b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/pam: allow backing the motd with a file

Browse source
This commit is contained in:
Markus Napierkowski 2022-11-11 16:11:37 +01:00
parent 7634c3250b
commit 192ae663cc
1 changed files with 18 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
nixos/modules/security/pam.nix
View file

@ -694,7 +694,7 @@ let
optionalString (cfg.limits != []) ''
session required ${pkgs.pam}/lib/security/pam_limits.so conf=${makeLimitsConf cfg.limits}
'' +
optionalString (cfg.showMotd && config.users.motd != null) ''
optionalString (cfg.showMotd && (config.users.motd != null || config.users.motdFile != null)) ''
session optional ${pkgs.pam}/lib/security/pam_motd.so motd=${motd}
'' +
optionalString (cfg.enableAppArmor && config.security.apparmor.enable) ''
@ -775,7 +775,9 @@ let
};
}));
motd = pkgs.writeText "motd" config.users.motd;
motd = if isNull config.users.motdFile
then pkgs.writeText "motd" config.users.motd
else config.users.motdFile;
makePAMService = name: service:
{ name = "pam.d/${name}";
@ -1199,12 +1201,26 @@ in
description = lib.mdDoc "Message of the day shown to users when they log in.";
};
users.motdFile = mkOption {
default = null;
example = "/etc/motd";
type = types.nullOr types.path;
description = lib.mdDoc "A file containing the message of the day shown to users when they log in.";
};
};
###### implementation
config = {
assertions = [
{
assertion = isNull config.users.motd || isNull config.users.motdFile;
message = ''
Only one of users.motd and users.motdFile can be set.
'';
}
];
environment.systemPackages =
# Include the PAM modules in the system path mostly for the manpages.