factory: include pam_keyinit.so in PAM factory configuration

We use the keyring, so let's make sure it gets properly initialized for sessions in factory reset mode.
2019-07-13 11:06:24 +02:00
parent 29d30ae7b6
commit 4c92bf408d
1 changed files with 1 additions and 0 deletions
@@ -13,6 +13,7 @@ account  required   pam_permit.so
 password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
 password required   pam_deny.so

+-session optional   pam_keyinit.so revoke
 -session optional   pam_loginuid.so
 -session optional   pam_systemd.so
 session  sufficient pam_unix.so