login greeter
git clone https://git.lucas.co/cce-display-manager.git
pam/cce-display-manager (798B)
1 #%PAM-1.0
2 # No pam_gnome_keyring here, deliberately: the login keyring is unlocked by
3 # the TPM-sealed gnome-keyring-daemon unit (README, "Login keyring"), the one
4 # provider. This module started a second daemon at every login, which could
5 # not unlock the keyring (its password is the sealed one) and raced the unit.
6
7 # Legacy service name. The greeter no longer authenticates against it: the
8 # fingerprint attempt uses cce-display-manager-fprint and typed passwords use
9 # cce-display-manager-password. pam_fprintd was removed from here so that
10 # nothing can turn a fingerprint miss into a pam_unix/pam_faillock failure.
11
12 auth include system-local-login
13
14 account include system-local-login
15
16 password include system-local-login
17
18 session include system-local-login