|
 |
ca70cf |
From 6effb1671a917adb3ed8f77f5e13324e8b455c32 Mon Sep 17 00:00:00 2001
|
|
|
ca70cf |
From: Ray Strode <rstrode@redhat.com>
|
|
|
ca70cf |
Date: Tue, 30 Jan 2018 10:32:08 -0500
|
|
|
ca70cf |
Subject: [PATCH] data: drop pam_gdm, reintroduce pam_env/postlogin
|
|
|
ca70cf |
|
|
|
ca70cf |
The current upstream pam configuration upstream doesn't really
|
|
|
ca70cf |
make sense in RHEL.
|
|
|
ca70cf |
|
|
|
ca70cf |
systemd doesn't handle /etc/environment on its own in RHEL and it
|
|
|
ca70cf |
doesn't populate the kernel keyring with disk encrypt passwords,
|
|
|
ca70cf |
so pam_gdm is not useful.
|
|
|
ca70cf |
|
|
|
ca70cf |
This commit restores the pam configuration to something closer to
|
|
|
ca70cf |
what was shipped in 7.3
|
|
|
ca70cf |
---
|
|
|
ca70cf |
data/pam-redhat/gdm-autologin.pam | 7 +++----
|
|
|
ca70cf |
1 file changed, 3 insertions(+), 4 deletions(-)
|
|
|
ca70cf |
|
|
|
ca70cf |
diff --git a/data/pam-redhat/gdm-autologin.pam b/data/pam-redhat/gdm-autologin.pam
|
|
|
ca70cf |
index c31ff27a..aa99e1b0 100644
|
|
|
ca70cf |
--- a/data/pam-redhat/gdm-autologin.pam
|
|
|
ca70cf |
+++ b/data/pam-redhat/gdm-autologin.pam
|
|
|
ca70cf |
@@ -1,16 +1,15 @@
|
|
|
ca70cf |
#%PAM-1.0
|
|
|
ca70cf |
-auth [success=ok default=1] pam_gdm.so
|
|
|
ca70cf |
--auth optional pam_gnome_keyring.so
|
|
|
ca70cf |
-auth sufficient pam_permit.so
|
|
|
ca70cf |
+auth required pam_env.so
|
|
|
ca70cf |
+auth required pam_permit.so
|
|
|
ca70cf |
+auth include postlogin
|
|
|
ca70cf |
account required pam_nologin.so
|
|
|
ca70cf |
account include system-auth
|
|
|
ca70cf |
password include system-auth
|
|
|
ca70cf |
session required pam_selinux.so close
|
|
|
ca70cf |
session required pam_loginuid.so
|
|
|
ca70cf |
session optional pam_console.so
|
|
|
ca70cf |
session required pam_selinux.so open
|
|
|
ca70cf |
session optional pam_keyinit.so force revoke
|
|
|
ca70cf |
session required pam_namespace.so
|
|
|
ca70cf |
session include system-auth
|
|
|
ca70cf |
-session optional pam_gnome_keyring.so auto_start
|
|
|
ca70cf |
session include postlogin
|
|
|
ca70cf |
--
|
|
|
ca70cf |
2.14.3
|
|
|
ca70cf |
|