nixos/pam: make pam_loginuid optional if in container
This commit is contained in:
parent
77314b7eb2
commit
16f801cba9
@ -189,7 +189,9 @@ let
|
|||||||
session required pam_env.so envfile=${config.system.build.pamEnvironment}
|
session required pam_env.so envfile=${config.system.build.pamEnvironment}
|
||||||
session required pam_unix.so
|
session required pam_unix.so
|
||||||
${optionalString cfg.setLoginUid
|
${optionalString cfg.setLoginUid
|
||||||
"session required pam_loginuid.so"}
|
"session ${
|
||||||
|
if config.boot.isContainer then "optional" else "required"
|
||||||
|
} pam_loginuid.so"}
|
||||||
${optionalString cfg.updateWtmp
|
${optionalString cfg.updateWtmp
|
||||||
"session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}
|
"session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}
|
||||||
${optionalString config.users.ldap.enable
|
${optionalString config.users.ldap.enable
|
||||||
|
Loading…
x
Reference in New Issue
Block a user