summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRay Strode <rstrode@redhat.com>2016-04-01 13:27:38 -0400
committerRay Strode <rstrode@redhat.com>2016-04-01 13:31:55 -0400
commit74f6145cf2f71e6f9a2f81133ca1a19b146995a8 (patch)
tree8ee3bb864074dc118be241bd541a3c270f02f77c
parent09fec3219af6147fd5a37dc21595f4eeaa1a9ba6 (diff)
downloadgdm-74f6145cf2f71e6f9a2f81133ca1a19b146995a8.tar.gz
pam-redhat: don't run full account and password stacks for gdm session
The login screen user account won't ever have a password or get locked, so there's no reason to run the system-auth password and account stacks for the login screen launch environment. https://bugzilla.gnome.org/show_bug.cgi?id=764472
-rw-r--r--data/pam-redhat/gdm-launch-environment.pam4
1 files changed, 2 insertions, 2 deletions
diff --git a/data/pam-redhat/gdm-launch-environment.pam b/data/pam-redhat/gdm-launch-environment.pam
index a5130ea6..2e9ea2b9 100644
--- a/data/pam-redhat/gdm-launch-environment.pam
+++ b/data/pam-redhat/gdm-launch-environment.pam
@@ -2,8 +2,8 @@
auth required pam_env.so
auth required pam_permit.so
auth include postlogin
-account include system-auth
-password include system-auth
+account required pam_permit.so
+password required pam_permit.so
session optional pam_keyinit.so force revoke
session include system-auth
session include postlogin