gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #248446 from aanderse/pam_mkhomedir

Browse Source
This commit is contained in:
Franz Pletz
2023-08-11 04:52:12 +02:00
committed by GitHub
parent d08bb79771 9d56365451
commit 68e658f7fc
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/security/pam.nix
+11 -1
View File
@@ -697,7 +697,7 @@ let
session required ${config.systemd.package}/lib/security/pam_systemd_home.so
'' +
optionalString cfg.makeHomeDir ''
session required ${pkgs.pam}/lib/security/pam_mkhomedir.so silent skel=${config.security.pam.makeHomeDir.skelDirectory} umask=0077
session required ${pkgs.pam}/lib/security/pam_mkhomedir.so silent skel=${config.security.pam.makeHomeDir.skelDirectory} umask=${config.security.pam.makeHomeDir.umask}
'' +
optionalString cfg.updateWtmp ''
session required ${pkgs.pam}/lib/security/pam_lastlog.so silent
@@ -902,6 +902,16 @@ in
'';
};
security.pam.makeHomeDir.umask = mkOption {
type = types.str;
default = "0077";
example = "0022";
description = lib.mdDoc ''
The user file mode creation mask to use on home directories
newly created by `pam_mkhomedir`.
'';
};
security.pam.enableSSHAgentAuth = mkOption {
type = types.bool;
default = false;