about summary refs log tree commit diff
path: root/nixos/modules/security/pam.nix
diff options
context:
space:
mode:
authornicoo <nicoo@mur.at>2023-09-04 21:06:12 +0000
committernicoo <nicoo@mur.at>2023-11-08 19:41:37 +0000
commit19e1420e138b5a89f00eb3d7adbdf99f97ad4d57 (patch)
treef432940a09ac632a58828792a3c9e58078ab913d /nixos/modules/security/pam.nix
parentad9295157901e218f9e27b0cb14a9cb791d139d4 (diff)
nixos/sudo: Move support for `pam_ssh_agent_auth(8)` to PAM's NixOS module
Diffstat (limited to 'nixos/modules/security/pam.nix')
-rw-r--r--nixos/modules/security/pam.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index 709bb8b94a659..b7e1ea526535d 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -1531,6 +1531,10 @@ in
         (map (module: "mr ${module},"))
         concatLines
       ]);
-  };
 
+    security.sudo.extraConfig = optionalString config.security.pam.enableSSHAgentAuth ''
+      # Keep SSH_AUTH_SOCK so that pam_ssh_agent_auth.so can do its magic.
+      Defaults env_keep+=SSH_AUTH_SOCK
+    '';
+    };
 }