>>>>> "Yves-Alexis" == Yves-Alexis Perez <cor...@debian.org> writes:


I think we want something there that allows people to get third-party
packages into the pam config.
If common-session isn't going to be good enough, then I guess we'd need
to create something on the PAM side.
But let's explore whether common-session is good enough, because it does
look like other display managers have similar architecture and manage to
use common-session.



Here are my thoughts on testing common-session in the greeter config:

* Take a look at how things appear in logind--does the greeter appear as
  a session?  If so does anything break because of that?  (Withd Gnome,
  the greeter does not appear to appear in loginctl list-sessions)

* What selinux context do things appear in.  This only matters if
  selinux is already in your testing structure

* Does the structure  of keyrings look like you expect.

* Do you end up with a systemd for the greeter user (assuming you are
using systemd).  If so, do you want one?

My suspicion is that since this appears to be working for other display
managers, it's all fine.
But those are the areas where trouble is most likely to show up.

Reply via email to