libs/libpam/files/pam.d/common-session

   1 #
   2 # /etc/pam.d/common-session - session-related modules common to all services
   3 #
   4 # This file is included from other service-specific PAM config files,
   5 # and should contain a list of modules that define tasks to be performed
   6 # at the start and end of sessions of *any* kind (both interactive and
   7 # non-interactive).
   8 #
   9
  10 # here are the per-package modules (the "Primary" block)
  11 session [default=1]                     pam_permit.so
  12 # here's the fallback if no module succeeds
  13 session requisite                       pam_deny.so
  14 # prime the stack with a positive return value if there isn't one already;
  15 # this avoids us returning an error just because nothing sets a success code
  16 # since the modules above will each just jump around
  17 session required                        pam_permit.so
  18 # The pam_umask module will set the umask according to the system default in
  19 # /etc/login.defs and user settings, solving the problem of different
  20 # umask settings with different shells, display managers, remote sessions etc.
  21 # See "man pam_umask".
  22 session optional                        pam_umask.so
  23 # and here are more per-package modules (the "Additional" block)
  24 session required                        pam_unix.so
  25 # end of pam-auth-update config