From 74f6145cf2f71e6f9a2f81133ca1a19b146995a8 Mon Sep 17 00:00:00 2001 From: Ray Strode Date: Fri, 1 Apr 2016 13:27:38 -0400 Subject: pam-redhat: don't run full account and password stacks for gdm session The login screen user account won't ever have a password or get locked, so there's no reason to run the system-auth password and account stacks for the login screen launch environment. https://bugzilla.gnome.org/show_bug.cgi?id=764472 --- data/pam-redhat/gdm-launch-environment.pam | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/data/pam-redhat/gdm-launch-environment.pam b/data/pam-redhat/gdm-launch-environment.pam index a5130ea6..2e9ea2b9 100644 --- a/data/pam-redhat/gdm-launch-environment.pam +++ b/data/pam-redhat/gdm-launch-environment.pam @@ -2,8 +2,8 @@ auth required pam_env.so auth required pam_permit.so auth include postlogin -account include system-auth -password include system-auth +account required pam_permit.so +password required pam_permit.so session optional pam_keyinit.so force revoke session include system-auth session include postlogin -- cgit v1.2.1