data: add rest of LFS pam patch

I misapplied the previous patch and broke the build for everyone
but me.

This commit fixes that.

https://bugzilla.gnome.org/show_bug.cgi?id=683283

6 files changed, 103 insertions, 0 deletions

diff --git a/data/pam-lfs/gdm-autologin.pam b/data/pam-lfs/gdm-autologin.pam
new file mode 100644
index 00000000..42ea4d35
--- /dev/null
+++ b/data/pam-lfs/gdm-autologin.pam
@@ -0,0 +1,17 @@
+# Begin /etc/pam.d/gdm-autologin
+
+auth     requisite      pam_nologin.so
+auth     required       pam_env.so
+
+auth     required       pam_succeed_if.so uid >= 1000 quiet
+auth     required       pam_permit.so
+
+account  include        system-account
+
+password include        system-password
+
+session  optional       pam_keyinit.so revoke
+session  required       pam_limits.so
+session  include        system-session
+
+# End /etc/pam.d/gdm-autologin
diff --git a/data/pam-lfs/gdm-fingerprint.pam b/data/pam-lfs/gdm-fingerprint.pam
new file mode 100644
index 00000000..45a74905
--- /dev/null
+++ b/data/pam-lfs/gdm-fingerprint.pam
@@ -0,0 +1,18 @@
+# Begin /etc/pam.d/gdm-fingerprint
+
+auth     requisite      pam_nologin.so
+auth     required       pam_env.so
+
+auth     requisite      pam_fprintd.so
+auth     required       pam_succeed_if.so uid >= 1000 quiet
+auth     required       pam_deny.so
+
+account  include        system-account
+
+password required       pam_deny.so
+
+session  optional       pam_keyinit.so revoke
+session  required       pam_limits.so
+session  include        system-session
+
+# End /etc/pam.d/gdm-fingerprint
diff --git a/data/pam-lfs/gdm-launch-environment.pam b/data/pam-lfs/gdm-launch-environment.pam
new file mode 100644
index 00000000..93827fc6
--- /dev/null
+++ b/data/pam-lfs/gdm-launch-environment.pam
@@ -0,0 +1,14 @@
+# Begin /etc/pam.d/gdm-welcome
+
+auth     required       pam_env.so
+auth     required       pam_permit.so
+
+account  required       pam_nologin.so
+account  include        system-account
+
+password required       pam_deny.so
+
+session  required       pam_loginuid.so
+session  optional       pam_keyinit.so force revoke
+
+# End /etc/pam.d/gdm-welcome
diff --git a/data/pam-lfs/gdm-password.pam b/data/pam-lfs/gdm-password.pam
new file mode 100644
index 00000000..34ba17e1
--- /dev/null
+++ b/data/pam-lfs/gdm-password.pam
@@ -0,0 +1,18 @@
+# Begin /etc/pam.d/gdm-password
+
+auth     requisite      pam_nologin.so
+auth     required       pam_env.so
+
+auth     required       pam_succeed_if.so uid >= 1000 quiet
+auth     include        system-auth
+auth     optional       pam_gnome_keyring.so
+
+account  include        system-account
+
+session  required       pam_limits.so
+session  include        system-session
+session  optional       pam_gnome_keyring.so auto_start
+
+password include        system-password
+
+# End /etc/pam.d/gdm-password
diff --git a/data/pam-lfs/gdm-smartcard.pam b/data/pam-lfs/gdm-smartcard.pam
new file mode 100644
index 00000000..69ed9343
--- /dev/null
+++ b/data/pam-lfs/gdm-smartcard.pam
@@ -0,0 +1,18 @@
+# Begin /etc/pam.d/gdm-smartcard
+
+auth     requisite      pam_nologin.so
+auth     required       pam_env.so
+
+auth     requisite      pam_pkcs11.so wait_for_card card_only
+auth     required       pam_succeed_if.so uid >= 1000 quiet
+auth     required       pam_deny.so
+
+account  include        system-account
+
+password required       pam_pkcs11.so
+
+session  optional       pam_keyinit.so revoke
+session  required       pam_limits.so
+session  include        system-session
+
+# End /etc/pam.d/gdm-smartcard
diff --git a/data/pam-lfs/gdm.pam b/data/pam-lfs/gdm.pam
new file mode 100644
index 00000000..4d26c431
--- /dev/null
+++ b/data/pam-lfs/gdm.pam
@@ -0,0 +1,18 @@
+# Begin /etc/pam.d/gdm
+
+auth     requisite      pam_nologin.so
+auth     required       pam_env.so
+
+auth     required       pam_succeed_if.so uid >= 1000 quiet
+auth     include        system-auth
+auth     optional       pam_gnome_keyring.so
+
+account  include        system-account
+
+session  required       pam_limits.so
+session  include        system-session
+session  optional       pam_gnome_keyring.so auto_start
+
+password include        system-password
+
+# End /etc/pam.d/gdm