam_keyinit.so revoke -session optional pam_loginuid.so -session optional pam_systemd.so session sufficient pam_unix.so