From cb1915bf4f80282177ccb440e886943394803cb5 Mon Sep 17 00:00:00 2001
From: Mike Frysinger <vapier@gentoo.org>
Date: Fri, 13 Feb 2015 22:57:45 -0500
Subject: system-login: move pam_gnome_keyring after pam_selinux

URL: https://bugs.gentoo.org/511600
---
 system-login.in | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/system-login.in b/system-login.in
index d12dcd3..e630918 100644
--- a/system-login.in
+++ b/system-login.in
@@ -47,12 +47,13 @@ session		include		system-auth
 #if HAVE_CONSOLEKIT
 session		optional	pam_ck_connector.so nox11
 #endif
-#if HAVE_GNOME_KEYRING
-session		optional	pam_gnome_keyring.so auto_start
-#endif
 #if HAVE_SELINUX
+# Note: modules that run in the user's context must come after this line.
 session		required	pam_selinux.so multiple open
 #endif
+#if HAVE_GNOME_KEYRING
+session		optional	pam_gnome_keyring.so auto_start
+#endif
 #if HAVE_MOTD
 session		optional	pam_motd.so motd=/etc/motd
 #endif
-- 
cgit v1.2.3-65-gdbad