>>>>> "Yves-Alexis" == Yves-Alexis Perez <cor...@debian.org> writes:
I think we want something there that allows people to get third-party packages into the pam config. If common-session isn't going to be good enough, then I guess we'd need to create something on the PAM side. But let's explore whether common-session is good enough, because it does look like other display managers have similar architecture and manage to use common-session. Here are my thoughts on testing common-session in the greeter config: * Take a look at how things appear in logind--does the greeter appear as a session? If so does anything break because of that? (Withd Gnome, the greeter does not appear to appear in loginctl list-sessions) * What selinux context do things appear in. This only matters if selinux is already in your testing structure * Does the structure of keyrings look like you expect. * Do you end up with a systemd for the greeter user (assuming you are using systemd). If so, do you want one? My suspicion is that since this appears to be working for other display managers, it's all fine. But those are the areas where trouble is most likely to show up.