summaryrefslogtreecommitdiff
path: root/install-files/gnome/etc/pam.d/gdm-password
blob: 798d40a609e8b47271912a789860376de0f172ed (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# Baserock customized /etc/pam.d/gdm-password
#
# This configuration ensures that the default keyring
# is unlocked at gdm login time, and also that the
# authentication token is used to update the keyring
# when the password is set.

auth     requisite      pam_nologin.so
auth     required       pam_env.so

auth     required       pam_succeed_if.so uid >= 1000 quiet
auth     substack       system-auth
auth     optional       pam_gnome_keyring.so

account  include        system-auth
password substack       system-auth
password optional       pam_gnome_keyring.so use_authtok

session  required       pam_limits.so
session  required       pam_loginuid.so
session  optional       pam_keyinit.so force revoke
session  required       pam_namespace.so
session  substack       system-auth
session  optional       pam_gnome_keyring.so auto_start