f072cfe1eb
* change enableU2F option to u2f.* set * add few u2f options (not all) to customize pam-u2f module * document default u2f_keys locations Co-authored-by: Tomasz Czyż <tomasz.czyz@gmail.com> Co-authored-by: Arda Xi <arda@ardaxi.com>
23 lines
455 B
Nix
23 lines
455 B
Nix
import ./make-test.nix ({ ... }:
|
|
|
|
{
|
|
name = "pam-u2f";
|
|
|
|
machine =
|
|
{ ... }:
|
|
{
|
|
security.pam.u2f = {
|
|
control = "required";
|
|
cue = true;
|
|
debug = true;
|
|
enable = true;
|
|
interactive = true;
|
|
};
|
|
};
|
|
|
|
testScript =
|
|
''
|
|
$machine->waitForUnit('multi-user.target');
|
|
$machine->succeed('egrep "auth required .*/lib/security/pam_u2f.so.*debug.*interactive.*cue" /etc/pam.d/ -R');
|
|
'';
|
|
})
|