diff options
author | Ray Strode <rstrode@redhat.com> | 2016-08-30 15:58:15 -0400 |
---|---|---|
committer | Ray Strode <rstrode@redhat.com> | 2016-08-30 16:40:01 -0400 |
commit | aa7fbd983aa0a6e7b8208530e2e64a4faa55984d (patch) | |
tree | 8260fe3884da48ff0e7124f8ebab1773220ce736 | |
parent | bb12416da1f6e58bda1762eca956b5c61f36d180 (diff) | |
download | gdm-aa7fbd983aa0a6e7b8208530e2e64a4faa55984d.tar.gz |
pam: don't call into pam_unix if pam_gdm fails for autolgoin
If pam_gdm fails we shouldn't call into pam_unix since it can lead
to the system asking for a password, and autologin isn't equipped for
that.
This commit changes the pam configuration to jump to pam_permit if
pam_gdm fails.
https://bugzilla.gnome.org/show_bug.cgi?id=770612
-rw-r--r-- | data/pam-exherbo/gdm-autologin.pam | 2 | ||||
-rw-r--r-- | data/pam-redhat/gdm-autologin.pam | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/data/pam-exherbo/gdm-autologin.pam b/data/pam-exherbo/gdm-autologin.pam index 08f14a6b..61f8e547 100644 --- a/data/pam-exherbo/gdm-autologin.pam +++ b/data/pam-exherbo/gdm-autologin.pam @@ -2,7 +2,7 @@ # except for the authentication method, which is: # always permit login -auth optional pam_gdm.so +auth [success=ok default=2] pam_gdm.so auth substack system-local-login -auth optional pam_gnome_keyring.so auth sufficient pam_permit.so diff --git a/data/pam-redhat/gdm-autologin.pam b/data/pam-redhat/gdm-autologin.pam index c2efea86..fbc9d9ca 100644 --- a/data/pam-redhat/gdm-autologin.pam +++ b/data/pam-redhat/gdm-autologin.pam @@ -1,5 +1,5 @@ #%PAM-1.0 -auth optional pam_gdm.so +auth [success=ok default=2] pam_gdm.so auth substack password-auth auth optional pam_gnome_keyring.so auth sufficient pam_permit.so |