mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2025-02-15 03:41:28 +03:00
221e67040f
Implements a pam module for automatically loading zfs encryption keys
for home datasets. The pam module:
- loads a zfs key and mounts the dataset when a session opens.
- unmounts the dataset and unloads the key when the session closes.
- when the user is logged on and changes the password, the module
changes the encryption key.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: @jengelh <jengelh@inai.de>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes #9886
Closes #9903
19 lines
499 B
Makefile
19 lines
499 B
Makefile
include $(top_srcdir)/config/Rules.am
|
|
|
|
pammodule_LTLIBRARIES=pam_zfs_key.la
|
|
|
|
pam_zfs_key_la_SOURCES = pam_zfs_key.c
|
|
|
|
pam_zfs_key_la_LIBADD = \
|
|
$(top_builddir)/lib/libnvpair/libnvpair.la \
|
|
$(top_builddir)/lib/libuutil/libuutil.la \
|
|
$(top_builddir)/lib/libzfs/libzfs.la \
|
|
$(top_builddir)/lib/libzfs_core/libzfs_core.la
|
|
|
|
pam_zfs_key_la_LDFLAGS = -version-info 1:0:0 -avoid-version -module -shared
|
|
|
|
pam_zfs_key_la_LIBADD += -lpam $(LIBSSL)
|
|
|
|
pamconfigs_DATA = zfs_key
|
|
EXTRA_DIST = $(pamconfigs_DATA)
|