summaryrefslogtreecommitdiffstats
path: root/data/pam-lfs
diff options
context:
space:
mode:
Diffstat (limited to 'data/pam-lfs')
-rw-r--r--data/pam-lfs/gdm-autologin.pam19
-rw-r--r--data/pam-lfs/gdm-fingerprint.pam18
-rw-r--r--data/pam-lfs/gdm-launch-environment.pam17
-rw-r--r--data/pam-lfs/gdm-password.pam17
-rw-r--r--data/pam-lfs/gdm-smartcard.pam17
5 files changed, 88 insertions, 0 deletions
diff --git a/data/pam-lfs/gdm-autologin.pam b/data/pam-lfs/gdm-autologin.pam
new file mode 100644
index 0000000..953d47e
--- /dev/null
+++ b/data/pam-lfs/gdm-autologin.pam
@@ -0,0 +1,19 @@
+# Begin /etc/pam.d/gdm-autologin
+
+auth requisite pam_nologin.so
+auth required pam_env.so
+
+auth required pam_succeed_if.so uid >= 1000 quiet
+auth optional pam_gdm.so
+auth optional pam_gnome_keyring.so
+auth required pam_permit.so
+
+account include system-account
+password include system-password
+
+session optional pam_keyinit.so revoke
+session required pam_limits.so
+session include system-session
+session optional pam_gnome_keyring.so auto_start
+
+# End /etc/pam.d/gdm-autologin
diff --git a/data/pam-lfs/gdm-fingerprint.pam b/data/pam-lfs/gdm-fingerprint.pam
new file mode 100644
index 0000000..f004882
--- /dev/null
+++ b/data/pam-lfs/gdm-fingerprint.pam
@@ -0,0 +1,18 @@
+# Begin /etc/pam.d/gdm-fingerprint
+
+auth requisite pam_nologin.so
+auth required pam_env.so
+
+auth required pam_succeed_if.so uid >= 1000 quiet
+auth required pam_fprintd.so
+auth optional pam_gnome_keyring.so
+
+account include system-account
+password required pam_fprintd.so
+
+session optional pam_keyinit.so revoke
+session required pam_limits.so
+session include system-session
+session optional pam_gnome_keyring.so auto_start
+
+# End /etc/pam.d/gdm-fingerprint
diff --git a/data/pam-lfs/gdm-launch-environment.pam b/data/pam-lfs/gdm-launch-environment.pam
new file mode 100644
index 0000000..174c347
--- /dev/null
+++ b/data/pam-lfs/gdm-launch-environment.pam
@@ -0,0 +1,17 @@
+# Begin /etc/pam.d/gdm-launch-environment
+
+auth required pam_succeed_if.so audit quiet_success user = gdm
+auth required pam_env.so
+auth optional pam_permit.so
+
+account required pam_succeed_if.so audit quiet_success user = gdm
+account include system-account
+
+password required pam_deny.so
+
+session required pam_succeed_if.so audit quiet_success user = gdm
+-session optional pam_systemd.so
+session optional pam_keyinit.so force revoke
+session optional pam_permit.so
+
+# End /etc/pam.d/gdm-launch-environment
diff --git a/data/pam-lfs/gdm-password.pam b/data/pam-lfs/gdm-password.pam
new file mode 100644
index 0000000..9b52a17
--- /dev/null
+++ b/data/pam-lfs/gdm-password.pam
@@ -0,0 +1,17 @@
+# Begin /etc/pam.d/gdm-password
+
+auth requisite pam_nologin.so
+auth required pam_env.so
+
+auth required pam_succeed_if.so uid >= 1000 quiet
+auth include system-auth
+auth optional pam_gnome_keyring.so
+
+account include system-account
+password include system-password
+
+session required pam_limits.so
+session include system-session
+session optional pam_gnome_keyring.so auto_start
+
+# End /etc/pam.d/gdm-password
diff --git a/data/pam-lfs/gdm-smartcard.pam b/data/pam-lfs/gdm-smartcard.pam
new file mode 100644
index 0000000..f2c1b64
--- /dev/null
+++ b/data/pam-lfs/gdm-smartcard.pam
@@ -0,0 +1,17 @@
+# Begin /etc/pam.d/gdm-smartcard
+
+auth requisite pam_nologin.so
+auth required pam_env.so
+
+auth required pam_succeed_if.so uid >= 1000 quiet
+auth required pam_pkcs11.so wait_for_card card_only
+auth optional pam_gnome_keyring.so
+
+account include system-account
+password required pam_pkcs11.so
+
+session required pam_limits.so
+session include system-session
+session optional pam_gnome_keyring.so auto_start
+
+# End /etc/pam.d/gdm-smartcard