diff options
| author | Jan Alexander Steffens (heftig) <jan.steffens@gmail.com> | 2019-09-10 20:41:10 +0000 |
|---|---|---|
| committer | Ray Strode <halfline@gmail.com> | 2020-07-15 20:23:28 +0000 |
| commit | 130d09b8e7ed356f728fc6b67a71633ab018a83a (patch) | |
| tree | 22e157b55dec22aa537d93d7e30af015df99eee8 /data | |
| parent | 6848d92375d82e8d83b846b07d01e1e00afcef09 (diff) | |
| download | gdm-130d09b8e7ed356f728fc6b67a71633ab018a83a.tar.gz | |
pam-arch: Restrict greeter service to the gdm user
Copied from pam-exherbo.
Diffstat (limited to 'data')
| -rw-r--r-- | data/pam-arch/gdm-launch-environment.pam | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/data/pam-arch/gdm-launch-environment.pam b/data/pam-arch/gdm-launch-environment.pam index 89521472..d59c9cb9 100644 --- a/data/pam-arch/gdm-launch-environment.pam +++ b/data/pam-arch/gdm-launch-environment.pam @@ -1,10 +1,13 @@ auth required pam_env.so +auth required pam_succeed_if.so audit quiet_success user = gdm auth optional pam_permit.so +account required pam_succeed_if.so audit quiet_success user = gdm account optional pam_permit.so password required pam_deny.so session optional pam_keyinit.so force revoke +session required pam_succeed_if.so audit quiet_success user = gdm session required pam_systemd.so session optional pam_permit.so |