diff options
| author | rfjakob | 2016-10-09 21:23:17 +0200 |
|---|---|---|
| committer | rfjakob | 2016-10-09 21:23:17 +0200 |
| commit | af4346d4527e2d1a27c038cada58576aec428c48 (patch) | |
| tree | 6c254c35110dc8072d4b921a032d97cb24588108 | |
| parent | 436353d888f560dc703fb89bb87600c8191a587c (diff) | |
Updated Mounting on login using pam_mount (markdown)
| -rw-r--r-- | Mounting-on-login-using-pam_mount.md | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/Mounting-on-login-using-pam_mount.md b/Mounting-on-login-using-pam_mount.md index d499975..9537af6 100644 --- a/Mounting-on-login-using-pam_mount.md +++ b/Mounting-on-login-using-pam_mount.md @@ -29,8 +29,8 @@ PAM config ---------- An example `/etc/pam.d/sshd` on Fedora 24 is shown below. Basically, pam_mount must be called two times: -1) as the last element in "auth" so it gets the password. -2) as the last element in "session", where it performs the actual mount. + 1. As the last element in "auth" so it gets the password. + 2. As the last element in "session", where it performs the actual mount. ``` #%PAM-1.0 @@ -39,7 +39,9 @@ auth substack password-auth auth include postlogin # Used with polkit to reauthorize users in remote sessions -auth optional pam_reauthorize.so prepare -auth optional pam_mount.so +# vvv insert here # +auth optional pam_mount.so +# ^^^ insert here # account required pam_nologin.so account include password-auth password include password-auth @@ -54,7 +56,9 @@ session include password-auth session include postlogin # Used with polkit to reauthorize users in remote sessions -session optional pam_reauthorize.so prepare +# vvv insert here # session optional pam_mount.so +# ^^^ insert here # ``` Encrypting the whole home directory |