nixos/pam: make pam_loginuid optional if in container

This commit is contained in:
Jaka Hudoklin 2014-06-27 10:52:01 +02:00 committed by Eelco Dolstra
parent 77314b7eb2
commit 16f801cba9

View File

@ -189,7 +189,9 @@ let
session required pam_env.so envfile=${config.system.build.pamEnvironment}
session required pam_unix.so
${optionalString cfg.setLoginUid
"session required pam_loginuid.so"}
"session ${
if config.boot.isContainer then "optional" else "required"
} pam_loginuid.so"}
${optionalString cfg.updateWtmp
"session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}
${optionalString config.users.ldap.enable