Browse Source

qrexec: ship pam configuration for debian

Debian have different base pam config files to include than Fedora.

Fixes QubesOS/qubes-issues#2903
Marek Marczykowski-Górecki 7 years ago
parent
commit
5179cbc751
2 changed files with 15 additions and 0 deletions
  1. 4 0
      qrexec/Makefile
  2. 11 0
      qrexec/qrexec.pam.debian

+ 4 - 0
qrexec/Makefile

@@ -19,5 +19,9 @@ install:
 	ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec_client_vm
 	install qrexec-fork-server $(DESTDIR)/usr/bin
 	install qubes-rpc-multiplexer $(DESTDIR)/usr/lib/qubes
+ifeq ($(shell lsb_release -is), Debian)
+	install -D -m 0644 qrexec.pam.debian $(DESTDIR)/etc/pam.d/qrexec
+else
 	install -D -m 0644 qrexec.pam $(DESTDIR)/etc/pam.d/qrexec
+endif
 

+ 11 - 0
qrexec/qrexec.pam.debian

@@ -0,0 +1,11 @@
+#%PAM-1.0
+#
+# based on /etc/pam.d/su
+auth		sufficient	pam_rootok.so
+session     required    pam_env.so readenv=1
+session     required    pam_env.so readenv=1 envfile=/etc/default/locale
+session     required    pam_limits.so
+
+@include common-auth
+@include common-account
+@include common-session