Unverified Commit 45081488 authored by Sandro Jäckel's avatar Sandro Jäckel Committed by GitHub
Browse files

nixos/pam: add zfs.mountRecursively option (#414197)

parents 5a2cd630 76f5b40d

nixos/modules/security/pam.nix

+11 −0
Original line number Diff line number Diff line
@@ -1011,6 +1011,7 @@ let 
                      modulePath = "${config.boot.zfs.package}/lib/security/pam_zfs_key.so";

                      settings = {

                        inherit (config.security.pam.zfs) homes;

                        mount_recursively = config.security.pam.zfs.mountRecursively;

                      };

                    }

                    {
@@ -1202,6 +1203,7 @@ let 
                modulePath = "${config.boot.zfs.package}/lib/security/pam_zfs_key.so";

                settings = {

                  inherit (config.security.pam.zfs) homes;

                  mount_recursively = config.security.pam.zfs.mountRecursively;

                };

              }

              {
@@ -1362,6 +1364,7 @@ let 
                settings = {

                  inherit (config.security.pam.zfs) homes;

                  nounmount = config.security.pam.zfs.noUnmount;

                  mount_recursively = config.security.pam.zfs.mountRecursively;

                };

              }

              {
@@ -2195,6 +2198,14 @@ in 
          Do not unmount home dataset on logout.

        '';

      };



      mountRecursively = lib.mkOption {

        default = false;

        type = lib.types.bool;

        description = ''

          Mount child datasets of home dataset.

        '';

      };

    };



    security.pam.enableEcryptfs = lib.mkEnableOption "eCryptfs PAM module (mounting ecryptfs home directory on login)";