gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/plasma-login-manager: use absolute PAM module paths

Browse Source 
The AppArmor PAM abstraction in pam.nix asserts that all modulePath
values be absolute paths. Relative paths like "pam_nologin.so" cause
a build failure with AppArmor enabled:

  error: non-absolute PAM modulePath "pam_nologin.so" is unsupported by apparmor

GDM, SDDM, and LightDM already use absolute paths for all non-include
PAM rules. Fix plasma-login-manager to follow the same convention.
This commit is contained in:
hydroakri
2026-05-16 02:21:07 +00:00
parent eca5ee79d6
commit cffbe41359
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/display-managers/plasma-login-manager.nix
+7 -7
View File
@@ -125,12 +125,12 @@ in
{
name = "nologin";
control = "requisite";
modulePath = "pam_nologin.so";
modulePath = "${config.security.pam.package}/lib/security/pam_nologin.so";
}
{
name = "permit";
control = "required";
modulePath = "pam_permit.so";
modulePath = "${config.security.pam.package}/lib/security/pam_permit.so";
}
];
@@ -166,7 +166,7 @@ in
# Load environment from /etc/environment and ~/.pam_environment
name = "env";
control = "required";
modulePath = "pam_env.so";
modulePath = "${config.security.pam.package}/lib/security/pam_env.so";
settings.conffile = "/etc/pam/environment";
settings.readenv = 0;
}
@@ -174,7 +174,7 @@ in
# Always let the greeter start without authentication
name = "permit";
control = "required";
modulePath = "pam_permit.so";
modulePath = "${config.security.pam.package}/lib/security/pam_permit.so";
}
];
@@ -183,7 +183,7 @@ in
# No action required for account management
name = "permit";
control = "required";
modulePath = "pam_permit.so";
modulePath = "${config.security.pam.package}/lib/security/pam_permit.so";
}
];
@@ -192,7 +192,7 @@ in
# Can't change password
name = "deny";
control = "required";
modulePath = "pam_deny.so";
modulePath = "${config.security.pam.package}/lib/security/pam_deny.so";
}
];
@@ -201,7 +201,7 @@ in
# Setup session
name = "unix";
control = "required";
modulePath = "pam_unix.so";
modulePath = "${config.security.pam.package}/lib/security/pam_unix.so";
}
{
name = "systemd";