diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2023-08-11 04:52:12 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-08-11 04:52:12 +0200 |
| commit | 68e658f7fc9f744ac9ecfe498189ce84db1f6f99 (patch) | |
| tree | 0d40396614ba52caf607f37fef3722776855af8c /nixos | |
| parent | d08bb79771e63e7180991d59c803441df3b55438 (diff) | |
| parent | 9d56365451588555cb21a50f28dbeac6c2d628d0 (diff) | |
Merge pull request #248446 from aanderse/pam_mkhomedir
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/security/pam.nix | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix index ee260a097c691..a431817fe1bb3 100644 --- a/nixos/modules/security/pam.nix +++ b/nixos/modules/security/pam.nix @@ -697,7 +697,7 @@ let session required ${config.systemd.package}/lib/security/pam_systemd_home.so '' + optionalString cfg.makeHomeDir '' - session required ${pkgs.pam}/lib/security/pam_mkhomedir.so silent skel=${config.security.pam.makeHomeDir.skelDirectory} umask=0077 + session required ${pkgs.pam}/lib/security/pam_mkhomedir.so silent skel=${config.security.pam.makeHomeDir.skelDirectory} umask=${config.security.pam.makeHomeDir.umask} '' + optionalString cfg.updateWtmp '' session required ${pkgs.pam}/lib/security/pam_lastlog.so silent @@ -902,6 +902,16 @@ in ''; }; + security.pam.makeHomeDir.umask = mkOption { + type = types.str; + default = "0077"; + example = "0022"; + description = lib.mdDoc '' + The user file mode creation mask to use on home directories + newly created by `pam_mkhomedir`. + ''; + }; + security.pam.enableSSHAgentAuth = mkOption { type = types.bool; default = false; |