Permalink
Browse files

pam_mount: a PAM module which mount volumes for a user session.

  • Loading branch information...
1 parent 392e4cb commit e88bb3492699805ce81b5bf828e52748e4dc5fe1 @Florin65 Florin65 committed Jul 11, 2014
Showing with 36 additions and 0 deletions.
  1. +6 −0 security/pam_mount/DEPENDS
  2. +30 −0 security/pam_mount/DETAILS
@@ -0,0 +1,6 @@
+depends libHX
+depends libxml2
+depends util-linux
+
+optional_depends "openssl" "" "--without-crypto" "to use SSL encryption"
+optional_depends "cryptsetup" "" "--without-cryptsetup" "to use disk encryption"
View
@@ -0,0 +1,30 @@
+ MODULE=pam_mount
+ VERSION=2.14
+ SOURCE=$MODULE-$VERSION.tar.xz
+ SOURCE_URL=$SFORGE_URL/pam-mount/
+ SOURCE_VFY=sha1:6c6b0d7a243183d2073b38ccf4142fe82354db8d
+ WEB_SITE=http://pam-mount.sourceforge.net/
+ ENTERED=20140711
+ UPDATED=20140711
+ SHORT="A PAM module that can mount volumes for a user session"
+
+cat <<EOF
+This module is aimed at environments with central file servers that a user
+wishes to mount on login and unmount on logout, such as (semi-)diskless stations
+where many users can logon and where statically mounting the entire /home from a
+server is a security risk, or listing all possible volumes in /etc/fstab is not
+feasible.
+
+Users can define their own list of volumes without having to change (possibly
+non-writable) global config files.
+Single sign-on feature -- the user needs to type the password just once
+Transparent mount process
+No stored passwords
+Volumes are unmounted on logout, freeing system resources and not leaving data
+exposed.
+
+The module also supports mounting local filesystems of any kind the normal mount
+utility supports, with extra code to make sure certain volumes are set up
+properly because often they need more than just a mount call, such as encrypted
+volumes. This includes SMB/CIFS, NCP, FUSE, dm-crypt and LUKS.
+EOF

0 comments on commit e88bb34

Please sign in to comment.