diff --git a/etc/default.nix b/etc/default.nix
index 599ee33944f2..f0042f68255f 100644
--- a/etc/default.nix
+++ b/etc/default.nix
@@ -228,6 +228,7 @@ import ../helpers/make-etc.nix {
       "sshd"
       "useradd"
       "chsh"
+      "xlock"
       "common"
       "common-console" # shared stuff for interactive local sessions
     ]
diff --git a/etc/pam.d/xlock b/etc/pam.d/xlock
new file mode 100644
index 000000000000..50f3cc5ce607
--- /dev/null
+++ b/etc/pam.d/xlock
@@ -0,0 +1,4 @@
+auth     include        common
+account  include        common
+password include        common
+session  include        common