|
@@ -330,27 +330,6 @@ update_finalize() {
|
|
|
|
|
|
/usr/lib/qubes/update-proxy-configs
|
|
|
|
|
|
- # Archlinux specific: Update pam.d configuration for su to enable systemd-login wrapper
|
|
|
- # Also remove pam_unix.so from su configuration
|
|
|
- # as system-login (which include system-auth) already gives pam_unix.so
|
|
|
- # with more appropriate parameters (fix the missing nullok parameter)
|
|
|
-
|
|
|
- if grep -q pam_unix.so /etc/pam.d/su; then
|
|
|
- echo "Fixing pam.d"
|
|
|
- cat <<EOF > /etc/pam.d/su
|
|
|
-#%PAM-1.0
|
|
|
-auth sufficient pam_rootok.so
|
|
|
-# Uncomment the following line to implicitly trust users in the "wheel" group.
|
|
|
-#auth sufficient pam_wheel.so trust use_uid
|
|
|
-# Uncomment the following line to require a user to be in the "wheel" group.
|
|
|
-#auth required pam_wheel.so use_uid
|
|
|
-auth include system-login
|
|
|
-account include system-login
|
|
|
-session include system-login
|
|
|
-EOF
|
|
|
- cp /etc/pam.d/su /etc/pam.d/su-l
|
|
|
- fi
|
|
|
-
|
|
|
# Archlinux specific: ensure tty1 is enabled
|
|
|
rm -f /etc/systemd/system/getty.target.wants/getty@tty*.service
|
|
|
systemctl enable getty\@tty1.service
|