Comment # 11 on bug 1081947 from Josef M�llers

Hi Stanislav,

Can you please include pam_keyinit.so in the pam.d config files?
It should be inserted at the top of
* su-l WITH "force" (ie "session optional pam_keyinit.so force revoke")
* runuser WITHOUT "force" (ie "session optional pam_keyinit.so revoke")
* runuser-l WITH "force" (ie "session optional pam_keyinit.so force revoke")
NB "su" doesn't need it.

When you're finished, please re-assign back to me so I can trigger others.

Thanks.