Initial public release: fresh history

system/pamd/fblogin

@@ -0,0 +1,29 @@
+# fblogin — PAM stack for framebuffer display manager + greeter
+# One file handles both:
+#  - Greeter process: we call pam_open_session() only (no auth); pam_systemd marks class=greeter.
+#  - User login: full auth + session.
+
+# --- Auth (user login path) ---
+auth    optional                   pam_issue.so issue=/etc/issue.fblogin
+auth    [success=1 default=ignore] pam_fprintd.so max_tries=3
+auth    requisite                  pam_nologin.so
+auth    required                   pam_unix.so nullok
+
+# --- Account checks ---
+account required                   pam_unix.so
+
+# --- Password updates (if a module requests it) ---
+password required                  pam_unix.so nullok sha512 shadow
+
+# --- Session (runs both for greeter + user) ---
+session required                   pam_limits.so
+session required                   pam_env.so readenv=1
+session optional                   pam_loginuid.so
+session optional                   pam_lastlog2.so 
+# pam_systemd registers a proper logind session over D-Bus.
+# XDG_SESSION_CLASS=greeter is provided by the program for greeter child.
+session optional                   pam_systemd.so
+
+# Keep at end so we still get a traditional session when needed.
+session required                   pam_unix.so
+