PAM: Difference between revisions
mNo edit summary |
Prabuanand (talk | contribs) (moved content to a new section and warning is retained in Polkit authentication agents page) |
||
| Line 1: | Line 1: | ||
To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | ||
* [[greetd]] | * [[Display manager|login manager]] like [[greetd]] | ||
* <code>login(1)</code> provided by {{Pkg|shadow-login}} | * <code>login(1)</code> provided by {{Pkg|shadow-login}} | ||
* <code>login(1)</code> provided by {{Pkg|util-linux-login}} | * <code>login(1)</code> provided by {{Pkg|util-linux-login}} | ||
{{warning|Login without PAM will still be possible. See {{issue|11730}}}} | {{warning|Login without PAM will still be possible. See {{issue|11730}}}} | ||
== ulimit == | == ulimit == | ||
<code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | <code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | ||
== Applications using pam == | |||
[[Polkit#Authentication agents|Polkit authentication agents]] tend to have issues running without PAM. | |||
== See also == | == See also == | ||
Latest revision as of 05:47, 11 November 2025
To use PAM, the linux-pam package itself must be installed as well as something for logging into the system that supports PAM. The login bundled with busybox does not support PAM. Instead, one of the following may be used:
- login manager like greetd
login(1)provided by shadow-loginlogin(1)provided by util-linux-login
Warning: Login without PAM will still be possible. See #11730
ulimit
ulimit permissions can be changed via /etc/security/limits.conf. These will only apply if a PAM-compatible tool is used for logging in (as indicated above).
Applications using pam
Polkit authentication agents tend to have issues running without PAM.