chore: mark some PAM profiles as seen in d/postinst

Mark PAM profiles krb5, sss and yourdev as "seen" in /var/lib/pam so
next execution of command /usr/sbin/pam-auth-update in interactive
mode will ignore the values of 'Default' properties.
This avoids the automatic selection of the sss profile, which conflicts
with the yourdev profile.
This commit is contained in:
Michel Decima
2022-01-02 17:16:14 +01:00
parent a5ab24a3cb
commit b03d583f88

4
debian/postinst vendored
View File

@@ -35,6 +35,10 @@ case "$1" in
pam-auth-update --package \
--remove sss krb5 \
--enable yourdev ccreds-check ccreds-save || true
for profile in sss krb5 yourdev ; do
grep -qw "$profile" /var/lib/pam/seen \
|| echo "$profile" >> /var/lib/pam/seen || true
done
# Fix sssd configuration permissions
chmod 600 /etc/sssd/sssd.conf || true