summaryrefslogtreecommitdiffstats
path: root/data/pam-exherbo
diff options
context:
space:
mode:
Diffstat (limited to 'data/pam-exherbo')
-rw-r--r--data/pam-exherbo/gdm-autologin.pam12
-rw-r--r--data/pam-exherbo/gdm-fingerprint.pam16
-rw-r--r--data/pam-exherbo/gdm-launch-environment.pam17
-rw-r--r--data/pam-exherbo/gdm-password.pam12
-rw-r--r--data/pam-exherbo/gdm-smartcard.pam16
5 files changed, 73 insertions, 0 deletions
diff --git a/data/pam-exherbo/gdm-autologin.pam b/data/pam-exherbo/gdm-autologin.pam
new file mode 100644
index 0000000..283cd87
--- /dev/null
+++ b/data/pam-exherbo/gdm-autologin.pam
@@ -0,0 +1,12 @@
+#%PAM-1.0
+
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+auth sufficient pam_permit.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-exherbo/gdm-fingerprint.pam b/data/pam-exherbo/gdm-fingerprint.pam
new file mode 100644
index 0000000..ab8f7ba
--- /dev/null
+++ b/data/pam-exherbo/gdm-fingerprint.pam
@@ -0,0 +1,16 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth required pam_nologin.so
+auth required pam_faillock.so preauth
+auth required pam_fprintd.so
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-exherbo/gdm-launch-environment.pam b/data/pam-exherbo/gdm-launch-environment.pam
new file mode 100644
index 0000000..15769ae
--- /dev/null
+++ b/data/pam-exherbo/gdm-launch-environment.pam
@@ -0,0 +1,17 @@
+#%PAM-1.0
+
+auth required pam_succeed_if.so audit quiet_success user = gdm
+auth required pam_env.so
+auth optional pam_permit.so
+
+account required pam_succeed_if.so audit quiet_success user = gdm
+account optional pam_permit.so
+
+password required pam_deny.so
+
+session optional pam_loginuid.so
+session optional pam_keyinit.so force revoke
+session required pam_succeed_if.so audit quiet_success user = gdm
+-session optional pam_systemd.so
+-session optional pam_elogind.so
+session optional pam_permit.so
diff --git a/data/pam-exherbo/gdm-password.pam b/data/pam-exherbo/gdm-password.pam
new file mode 100644
index 0000000..d462030
--- /dev/null
+++ b/data/pam-exherbo/gdm-password.pam
@@ -0,0 +1,12 @@
+#%PAM-1.0
+
+auth include system-local-login
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+password optional pam_gnome_keyring.so use_authtok
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-exherbo/gdm-smartcard.pam b/data/pam-exherbo/gdm-smartcard.pam
new file mode 100644
index 0000000..da650b8
--- /dev/null
+++ b/data/pam-exherbo/gdm-smartcard.pam
@@ -0,0 +1,16 @@
+#%PAM-1.0
+
+auth required pam_shells.so
+auth required pam_nologin.so
+auth required pam_faillock.so preauth
+auth required pam_pkcs11.so wait_for_card card_only
+auth required pam_env.so
+auth [success=ok default=1] pam_gdm.so
+auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+session optional pam_gnome_keyring.so auto_start