From b3fbf3df58ccc0bd7fd8fbd7905080dbeb002d9f Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Thu, 13 Nov 2025 13:14:06 +0100 Subject: [PATCH] overlay coreos/config: Add pam_selinux to systemd PAM configs Signed-off-by: Krzesimir Nowak --- .../coreos-overlay/coreos/config/env/sys-apps/systemd | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd index fc7e86aa5c..ac9e0509f5 100644 --- a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-apps/systemd @@ -91,10 +91,13 @@ cros_post_src_install_flatcar_stuff() { # with our own. newpamd - "systemd-user" <<'EOF' account include system-auth +session required pam_selinux.so close +session required pam_selinux.so nottys open session include system-login EOF newpamd - "systemd-run0" <<'EOF' account include system-auth +session include system-selinux session include system-login EOF