Using OpenPGP / GnuPG to unlock 'sudo bla bla' or 'sudo -s'

[Matthias Apitz]

El día lunes, agosto 12, 2024 a las 01:50:53 +0100, Andrew Gallagher escribió:

> Sorry, it’s pam-ssh-agent-auth:
> 
> https://linux.die.net/man/8/pam_ssh_agent_auth

The above page gives as an example entry in the file /etc/pam.d/sudo the
following line:

"auth sufficient pam_ssh_agent_auth.so file=~/.ssh/authorized_keys"

perhaps to be inserted without the apostrophes.

The actual file is:

purism at pureos:~$ cat /etc/pam.d/sudo
#%PAM-1.0

@include common-auth
@include common-account
@include common-session-noninteractive

Must the new line placed below or above the @include lines?

	matthias

-- 
Matthias Apitz, ✉ guru at unixarea.de, http://www.unixarea.de/ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub

I am not at war with Russia.  Я не воюю с Россией.
Ich bin nicht im Krieg mit Russland.