From 3c5eca74e04fad95927a07e13eec0744f407584d Mon Sep 17 00:00:00 2001 From: Eric Hameleers Date: Tue, 26 May 2020 13:25:55 +0200 Subject: SDDM: updated PAM configs allow root login --- kde/post-install/sddm-qt5/pam.d/sddm-autologin | 36 ++++++++++++++++---------- 1 file changed, 23 insertions(+), 13 deletions(-) (limited to 'kde/post-install/sddm-qt5/pam.d/sddm-autologin') diff --git a/kde/post-install/sddm-qt5/pam.d/sddm-autologin b/kde/post-install/sddm-qt5/pam.d/sddm-autologin index fe410bb..fd926ef 100644 --- a/kde/post-install/sddm-qt5/pam.d/sddm-autologin +++ b/kde/post-install/sddm-qt5/pam.d/sddm-autologin @@ -1,14 +1,24 @@ #%PAM-1.0 -auth required pam_env.so -auth include system-auth -auth include postlogin --auth optional pam_gnome_keyring.so --auth optional pam_kwallet5.so -account include system-auth -password include system-auth -session include system-auth -session required pam_loginuid.so -session optional pam_ck_connector.so nox11 -session include postlogin --session optional pam_gnome_keyring.so auto_start --session optional pam_kwallet5.so auto_start +auth requisite pam_nologin.so +auth required pam_env.so +auth required pam_shells.so + +# Uncomment this line to restrict autologin to users with a UID greater +# than 999 (in other words, don't allow autologin for root): +#auth required pam_succeed_if.so uid >= 1000 quiet + +auth required pam_permit.so +-auth optional pam_gnome_keyring.so +-auth optional pam_kwallet5.so + +account include system-auth + +password include system-auth + +session substack system-auth +session required pam_loginuid.so +session optional pam_ck_connector.so nox11 +-session optional pam_gnome_keyring.so auto_start +-session optional pam_kwallet5.so auto_start +session include postlogin + -- cgit v1.2.3