summaryrefslogtreecommitdiffstats
path: root/data/pam-arch
diff options
context:
space:
mode:
Diffstat (limited to 'data/pam-arch')
-rw-r--r--data/pam-arch/gdm-autologin.pam15
-rw-r--r--data/pam-arch/gdm-fingerprint.pam17
-rw-r--r--data/pam-arch/gdm-launch-environment.pam17
-rw-r--r--data/pam-arch/gdm-password.pam12
-rw-r--r--data/pam-arch/gdm-smartcard.pam17
5 files changed, 78 insertions, 0 deletions
diff --git a/data/pam-arch/gdm-autologin.pam b/data/pam-arch/gdm-autologin.pam
new file mode 100644
index 0000000..30bdf52
--- /dev/null
+++ b/data/pam-arch/gdm-autologin.pam
@@ -0,0 +1,15 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth requisite pam_nologin.so
+auth optional pam_permit.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password required pam_deny.so
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-arch/gdm-fingerprint.pam b/data/pam-arch/gdm-fingerprint.pam
new file mode 100644
index 0000000..2aaf9f6
--- /dev/null
+++ b/data/pam-arch/gdm-fingerprint.pam
@@ -0,0 +1,17 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth requisite pam_nologin.so
+auth requisite pam_faillock.so preauth
+auth required pam_fprintd.so
+auth optional pam_permit.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password required pam_deny.so
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-arch/gdm-launch-environment.pam b/data/pam-arch/gdm-launch-environment.pam
new file mode 100644
index 0000000..20d1810
--- /dev/null
+++ b/data/pam-arch/gdm-launch-environment.pam
@@ -0,0 +1,17 @@
+#%PAM-1.0
+
+auth required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
+auth optional pam_permit.so
+auth required pam_env.so
+
+account required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
+account optional pam_permit.so
+
+password required pam_deny.so
+
+session optional pam_loginuid.so
+session optional pam_keyinit.so force revoke
+session required pam_succeed_if.so audit quiet_success user in gdm:gnome-initial-setup
+session optional pam_permit.so
+-session optional pam_systemd.so
+session required pam_env.so user_readenv=1
diff --git a/data/pam-arch/gdm-password.pam b/data/pam-arch/gdm-password.pam
new file mode 100644
index 0000000..137242a
--- /dev/null
+++ b/data/pam-arch/gdm-password.pam
@@ -0,0 +1,12 @@
+#%PAM-1.0
+
+auth include system-local-login
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+password optional pam_gnome_keyring.so use_authtok
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-arch/gdm-smartcard.pam b/data/pam-arch/gdm-smartcard.pam
new file mode 100644
index 0000000..6d7333b
--- /dev/null
+++ b/data/pam-arch/gdm-smartcard.pam
@@ -0,0 +1,17 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth requisite pam_nologin.so
+auth requisite pam_faillock.so preauth
+auth required pam_pkcs11.so wait_for_card card_only
+auth optional pam_permit.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password required pam_deny.so
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start