gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pam: add support for oo7

Browse Source
This commit is contained in:
Salva
2026-05-31 23:34:50 -06:00
parent c840b30162
commit 0b7b877e9a
1 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/security/pam.nix
+30
View File
@@ -678,6 +678,14 @@ let
'';
};
oo7 = {
enable = lib.mkEnableOption ''
automatically unlock the user's default Session Keyring using pam_oo7.
If the user's login password does not match their keyring password,
oo7 will prompt separately after login.
'';
};
enableUMask = lib.mkOption {
default = config.security.pam.enableUMask;
defaultText = lib.literalExpression "config.security.pam.enableUMask";
@@ -1198,6 +1206,7 @@ let
|| cfg.pamMount
|| cfg.kwallet.enable
|| cfg.enableGnomeKeyring
|| cfg.oo7.enable
|| config.services.intune.enable
|| cfg.googleAuthenticator.enable
|| cfg.gnupg.enable
@@ -1261,6 +1270,12 @@ let
control = "optional";
modulePath = "${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so";
}
{
name = "oo7";
enable = cfg.oo7.enable;
control = "optional";
modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
}
{
name = "intune";
enable = config.services.intune.enable;
@@ -1477,6 +1492,12 @@ let
use_authtok = true;
};
}
{
name = "oo7";
enable = cfg.oo7.enable;
control = "optional";
modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
}
];
session = utils.pam.autoOrderRules [
@@ -1695,6 +1716,15 @@ let
auto_start = true;
};
}
{
name = "oo7";
enable = cfg.oo7.enable;
control = "optional";
modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
settings = {
auto_start = true;
};
}
{
name = "gnupg";
enable = cfg.gnupg.enable;