Bug ID 1225290
Summary pam-config: pam_fscrypt in wrong priority
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware All
OS openSUSE Tumbleweed
Status NEW
Severity Normal
Priority P5 - None
Component Basesystem
Assignee screening-team-bugs@suse.de
Reporter joseskvolpe@gmail.com
QA Contact qa-bugs@suse.de
Target Milestone ---
Found By ---
Blocker ---

pam_fscrypt.so must be set to execute before any module that requires the user
home dir to be mounted, but some modules are found to execute before it.

I'm using Tumbleweeb with the basic KDE packages. After setting-up fscrypt with
PAM, i found out it's module is not inserted by pam-config in a proper order.
In my context, pam_kwallet5.so is set to run before pam_fscryt.so, as result,
kwallet asks me for a password upon login. Editing /etc/pam.d/common-session to
change the orders is a workaround, but i have to modify it every system update.

The original file is found as:
(...)
session optional     pam_kwallet5.so
session optional     pam_fscrypt.so
(...)

It should be:
(...)
session optional     pam_fscrypt.so
session optional     pam_kwallet5.so
(...)


EXPECTED RESULTS: The user home directory must be unlocked by fscrypt before
running kwallet5 and any other PAM modules that requires the directory to be
accessible. This configuration must be automatically set by pam-config.

CURRENT RESULTS: SystemD attempts to execute kwallet5 and other modules before
unlocking the needed user directory as the configuration defined by pam-config.


You are receiving this mail because: