From: Jonathan Conder <jono.conder@gmail.com>
Date: Wed, 17 Apr 2024 19:56:52 +0000 (+1200)
Subject: man: add pam_gnome_keyring to auth section after pam_systemd_loadkey
X-Git-Tag: v256-rc1~137^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0bf317b62035156ada7fbcd228a51c93d86dd295;p=thirdparty%2Fsystemd.git

man: add pam_gnome_keyring to auth section after pam_systemd_loadkey

This is required because pam_sm_open_session [1] only looks at
gkr_system_authtok, which is copied from the kernel keyring in
pam_sm_authenticate.

[1] https://gitlab.gnome.org/GNOME/gnome-keyring/-/blob/46.1/pam/gkr-pam-module.c?ref_type=tags
---

diff --git a/man/pam_systemd_loadkey.xml b/man/pam_systemd_loadkey.xml
index becb32adcd0..ab99b1e7523 100644
--- a/man/pam_systemd_loadkey.xml
+++ b/man/pam_systemd_loadkey.xml
@@ -78,6 +78,7 @@
 
     <programlisting>
 -auth       optional    pam_systemd_loadkey.so
+-auth       optional    pam_gnome_keyring.so
 -session    optional    pam_gnome_keyring.so auto_start
 -session    optional    pam_kwallet5.so auto_start
     </programlisting>