From 431b91ae3fd4cc9b38cf262cf32035dc3613512c Mon Sep 17 00:00:00 2001 From: Paolo Bonzini Date: Mon, 14 Feb 2011 13:28:33 -0500 Subject: [PATCH] Add support for postlogin stack This is important for ecryptfs --- gdm-autologin-pam | 2 ++ gdm-fingerprint.pam | 2 ++ gdm-pam | 2 ++ gdm-password.pam | 2 ++ gdm-smartcard.pam | 2 ++ 5 files changed, 10 insertions(+) diff --git a/gdm-autologin-pam b/gdm-autologin-pam index c3f7172..96fcfe3 100644 --- a/gdm-autologin-pam +++ b/gdm-autologin-pam @@ -1,6 +1,7 @@ #%PAM-1.0 auth required pam_env.so auth required pam_permit.so +auth include postlogin account required pam_nologin.so account include system-auth password include system-auth @@ -11,3 +12,4 @@ session required pam_selinux.so open session optional pam_keyinit.so force revoke session required pam_namespace.so session include system-auth +session include postlogin diff --git a/gdm-fingerprint.pam b/gdm-fingerprint.pam index f0d844c..7ff73af 100644 --- a/gdm-fingerprint.pam +++ b/gdm-fingerprint.pam @@ -1,5 +1,6 @@ auth substack fingerprint-auth auth required pam_succeed_if.so user != root quiet +auth include postlogin account required pam_nologin.so account include fingerprint-auth @@ -13,3 +14,4 @@ session required pam_selinux.so open session optional pam_keyinit.so force revoke session required pam_namespace.so session include fingerprint-auth +session include postlogin diff --git a/gdm-pam b/gdm-pam index 60ae86c..7bbc7fe 100644 --- a/gdm-pam +++ b/gdm-pam @@ -4,6 +4,7 @@ auth required pam_succeed_if.so user != root quiet auth required pam_env.so auth substack system-auth auth optional pam_gnome_keyring.so +auth include postlogin account required pam_nologin.so account include system-auth password include system-auth @@ -15,3 +16,4 @@ session optional pam_keyinit.so force revoke session required pam_namespace.so session optional pam_gnome_keyring.so auto_start session include system-auth +session include postlogin diff --git a/gdm-password.pam b/gdm-password.pam index eba96f5..32f0345 100644 --- a/gdm-password.pam +++ b/gdm-password.pam @@ -2,6 +2,7 @@ auth [success=done ignore=ignore default=bad] pam_selinux_permit.so auth substack password-auth auth required pam_succeed_if.so user != root quiet auth optional pam_gnome_keyring.so +auth include postlogin account required pam_nologin.so account include password-auth @@ -16,3 +17,4 @@ session optional pam_keyinit.so force revoke session required pam_namespace.so session optional pam_gnome_keyring.so auto_start session include password-auth +session include postlogin diff --git a/gdm-smartcard.pam b/gdm-smartcard.pam index 79ac85c..b80f537 100644 --- a/gdm-smartcard.pam +++ b/gdm-smartcard.pam @@ -1,5 +1,6 @@ auth substack smartcard-auth auth required pam_succeed_if.so user != root quiet +auth include postlogin account required pam_nologin.so account include smartcard-auth @@ -13,3 +14,4 @@ session required pam_selinux.so open session optional pam_keyinit.so force revoke session required pam_namespace.so session include smartcard-auth +session include postlogin