diff options
author | gnu300 | 2019-11-14 16:21:35 +0100 |
---|---|---|
committer | gnu300 | 2019-11-14 16:21:35 +0100 |
commit | 0446020d0cc5a4c33e9f7fcc2270ca85721d9296 (patch) | |
tree | 8135a04825ca2771e3658985aa101b9480d6a1b0 | |
parent | 1d744de73345210d82605defac027f722337595d (diff) |
adding information for Fedora 31 Workstation
-rw-r--r-- | Mounting-on-login-using-pam_mount.md | 41 |
1 files changed, 39 insertions, 2 deletions
diff --git a/Mounting-on-login-using-pam_mount.md b/Mounting-on-login-using-pam_mount.md index c098119..783a055 100644 --- a/Mounting-on-login-using-pam_mount.md +++ b/Mounting-on-login-using-pam_mount.md @@ -1,4 +1,4 @@ -This works on Fedora 24 with active SELinux. +This is tested on Fedora 24 and Fedora 31 Workstation with active SELinux. This also works on Ubuntu 16.04 LTS after installing libpam-mount: ``` @@ -36,10 +36,11 @@ Replace `testuser` with your user name. PAM config ---------- -An example `/etc/pam.d/sshd` on Fedora 24 is shown below. Basically, pam_mount must be called two times: +An example `/etc/pam.d/sshd` on Fedora 24 and an example `/etc/pam.d/sddm` on Fedora 31 Workstation is shown below. Basically, pam_mount must be called two times: 1. As the last element in "auth" so it gets the password. 2. As the last element in "session", where it performs the actual mount. +`/etc/pam.d/sshd` ``` #%PAM-1.0 auth required pam_sepermit.so @@ -69,6 +70,42 @@ session optional pam_mount.so # ^^^ insert here # ``` +`/etc/pam.d/sddm` +``` +auth [success=done ignore=ignore default=bad] pam_selinux_permit.so +auth substack password-auth +-auth optional pam_gnome_keyring.so +-auth optional pam_kwallet5.so +-auth optional pam_kwallet.so +auth include postlogin + +# vvv insert here # +auth optional pam_mount.so +# ^^^ insert here # + +account required pam_nologin.so +account include password-auth + +password include password-auth + +session required pam_selinux.so close +session required pam_loginuid.so +session optional pam_console.so +-session optional pam_ck_connector.so +session required pam_selinux.so open +session optional pam_keyinit.so force revoke +session required pam_namespace.so +session include password-auth +-session optional pam_gnome_keyring.so auto_start +-session optional pam_kwallet5.so auto_start +-session optional pam_kwallet.so auto_start +session include postlogin + +# vvv insert here # +session optional pam_mount.so +# ^^^ insert here # +``` + Encrypting the whole home directory ----------------------------------- |