From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jone Subject: Re: Customize PAM configuration Date: Sat, 10 Aug 2019 18:55:57 +0000 Message-ID: References: <87o90xkrl8.fsf@ngyro.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:47174) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hwTfc-0003iF-N2 for help-guix@gnu.org; Sat, 10 Aug 2019 11:52:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hwTfb-0003Mr-Ek for help-guix@gnu.org; Sat, 10 Aug 2019 11:52:40 -0400 Received: from mail-ot1-x32a.google.com ([2607:f8b0:4864:20::32a]:45409) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hwTfb-0003LO-78 for help-guix@gnu.org; Sat, 10 Aug 2019 11:52:39 -0400 Received: by mail-ot1-x32a.google.com with SMTP id m97so10835974otm.12 for ; Sat, 10 Aug 2019 08:52:38 -0700 (PDT) In-Reply-To: <87o90xkrl8.fsf@ngyro.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Timothy Sample Cc: help-guix Thanks, Timothy! And sorry for my bad english. > I don=E2=80=99t fully understand what you are trying to do It's elementary! One password for any "local services", such as sudo, GPG encryption, etc. The password is entered once at login and exported to environment variable. As a result, password is available during the user session (for some automation with bash scripts). >From a security perspective, this well normal decision, in my opinion. Thanks for this example. I haven't used G-Expressions yet. In my case, the final script will of course be ordinary bash script (maybe in ~/). What can you say about this idea?