diff options
| author | nicoo <nicoo@mur.at> | 2023-12-24 15:16:29 +0000 |
|---|---|---|
| committer | nicoo <nicoo@mur.at> | 2023-12-30 22:19:38 +0000 |
| commit | 607679c6d3ff1c18b28f9cc61356d0c4d95378f3 (patch) | |
| tree | df20d05b1ba965da17d622c60c7a193fd484cba7 /nixos/modules/security | |
| parent | 3ff2ce71b8f848da4907df074f9a69d453657690 (diff) | |
nixos/pam: Assert that `authorizedKeysFiles` is non-empty when using `pam_ssh_agent_auth`
Diffstat (limited to 'nixos/modules/security')
| -rw-r--r-- | nixos/modules/security/pam.nix | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix index c99615d5a6362..2f777f874f23e 100644 --- a/nixos/modules/security/pam.nix +++ b/nixos/modules/security/pam.nix @@ -1456,6 +1456,13 @@ in `security.pam.zfs.enable` requires enabling ZFS (`boot.zfs.enabled` or `boot.zfs.enableUnstable`). ''; } + { + assertion = config.security.pam.enableSSHAgentAuth -> config.services.openssh.authorizedKeysFiles != []; + message = '' + `security.pam.enableSSHAgentAuth` requires `services.openssh.authorizedKeysFiles` to be a non-empty list. + Did you forget to set `services.openssh.enable` ? + ''; + } ]; environment.systemPackages = |