221e67040f
Implements a pam module for automatically loading zfs encryption keys
for home datasets. The pam module:
- loads a zfs key and mounts the dataset when a session opens.
- unmounts the dataset and unloads the key when the session closes.
- when the user is logged on and changes the password, the module
changes the encryption key.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: @jengelh <jengelh@inai.de>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes #9886
Closes #9903
14 lines
265 B
Plaintext
14 lines
265 B
Plaintext
Name: Unlock zfs datasets for user
|
|
Default: yes
|
|
Priority: 128
|
|
Auth-Type: Additional
|
|
Auth:
|
|
optional pam_zfs_key.so
|
|
Session-Interactive-Only: yes
|
|
Session-Type: Additional
|
|
Session:
|
|
optional pam_zfs_key.so
|
|
Password-Type: Additional
|
|
Password:
|
|
optional pam_zfs_key.so
|