Could store-only be detected from PAM_TYPE?

cruegge / pam-gnupg

Unlock GnuPG keys on login

GNU General Public License v3.0

269 stars 12 forks source link

Could store-only be detected from PAM_TYPE? #32

Closed OJFord closed 3 years ago

OJFord commented 3 years ago

Just a thought, if the only reason to use it is on auth, and it's always needed on auth, that instead of needing to be specified it could be inferred?

cruegge commented 3 years ago

Unfortunately no, because it's not always needed on auth, only for pam services that open sessions. For screen lockers, it must not be specified, because they never do anything but authentication, and so the passphrase needs to be sent right away.