Bug 1144044 - Please add "pam_keyinit.so" to the /etc/pam.d/crond configuration file
Please add "pam_keyinit.so" to the /etc/pam.d/crond configuration file
Classification: openSUSE
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Basesystem
All openSUSE Factory
: P5 - None : Normal (vote)
: Current
Assigned To: Kristyna Streitova
E-mail List
Depends on:
  Show dependency treegraph
Reported: 2019-08-02 14:47 UTC by Josef Möllers
Modified: 2021-10-06 16:35 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Josef Möllers 2019-08-02 14:47:40 UTC
In the near future, the use of kernel keyrings will be enabled by systemd.
To fully support this feature, the cronie package must include the pam_keyinit.so
module in its /etc/pam.d/crond configuration file.
Please add this module to the /etc/pam.d/crond configuration file with the
appropriate parameters:
session optional pam_keyinit.so revoke [force]
Comment 1 Kristyna Streitova 2019-08-07 10:03:16 UTC
I'm changing the target codestream to openSUSE:Tumbleweed as it doesn't make any sense to submit it for SLE15 where kernel keyrings are not supported now.
Comment 2 Kristyna Streitova 2019-08-27 12:37:55 UTC
I've submitted "session optional pam_keyinit.so force revoke" to the openSUSE:Factory/cronie package (sr#726486).

@Josef, can you please check it out? Thanks!

I'm closing it as fixed, reopen if needed.