From 076c4f7a27905b6e14ef5380514da33dfcdb550c Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Mon, 6 Feb 2017 14:29:25 +0100
Subject: [pam] Add missing config file for key handling (DFS, cifs.upcall
 etc.)

---
 core/modules/pam/data/etc/request-key.conf | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 core/modules/pam/data/etc/request-key.conf

(limited to 'core/modules/pam')

diff --git a/core/modules/pam/data/etc/request-key.conf b/core/modules/pam/data/etc/request-key.conf
new file mode 100644
index 00000000..bebaf27f
--- /dev/null
+++ b/core/modules/pam/data/etc/request-key.conf
@@ -0,0 +1,13 @@
+#OP       TYPE      DESCRIPTION       CALLOUT INFO      PROGRAM ARG1 ARG2 ARG3 ...
+#======   =======   ===============   ===============   ===============================
+create    dns_resolver *              *                 /sbin/key.dns_resolver %k
+create    user      debug:*           negate            /bin/keyctl negate %k 30 %S
+create    user      debug:*           rejected          /bin/keyctl reject %k 30 %c %S
+create    user      debug:*           expired           /bin/keyctl reject %k 30 %c %S
+create    user      debug:*           revoked           /bin/keyctl reject %k 30 %c %S
+create    user      debug:loop:*      *                 |/bin/cat
+create    user      debug:*           *                 /usr/share/keyutils/request-key-debug.sh %k %d %c %S
+create    cifs.spnego *               *                 /usr/sbin/cifs.upcall -t %k
+create    dns_resolver *              *                 /usr/sbin/cifs.upcall %k
+negate    *         *                 *                 /bin/keyctl negate %k 30 %S
+
-- 
cgit v1.2.3-55-g7522