[systemd-devel] Extend service runtime

[Andy Pieters]

On Mon, 4 May 2020 at 23:11, Mantas Mikulėnas <grawity at gmail.com> wrote:

>
>
> So this is basically for implementing sudo-like caching for 2FA?
>
>
Yes that's exactly it.


> What authentication methods are involved here?
>

Using yubikey + password when 2F is active, using hostkey when not


> Seems like there are better ways than a service file that permanently
> modifies /etc/group in the first place... Like a PAM module that literally
> touches a timestamp file.
>
>> OK that sounds promising. I had thought of systemd angle first and am not
that familiar with pam
I found https://linux.die.net/man/8/pam_timestamp is that what you meant?

Thank you Mantas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/systemd-devel/attachments/20200504/eb6fb7a6/attachment.htm>