ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-09-22 13:08:39 +03:00
Code Issues Projects Releases Wiki Activity

nixos/phosh: Fix unrestricted login because of insecure PAM config

Browse Source 
The PAM config deployed would not check anything meaningful. Remove it
and rely on the defaults in the security.pam module to fix login with
arbitrary credentials.

Resolves: #123435
This commit is contained in:
Martin Weinelt 2021-05-18 05:40:52 +02:00
parent 15254515d0
commit ec9cfba2d3
No known key found for this signature in database
GPG Key ID: 87C1E9888F856759
1 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nixos/modules/programs/phosh.nix
View File

@ -145,15 +145,7 @@ in {
programs.feedbackd.enable = true;
# https://source.puri.sm/Librem5/phosh/-/issues/303
security.pam.services.phosh = {
text = ''
auth requisite pam_nologin.so
auth required pam_succeed_if.so user != root quiet_success
auth required pam_securetty.so
auth requisite pam_nologin.so
'';
};
security.pam.services.phosh = {};
services.gnome.core-shell.enable = true;
services.gnome.core-os-services.enable = true;