Comment 23 for bug 1824874

Revision history for this message
Sergey Zolotorev (sergey.zolotorev) wrote :

I just tried some experiments with pam_yubico in my distro.

Case 1 (OK):

- Run `systemctl restart some-service` (for example: `systemctl restart libvirtd`).
- Go sleep or lock screen (press Super+L).
- Wakeup and login again.

==> There are no any popups.

Case 2 (Bug):

- Connect Yubikey.
- Edit /etc/pam.d configuration files (for example: common-session in Ubuntu or system-auth in other distro) and describe a long-running `auth sufficient ...` module (for example: pam_yubico.so).
- Run `systemctl restart some-service` (for example: `systemctl restart libvirtd`), interact with the Yubikey.
- Go sleep or lock screen (press Super+L).
- Wakeup and login again.

==> An undismissable popup says that authentication is required to restart libvirtd (or any other service).