X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fpam_systemd.xml;h=cd806da93131987bcc6ddbd1408df1df124a9a03;hp=e790dd3c3dace612627b5ee8cc3af1d96c9fe167;hb=5471472d441d9ac48640f11a3b07e6a1fd6d1b63;hpb=160cd5c9aa2301892e13950015de7968c764340d diff --git a/man/pam_systemd.xml b/man/pam_systemd.xml index e790dd3c3..cd806da93 100644 --- a/man/pam_systemd.xml +++ b/man/pam_systemd.xml @@ -63,19 +63,19 @@ On login, this module ensures the following: - If it does not exist yet the + If it does not exist yet, the user runtime directory /var/run/user/$USER is created and its ownership changed to the user that is logging in. If - is set the + is set, the $XDG_SESSION_ID environment variable is initialized. If auditing is available and pam_loginuid.so run before - this module (which es recommended), the + this module (which is highly recommended), the variable is initialized from the auditing session id (/proc/self/sessionid). Otherwise @@ -83,16 +83,16 @@ used. If - is set a new + is set, a new control group /user/$USER/$XDG_SESSION_ID is created and the login process moved into it. If - is set a new + is set, a new control group - /user/$USER/no-session + /user/$USER/user is created and the login process moved into it. @@ -107,7 +107,7 @@ remaining processes in the /user/$USER/$XDG_SESSION_ID control group are killed and the control group - removed. + is removed. If $XDG_SESSION_ID is set and @@ -115,18 +115,18 @@ remaining processes in the /user/$USER/$XDG_SESSION_ID control group are migrated to - /user/$USER/no-session and - the original control group + /user/$USER/user and + the original control group is removed. If is specified, and - no other user session control group remains + no other user session control group remains, except - /user/$USER/no-session + /user/$USER/user, all remaining processes in the /user/$USER hierarchy - are killed and the control group removed. + are killed and the control group is removed. If is specified, and @@ -143,7 +143,7 @@ If the system was not booted up with systemd as - init system this module does nothing and immediately + init system, this module does nothing and immediately returns PAM_SUCCESS. @@ -165,11 +165,11 @@ login process moved to the /user/$USER/$XDG_SESSION_ID control group. It is recommended that - all services that are directly created + all services which are directly created on the user's behalf set this option. Only for services that shall automatically be terminated when the - user logs out completely otherwise, + user logs out completely, otherwise create-session=0 should be set. @@ -196,10 +196,30 @@ completely. This is a weaker version of and is more friendly for users logged in more - than once as their processes are + than once, as their processes are terminated only on their complete logout. + + + + + Takes a comma + separated list of cgroup controllers + in which hierarchies a user/session + cgroup will be created by default for + each user logging in. If ommited, + defaults to 'cpu', meaning that in + addition to creating per-user and + per-session cgroups in systemd's own + hierarchy, groups are created in the + 'cpu' hierarchy, on order to ensure + that every use and every sessions gets + an equal amount of CPU time, + regardless how many processes a user + or session might + own. + Note that setting kill-user=1 @@ -207,6 +227,10 @@ tools like screen1. + If the options are omitted they default to + , + , + . @@ -218,6 +242,8 @@ Environment + The following environment variables are set for the processes of the user's session: + $XDG_SESSION_ID @@ -279,7 +305,7 @@ account required pam_unix.so password required pam_unix.so session required pam_unix.so session required pam_loginuid.so -session required pam_systemd.so create-session=1 kill-user=1 +session required pam_systemd.so kill-user=1