Skip to content

Commit

Permalink
Do not add pam_namespace into /etc/pam.d/postlogin in Slackware
Browse files Browse the repository at this point in the history
pam_namespace should be the last line for session group and Slackware's
configs include other session modules after including postlogin.
  • Loading branch information
pyllyukko committed Nov 8, 2024
1 parent 931ee54 commit ca1e5ad
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions tasks/pam.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,10 @@
- pam
- slackware

- name: Add pam_umask, pam_cgroup & pam_namespace to /etc/pam.d/postlogin (Slackware)
# NOTE: We can't add pam_namespace into /etc/pam.d/postlogin, as it should be
# last line for session group (see PAM_NAMESPACE(8)) and Slackware's
# configurations include postlogin before other session modules.
- name: Add pam_umask & pam_cgroup to /etc/pam.d/postlogin (Slackware)
when: ansible_distribution == "Slackware"
become: true
ansible.builtin.lineinfile:
Expand All @@ -59,7 +62,6 @@
with_dict:
umask: optional
cgroup: optional
namespace: required
tags:
- configuration
- pam
Expand Down

0 comments on commit ca1e5ad

Please sign in to comment.