From 55f4386ba8f5e2d4e7668c2eb9b8d16c9d81f6f2 Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Thu, 13 Nov 2025 13:14:06 +0100 Subject: [PATCH] overlay coreos/config: Add pam_selinux to systemd PAM configs Signed-off-by: Krzesimir Nowak --- .../coreos-overlay/coreos/config/env/sys-apps/systemd | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd index defe7e8d0b..00e127fec2 100644 --- a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd @@ -91,10 +91,13 @@ cros_post_src_install_flatcar_stuff() { # with our own. newpamd - "systemd-user" <<'EOF' account include system-auth +session required pam_selinux.so close +session required pam_selinux.so nottys open session include system-login EOF newpamd - "systemd-run0" <<'EOF' account include system-auth +session include system-selinux session include system-login EOF