New answers tagged

2

Am I right to state that everything I do with my login-passphrase can't be hidden from the eyes of an evil root? Yes, and the same goes for everything else on the box, period. (Except maybe really obscure, impractical things like SGX.) Is an additional encryption layer with a passphrase different from the login passphrase indispensable? Doesn't matter, ...


0

Since the common-* files are not there you cannot run sudo Therefore you must boot to single user mode the link below has great instructions Boot to single user mode Once you are boot up you will have a root shell.


0

It’s not appropriate for a PAM module to be attempting to talk to the X server. If you are using the PAM module in a login session, the user’s X11 session isn’t even initialized until after the session starts, so there would be no X11 server to talk to anyway. The PAM module won’t know the $DISPLAY nor have access to X cookies. Those are set by the display ...


1

The framework for Gnome already exists. A bit simplified, it looks like this: hardware -> libfprint ---> fprintd -- | |-> Gnome |--> pam module -- Once you add support for your device in libfprint, the rest will work. Check fprint's project page, specially the section about ...


0

Executing a command after a successful module should be doable, skip to pam_exec.so with success=${num lines to skip} man 8 pam_exec auth sufficient pam_unix.so auth [success=1 default=ignore] foo_2fa.so some_other=options auth requisite pam_deny.so auth optional pam_exec.so debug /path/...


Top 50 recent answers are included