factory: include pam_keyinit.so in PAM factory configuration

We use the keyring, so let's make sure it gets properly initialized for
sessions in factory reset mode.

diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth
index 9342dd1ccf972b43ead18a6a304f4f6b0a17cc26..747efc1fbdb69e32d50abc18bc138aab296ef570 100644 (file)
--- a/factory/etc/pam.d/system-auth
+++ b/factory/etc/pam.d/system-auth
@@ -13,6 +13,7 @@ account  required   pam_permit.so
 password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
 password required   pam_deny.so
 
+-session optional   pam_keyinit.so revoke
 -session optional   pam_loginuid.so
 -session optional   pam_systemd.so
 session  sufficient pam_unix.so