pam_smack.so has been removed as for our use-case it is enough to set
appropriate label via systemd SmackProcessLabel.
Change-Id: Ia5f9a9f1e6f2809408b090b8e2805db7968a36a9
session required pam_loginuid.so
session required pam_namespace.so
session optional pam_keyinit.so force revoke
-session required pam_smack.so
session required pam_loginuid.so
session required pam_namespace.so
session optional pam_keyinit.so force revoke
-session required pam_smack.so
\ No newline at end of file
session required pam_loginuid.so
session required pam_namespace.so
session optional pam_keyinit.so force revoke
-session required pam_smack.so
Requires=dbus.socket
[Service]
-SmackProcessLabel=System
+SmackProcessLabel=User
ExecStart=/usr/bin/tlm
CapabilityBoundingSet=~CAP_MAC_ADMIN
CapabilityBoundingSet=~CAP_MAC_OVERRIDE