Commit 5b8439f9 authored Sep 24, 2023 by Majiir Paktu

nixos/pam: add settings option for common argument styles

Adds easily overrideable settings for the most common PAM argument
styles. These are:

- Flag (e.g. "use_first_pass"): rendered for true boolean values. false
  values are ignored.

- Key-value (e.g. "action=validate"): rendered for non-null, non-boolean
  values.

Most PAM arguments can be configured this way. Others can still be
configured with the 'args' option.

parent 6eea7fb1

nixos/modules/security/pam.nix

+176 −163

File changed.

Preview size limit exceeded, changes collapsed.

nixos/tests/pam/pam-u2f.nix

+1 −1

Original line number	Diff line number	Diff line
		@@ -20,7 +20,7 @@ import ../make-test-python.nix ({ ... }:
		''
		machine.wait_for_unit("multi-user.target")
		machine.succeed(
		'egrep "auth required ./lib/security/pam_u2f.so.debug.interactive.cue.*origin=nixos-test" /etc/pam.d/ -R'
		'egrep "auth required ./lib/security/pam_u2f.so.cue.debug.interactive.*origin=nixos-test" /etc/pam.d/ -R'
		)
		'';
		})