From 4e26054ff541cd9903fd00600ca85bab9131df62 Mon Sep 17 00:00:00 2001
From: Richard Marko <srk@48.io>
Date: Thu, 2 Nov 2017 01:35:00 +0100
Subject: [PATCH] pam, lxcfs: enable pam_cgfs

Related to #30023
---
 nixos/modules/security/pam.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index 5ded36329f3..dfc3246a735 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -351,6 +351,8 @@ let
           ${optionalString (cfg.enableKwallet)
               ("session optional ${pkgs.plasma5.kwallet-pam}/lib/security/pam_kwallet5.so" +
                " kwalletd=${pkgs.libsForQt5.kwallet.bin}/bin/kwalletd5")}
+          ${optionalString (config.virtualisation.lxc.lxcfs.enable)
+               "session optional ${pkgs.lxcfs}/lib/security/pam_cgfs.so -c freezer,memory,name=systemd,unified,cpuset"}
         '');
     };