mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2024-12-27 11:29:36 +03:00
221e67040f
Implements a pam module for automatically loading zfs encryption keys
for home datasets. The pam module:
- loads a zfs key and mounts the dataset when a session opens.
- unmounts the dataset and unloads the key when the session closes.
- when the user is logged on and changes the password, the module
changes the encryption key.
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: @jengelh <jengelh@inai.de>
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes #9886
Closes #9903
38 lines
1.0 KiB
Plaintext
38 lines
1.0 KiB
Plaintext
AC_DEFUN([ZFS_AC_CONFIG_USER_PAM], [
|
|
AC_ARG_ENABLE([pam],
|
|
AS_HELP_STRING([--enable-pam],
|
|
[install pam_zfs_key module [[default: check]]]),
|
|
[enable_pam=$enableval],
|
|
[enable_pam=check])
|
|
|
|
AC_ARG_WITH(pammoduledir,
|
|
AS_HELP_STRING([--with-pammoduledir=DIR],
|
|
[install pam module in dir [[$libdir/security]]]),
|
|
[pammoduledir="$withval"],[pammoduledir=$libdir/security])
|
|
|
|
AC_ARG_WITH(pamconfigsdir,
|
|
AS_HELP_STRING([--with-pamconfigsdir=DIR],
|
|
[install pam-config files in dir [[/usr/share/pamconfigs]]]),
|
|
[pamconfigsdir="$withval"],[pamconfigsdir=/usr/share/pam-configs])
|
|
|
|
AS_IF([test "x$enable_pam" != "xno"], [
|
|
AC_CHECK_HEADERS([security/pam_modules.h], [
|
|
enable_pam=yes
|
|
], [
|
|
AS_IF([test "x$enable_pam" == "xyes"], [
|
|
AC_MSG_FAILURE([
|
|
*** security/pam_modules.h missing, libpam0g-dev package required
|
|
])
|
|
],[
|
|
enable_pam=no
|
|
])
|
|
])
|
|
])
|
|
AS_IF([test "x$enable_pam" == "xyes"], [
|
|
DEFINE_PAM='--with "pam" --define "_pamconfigsdir $(pamconfigsdir)"'
|
|
])
|
|
AC_SUBST(DEFINE_PAM)
|
|
AC_SUBST(pammoduledir)
|
|
AC_SUBST(pamconfigsdir)
|
|
])
|