Name

pam_systemd — Register user sessions in the systemd control group hierarchy

Synopsis

pam_systemd.so

Options

The following options are understood:

kill-session-processes=

Takes a boolean argument. If true, all processes created by the user during his session and from his session will be terminated when he logs out from his session.

kill-only-users=

Takes a comma separated list of user names or numeric user ids as argument. If this option is used the effect of the kill-session-processes= options will apply only to the listed users. If this option is not used the option applies to all local users. Note that kill-exclude-users= takes precedence over this list and is hence subtracted from the list specified here.

kill-exclude-users=

Takes a comma separated list of user names or numeric user ids as argument. Users listed in this argument will not be subject to the effect of kill-session-processes=. Note that that this option takes precedence over kill-only-users=, and hence whatever is listed for kill-exclude-users= is guaranteed to never be killed by this PAM module, independent of any other configuration setting.

controllers=

Takes a comma separated list of control group controllers in which hierarchies a user/session control group will be created by default for each user logging in, in addition to the control group in the named 'name=systemd' hierarchy. If omitted, defaults to an empty list.

reset-controllers=

Takes a comma separated list of control group controllers in which hierarchies the logged in processes will be reset to the root control group.

debug=

Takes a boolean argument. If yes, the module will log debugging information as it operates.

Note that setting kill-session-processes=1 will break tools like screen(1).

Note that kill-session-processes=1 is a stricter version of KillUserProcesses=1 which may be configured system-wide in systemd-logind.conf(5). The former kills processes of a session as soon as it ends, the latter kills processes as soon as the last session of the user ends.

If the options are omitted they default to kill-session-processes=0, kill-only-users=, kill-exclude-users=, controllers=, reset-controllers=, debug=no.