PAM: Difference between revisions
(Polkit authentication agents such as polkit-gnome won't run without PAM, and this isn't mentioned anywhere in the wiki that I could find, so, to avoid others the trouble of reading through 7 different forums, I've decided it's a good idea to add this warning.) |
Prabuanand (talk | contribs) (moved content to a new section and warning is retained in Polkit authentication agents page) |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1: | Line 1: | ||
To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | ||
* [[greetd]] | * [[Display manager|login manager]] like [[greetd]] | ||
* <code>login(1)</code> provided by {{Pkg|shadow-login}} | * <code>login(1)</code> provided by {{Pkg|shadow-login}} | ||
* <code>login(1)</code> provided by {{Pkg|util-linux-login}} | * <code>login(1)</code> provided by {{Pkg|util-linux-login}} | ||
{{warning|Login without PAM will still be possible. See {{issue|11730}}}} | {{warning|Login without PAM will still be possible. See {{issue|11730}}}} | ||
== ulimit == | == ulimit == | ||
<code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | <code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | ||
== Applications using pam == | |||
[[Polkit#Authentication agents|Polkit authentication agents]] tend to have issues running without PAM. | |||
== See also == | == See also == | ||
Latest revision as of 05:47, 11 November 2025
To use PAM, the linux-pam package itself must be installed as well as something for logging into the system that supports PAM. The login bundled with busybox does not support PAM. Instead, one of the following may be used:
- login manager like greetd
login(1)provided by shadow-loginlogin(1)provided by util-linux-login
Warning: Login without PAM will still be possible. See #11730
ulimit
ulimit permissions can be changed via /etc/security/limits.conf. These will only apply if a PAM-compatible tool is used for logging in (as indicated above).
Applications using pam
Polkit authentication agents tend to have issues running without PAM.