From 4844148bb30ac957066aed3bb5e0d4083c1266a18fc18383866baa7e456acb22 Mon Sep 17 00:00:00 2001
From: Franck Bui <fbui@suse.com>
Date: Fri, 8 Oct 2021 08:31:22 +0000
Subject: [PATCH] update systemd-user to get the potential extended creds via
 common-auth

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1198
---
 systemd-user | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/systemd-user b/systemd-user
index 055168eb..3907c885 100644
--- a/systemd-user
+++ b/systemd-user
@@ -2,7 +2,18 @@
 #
 # Used by systemd --user instances.
 
-auth     required pam_permit.so
+# This is not about authentication per se (user@.service is a system
+# service anyway) but to give the possibility to user services
+# (especially those like gnome-terminal, see [1]) to have theirs
+# credentials extended similar to the ones received by a user when he
+# logs in (and the full PAM authentication stack is run). See [2] and
+# [3] for details.
+#
+# [1] https://gitlab.gnome.org/GNOME/gdm/-/issues/393
+# [2] https://github.com/systemd/systemd/issues/11198
+# [3] https://bugzilla.suse.com/show_bug.cgi?id=1190515
+#
+auth include common-auth
 
 account  include  common-account