diff options
author | Lennart Poettering <lennart@poettering.net> | 2023-11-16 18:47:52 +0100 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2023-12-06 22:11:04 +0100 |
commit | 7e3607996a5df22799dd092526c78b5bd7e245f4 (patch) | |
tree | 9c7f3c005ab3a8599eb19d581f7af1b480fbbc31 /tmpfiles.d | |
parent | pid1: add ProtectSystem= as system-wide configuration, and default it to true... (diff) | |
download | systemd-7e3607996a5df22799dd092526c78b5bd7e245f4.tar.xz systemd-7e3607996a5df22799dd092526c78b5bd7e245f4.zip |
userdbctl: enable ssh-authorized-keys logic by default
sshd now supports config file drop-ins, hence let's install one to hook
up "userdb ssh-authorized-keys", so that things just work.
We put the drop-in relatively early, so that other drop-ins generally
will override this.
Ideally sshd would support such drop-ins in /usr/ rather than /etc/, but
let's take what we can get. It's not that sshd's upstream was
particularly open to weird ideas from Linux people.
Diffstat (limited to 'tmpfiles.d')
-rw-r--r-- | tmpfiles.d/20-systemd-userdb.conf.in | 10 | ||||
-rw-r--r-- | tmpfiles.d/meson.build | 1 |
2 files changed, 11 insertions, 0 deletions
diff --git a/tmpfiles.d/20-systemd-userdb.conf.in b/tmpfiles.d/20-systemd-userdb.conf.in new file mode 100644 index 0000000000..1ef7a9e8bc --- /dev/null +++ b/tmpfiles.d/20-systemd-userdb.conf.in @@ -0,0 +1,10 @@ +# This file is part of systemd. +# +# systemd is free software; you can redistribute it and/or modify it +# under the terms of the GNU Lesser General Public License as published by +# the Free Software Foundation; either version 2.1 of the License, or +# (at your option) any later version. + +# See tmpfiles.d(5) for details + +L {{SSHDCONFDIR}}/20-systemd-userdb.conf - - - - {{LIBEXECDIR}}/sshd_config.d/20-systemd-userdb.conf diff --git a/tmpfiles.d/meson.build b/tmpfiles.d/meson.build index 4c11ad6e20..390076b6d5 100644 --- a/tmpfiles.d/meson.build +++ b/tmpfiles.d/meson.build @@ -34,6 +34,7 @@ in_files = [['etc.conf', ''], ['static-nodes-permissions.conf', ''], ['systemd.conf', ''], ['var.conf', ''], + ['20-systemd-userdb.conf', 'ENABLE_USERDB'], ] foreach pair : in_files |