Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

11
  • I don't understand your question very well. Do you want a pam module to decrypt your data automatically every time you login? Commented Feb 3, 2019 at 9:08
  • If "equivalent" means "single central functionality supported by virtually all programs", the answer is still "no". Commented Feb 3, 2019 at 12:13
  • @炸鱼薯条德里克 Not "to decrypt it automatically"; the data should stay encrypted on disk at all times. Rather, imagine KWallet or similar, except that it unlocks (and thus the data can be decrypted, in memory, on demand) automatically when you log in, using the same credentials you used to log in. Commented Feb 3, 2019 at 21:42
  • @dirkt Not so much "supported by" as "available to" all programs, but otherwise, yes. I'm sure lots of software would continue using various other solutions for a long time, but it would be very nice to have something that provides equivalent functionality but doesn't depend on which desktop environment you install or require additional user interaction after login. I may take a crack at writing such a PAM module myself but wanted to avoid duplicating effort. Commented Feb 3, 2019 at 21:51
  • So basically a libopenssl warpper that provides an API return decrypted data everytime you call it with encrypted data and your private key (or symmetric key). If I'm right then I don't think PAM is related. PAM basically used for authentication and setup sessions, but obviously not all programs need that. Commented Feb 4, 2019 at 0:40