[zamok] Add PAM rule to use namespaces

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-07-11 12:02:27 +02:00 · 2021-07-11 12:02:27 +02:00 · 55da06ba5d
parent 93077999f6
commit 55da06ba5d
1 changed files with 11 additions and 0 deletions
--- a/roles/zamok-tools/tasks/main.yml
+++ b/roles/zamok-tools/tasks/main.yml
@ -111,3 +111,14 @@
    - "000-perso-vhosts.conf"
    - "001-perso.conf"
  notify: Reload apache
+
+- name: Add PAM rule to use namespaces to have separate temporary directories
+  pamd:
+    name: common-session
+    type: session
+    control: optional
+    module_path: pam_systemd.so
+    new_type: session
+    new_control: optional
+    new_module_path: pam_namespace.so
+    state: after