https://bugzilla.suse.com/show_bug.cgi?id=1225290 Bug ID: 1225290 Summary: pam-config: pam_fscrypt in wrong priority Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs@suse.de Reporter: joseskvolpe@gmail.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- pam_fscrypt.so must be set to execute before any module that requires the user home dir to be mounted, but some modules are found to execute before it. I'm using Tumbleweeb with the basic KDE packages. After setting-up fscrypt with PAM, i found out it's module is not inserted by pam-config in a proper order. In my context, pam_kwallet5.so is set to run before pam_fscryt.so, as result, kwallet asks me for a password upon login. Editing /etc/pam.d/common-session to change the orders is a workaround, but i have to modify it every system update. The original file is found as: (...) session optional pam_kwallet5.so session optional pam_fscrypt.so (...) It should be: (...) session optional pam_fscrypt.so session optional pam_kwallet5.so (...) EXPECTED RESULTS: The user home directory must be unlocked by fscrypt before running kwallet5 and any other PAM modules that requires the directory to be accessible. This configuration must be automatically set by pam-config. CURRENT RESULTS: SystemD attempts to execute kwallet5 and other modules before unlocking the needed user directory as the configuration defined by pam-config. -- You are receiving this mail because: You are on the CC list for the bug.