From: Lennart Poettering <lennart@poettering.net>
Date: Fri, 12 Jul 2019 10:48:51 +0000 (+0200)
Subject: factory: include pam_keyinit.so in PAM factory configuration
X-Git-Tag: v243-rc1~112^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F13038%2Fhead;p=thirdparty%2Fsystemd.git

factory: include pam_keyinit.so in PAM factory configuration

We use the keyring, so let's make sure it gets properly initialized for
sessions in factory reset mode.
---

diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth
index 9342dd1ccf9..747efc1fbdb 100644
--- a/factory/etc/pam.d/system-auth
+++ b/factory/etc/pam.d/system-auth
@@ -13,6 +13,7 @@ account  required   pam_permit.so
 password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
 password required   pam_deny.so
 
+-session optional   pam_keyinit.so revoke
 -session optional   pam_loginuid.so
 -session optional   pam_systemd.so
 session  sufficient pam_unix.so