(In reply to Josef M�llers from comment #6) > Re comment #3: > Why should it be in the stack? where else would you want to it to be ? The kernel keyring stuff is a general infra provided by the kernel which needs special care during session creation so that all applications can rely on it if needed. > The lengthy discussion in Bug #1045886 shows that it would not be advisable > to just automatically add pam_keyinit to pam config files! what did you make think so ?