From 525d70b93b6c6b78a3ced92f72e264b4be1ed3de Mon Sep 17 00:00:00 2001 From: Nicolas Graves Date: Sat, 13 Nov 2021 20:09:02 +0100 Subject: [PATCH 2/3] Trying to fix pam-gnupg configuration. --- gnu/system/pam.scm | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/gnu/system/pam.scm b/gnu/system/pam.scm index a31daada59..d6d02e59f5 100644 --- a/gnu/system/pam.scm +++ b/gnu/system/pam.scm @@ -235,8 +235,9 @@ (module "pam_unix.so") unix)) (if gnupg? (list (pam-entry - (control "required") - (module (file-append pam-gnupg "/lib/security/pam_gnupg.so")))) + (control "optional") + (module (file-append pam-gnupg "/lib/security/pam_gnupg.so")) + (arguments '("store-only")))) '()))) (password (list (pam-entry (control "required") @@ -255,12 +256,13 @@ (module "pam_motd.so") (control "required") (module "pam_loginuid.so"))) '()) + ,env ,unix ,@(if gnupg? (list (pam-entry - (control "required") + (control "optional") (module (file-append pam-gnupg "/lib/security/pam_gnupg.so")))) '()) - ,env ,unix)))))) + )))))) (define (rootok-pam-service command) "Return a PAM service for COMMAND such that 'root' does not need to -- 2.33.1