From db4b6b70434295aa7799ac74b80a6d708d1f0ba4 Mon Sep 17 00:00:00 2001 From: Vunny Sodhi Date: Wed, 21 Jan 2026 12:27:55 +0200 Subject: [PATCH] pam_systemd_home: Use PAM_TEXT_INFO for token prompts The prompts asking the user to physically authenticate or confirm presence on a security token are informational requests for action, not error conditions. This commit changes the message type to PAM_TEXT_INFO, which is more appropriate for guiding the user through the authentication process. --- src/home/pam_systemd_home.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/home/pam_systemd_home.c b/src/home/pam_systemd_home.c index 8a4993d149..c58a343376 100644 --- a/src/home/pam_systemd_home.c +++ b/src/home/pam_systemd_home.c @@ -432,7 +432,7 @@ static int handle_generic_user_record_error( assert(secret); - (void) pam_prompt_graceful(pamh, PAM_ERROR_MSG, NULL, _("Please authenticate physically on security token of user %s."), user_name); + (void) pam_prompt_graceful(pamh, PAM_TEXT_INFO, NULL, _("Please authenticate physically on security token of user %s."), user_name); r = user_record_set_pkcs11_protected_authentication_path_permitted(secret, true); if (r < 0) @@ -443,7 +443,7 @@ static int handle_generic_user_record_error( assert(secret); - (void) pam_prompt_graceful(pamh, PAM_ERROR_MSG, NULL, _("Please confirm presence on security token of user %s."), user_name); + (void) pam_prompt_graceful(pamh, PAM_TEXT_INFO, NULL, _("Please confirm presence on security token of user %s."), user_name); r = user_record_set_fido2_user_presence_permitted(secret, true); if (r < 0) @@ -454,7 +454,7 @@ static int handle_generic_user_record_error( assert(secret); - (void) pam_prompt_graceful(pamh, PAM_ERROR_MSG, NULL, _("Please verify user on security token of user %s."), user_name); + (void) pam_prompt_graceful(pamh, PAM_TEXT_INFO, NULL, _("Please verify user on security token of user %s."), user_name); r = user_record_set_fido2_user_verification_permitted(secret, true); if (r < 0)