summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorJaka Hudoklin <jakahudoklin@gmail.com>2014-06-27 10:52:01 +0200
committerEelco Dolstra <eelco.dolstra@logicblox.com>2014-06-30 11:08:39 +0200
commit16f801cba91862fd1db4857f1015607e54631303 (patch)
tree7d1b1fa83f0245415d40c365864bca408cb41acb /nixos
parent77314b7eb22487c1b2f0cb925e9aab056fd3a206 (diff)
downloadnixlib-16f801cba91862fd1db4857f1015607e54631303.tar
nixlib-16f801cba91862fd1db4857f1015607e54631303.tar.gz
nixlib-16f801cba91862fd1db4857f1015607e54631303.tar.bz2
nixlib-16f801cba91862fd1db4857f1015607e54631303.tar.lz
nixlib-16f801cba91862fd1db4857f1015607e54631303.tar.xz
nixlib-16f801cba91862fd1db4857f1015607e54631303.tar.zst
nixlib-16f801cba91862fd1db4857f1015607e54631303.zip
nixos/pam: make pam_loginuid optional if in container
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/security/pam.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index 02340fd78e8c..b1b75a0068d4 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -189,7 +189,9 @@ let
           session required pam_env.so envfile=${config.system.build.pamEnvironment}
           session required pam_unix.so
           ${optionalString cfg.setLoginUid
-              "session required pam_loginuid.so"}
+              "session ${
+                if config.boot.isContainer then "optional" else "required"
+              } pam_loginuid.so"}
           ${optionalString cfg.updateWtmp
               "session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}
           ${optionalString config.users.ldap.enable