man: add pam_gnome_keyring to auth section after pam_systemd_loadkey

This is required because pam_sm_open_session [1] only looks at
gkr_system_authtok, which is copied from the kernel keyring in
pam_sm_authenticate.

[1] https://gitlab.gnome.org/GNOME/gnome-keyring/-/blob/46.1/pam/gkr-pam-module.c?ref_type=tags

diff --git a/man/pam_systemd_loadkey.xml b/man/pam_systemd_loadkey.xml
index becb32adcd028e74a6da05f117500e5e7be3d6b1..ab99b1e7523adcc9e04e6707f307b55f470af71b 100644 (file)
--- a/man/pam_systemd_loadkey.xml
+++ b/man/pam_systemd_loadkey.xml
@@ -78,6 +78,7 @@
 
     <programlisting>
 -auth       optional    pam_systemd_loadkey.so
+-auth       optional    pam_gnome_keyring.so
 -session    optional    pam_gnome_keyring.so auto_start
 -session    optional    pam_kwallet5.so auto_start
     </programlisting>