260520.9 · 6c6f0cff28f6357e224f2b954cd88424a7ca021c
system: add convention for explicitly copying files
See the comment in the patch, but essentially, we occasionally need (or so I think) to install configuration files in `/etc` in a finicky way that really wants a file wholly distinct from one that is linked (symbolic or hard) to a file in `~/system`.
reading declarations
Changes to system/etc/pam.d/. All files
@@ -1,28 +0,0 @@-#%PAM-1.0--auth required pam_faillock.so preauth-# Optionally use requisite above if you do not want to prompt for the password-# on locked accounts.--auth [success=3 default=ignore] pam_systemd_home.so-auth [success=2 default=ignore] pam_fprintd.so-auth [success=1 default=bad] pam_unix.so try_first_pass nullok-auth [default=die] pam_faillock.so authfail-auth optional pam_permit.so-auth required pam_env.so-auth required pam_faillock.so authsucc-# If you drop the above call to pam_faillock.so the lock will be done also-# on non-consecutive authentication failures.---account [success=1 default=ignore] pam_systemd_home.so-account required pam_unix.so-account optional pam_permit.so-account required pam_time.so---password [success=1 default=ignore] pam_systemd_home.so-password required pam_unix.so try_first_pass nullok shadow-password optional pam_permit.so---session optional pam_systemd_home.so-session required pam_limits.so-session required pam_unix.so-session optional pam_permit.so
system/etc/pam.d/system-auth/copy:bart
@@ -0,0 +1,28 @@+#%PAM-1.0++auth required pam_faillock.so preauth+# Optionally use requisite above if you do not want to prompt for the password+# on locked accounts.+-auth [success=3 default=ignore] pam_systemd_home.so+auth [success=2 default=ignore] pam_fprintd.so+auth [success=1 default=bad] pam_unix.so try_first_pass nullok+auth [default=die] pam_faillock.so authfail+auth optional pam_permit.so+auth required pam_env.so+auth required pam_faillock.so authsucc+# If you drop the above call to pam_faillock.so the lock will be done also+# on non-consecutive authentication failures.++-account [success=1 default=ignore] pam_systemd_home.so+account required pam_unix.so+account optional pam_permit.so+account required pam_time.so++-password [success=1 default=ignore] pam_systemd_home.so+password required pam_unix.so try_first_pass nullok shadow+password optional pam_permit.so++-session optional pam_systemd_home.so+session required pam_limits.so+session required pam_unix.so+session optional pam_permit.so