Blame SOURCES/pam-gnome-keyring.patch

01018b
From 3a2300353e5f6e81f3e0cdf9a86747516d20d41d Mon Sep 17 00:00:00 2001
01018b
From: Ray Strode <rstrode@redhat.com>
01018b
Date: Wed, 12 Mar 2014 15:03:12 -0400
01018b
Subject: [PATCH] pam: run pam_gnome_keyring in password stack at login time
01018b
01018b
This way it has the hook it needs to deal with password
01018b
changes in the middle of first login.
01018b
---
01018b
 data/pam-redhat/gdm-password.pam | 1 +
01018b
 1 file changed, 1 insertion(+)
01018b
01018b
diff --git a/data/pam-redhat/gdm-password.pam b/data/pam-redhat/gdm-password.pam
01018b
index 6e20568..99ad2c6 100644
01018b
--- a/data/pam-redhat/gdm-password.pam
01018b
+++ b/data/pam-redhat/gdm-password.pam
01018b
@@ -1,20 +1,21 @@
01018b
 auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
01018b
 auth        substack      password-auth
01018b
 auth        optional      pam_gnome_keyring.so
01018b
 auth        include       postlogin
01018b
 
01018b
 account     required      pam_nologin.so
01018b
 account     include       password-auth
01018b
 
01018b
-password    include       password-auth
01018b
+password    substack      password-auth
01018b
+password    optional      pam_gnome_keyring.so use_authtok
01018b
 
01018b
 session     required      pam_selinux.so close
01018b
 session     required      pam_loginuid.so
01018b
 session     optional      pam_console.so
01018b
 -session    optional    pam_ck_connector.so
01018b
 session     required      pam_selinux.so open
01018b
 session     optional      pam_keyinit.so force revoke
01018b
 session     required      pam_namespace.so
01018b
 session     include       password-auth
01018b
 session     optional      pam_gnome_keyring.so auto_start
01018b
 session     include       postlogin
01018b
-- 
01018b
1.8.4.2
01018b