How To Install pam_mount on Fedora 34

pam_mount is A PAM module that can mount volumes for a user session A PAM module that can mount volumes for a user session

Introduction

In this tutorial we learn how to install pam_mount on Fedora 34.

What is pam_mount

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as (semi-)diskless stations where many users can logon and where statically mounting the entire /home from a server is a security risk, or listing all possible volumes in /etc/fstab is not feasible. * Users can define their own list of volumes without having to change (possibly non-writable) global config files. * Single sign-on feature - the user needs to type the password just once (at login) * Transparent mount process * No stored passwords * Volumes are unmounted on logout, freeing system resources and not leaving data exposed. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code to make sure certain volumes are set up properly because often they need more than just a mount call, such as encrypted volumes. This includes SMB/CIFS, FUSE, dm-crypt and LUKS. If you intend to use pam_mount to protect volumes on your computer using an encrypted filesystem system, please know that there are many other issues you need to consider in order to protect your data. For example, you probably want to disable or encrypt your swap partition (the cryptoswap can help you do this). Do not assume a system is secure without carefully considering potential threats. pam_mount 2.16 12.fc34 x86_64 124 k pam_mount-2.16-12.fc34.src.rpm fedora A PAM module that can mount volumes for a user session http LGPLv2+ and (LGPLv2 or LGPLv3) and Public Domain This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as (semi-)diskless stations where many users can logon and where statically mounting the entire /home from a server is a security risk, or listing all possible volumes in /etc/fstab is not feasible. * Users can define their own list of volumes without having to change (possibly non-writable) global config files. * Single sign-on feature - the user needs to type the password just once (at login) * Transparent mount process * No stored passwords * Volumes are unmounted on logout, freeing system resources and not leaving data exposed. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code to make sure certain volumes are set up properly because often they need more than just a mount call, such as encrypted volumes. This includes SMB/CIFS, FUSE, dm-crypt and LUKS. If you intend to use pam_mount to protect volumes on your computer using an encrypted filesystem system, please know that there are many other issues you need to consider in order to protect your data. For example, you probably want to disable or encrypt your swap partition (the cryptoswap can help you do this). Do not assume a system is secure without carefully considering potential threats.

We can use yum or dnf to install pam_mount on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install pam_mount.

Install pam_mount on Fedora 34 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install pam_mount using dnf by running the following command:

sudo dnf -y install pam_mount

Install pam_mount on Fedora 34 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install pam_mount using yum by running the following command:

sudo yum -y install pam_mount

How To Uninstall pam_mount on Fedora 34

To uninstall only the pam_mount package we can use the following command:

sudo dnf remove pam_mount

pam_mount Package Contents on Fedora 34

/etc/security/pam_mount.conf.xml
/sbin/mount.crypt
/sbin/mount.crypto_LUKS
/sbin/umount.crypt
/sbin/umount.crypto_LUKS
/usr/lib/.build-id
/usr/lib/.build-id/08
/usr/lib/.build-id/08/f29cf726ad92f9d2ee8b11777a1e1a731b67ed
/usr/lib/.build-id/0e
/usr/lib/.build-id/0e/016084b5de6a79f7f4c786abbe36a32a8c0c7f
/usr/lib/.build-id/41
/usr/lib/.build-id/41/ac3618813999d901b256a2d1e1ea7a5ce6d63c
/usr/lib/.build-id/90
/usr/lib/.build-id/90/dde20dac3551a5b1dc7b19957a3306298ea216
/usr/lib/.build-id/f4
/usr/lib/.build-id/f4/9fdba6c2789d958abdf1ef5266145ca587187f
/usr/lib/libcryptmount.so.0
/usr/lib/libcryptmount.so.0.0.0
/usr/lib/security/pam_mount.so
/usr/sbin/pmt-ehd
/usr/sbin/pmvarrun
/usr/share/doc/pam_mount
/usr/share/doc/pam_mount/LICENSE.GPL2
/usr/share/doc/pam_mount/LICENSE.GPL3
/usr/share/doc/pam_mount/LICENSE.LGPL2
/usr/share/doc/pam_mount/LICENSE.LGPL3
/usr/share/doc/pam_mount/bugs.txt
/usr/share/doc/pam_mount/faq.txt
/usr/share/doc/pam_mount/news.txt
/usr/share/doc/pam_mount/options.txt
/usr/share/doc/pam_mount/pam_mount.conf.xml
/usr/share/doc/pam_mount/todo.txt
/usr/share/man/man5/pam_mount.conf.5.gz
/usr/share/man/man8/mount.crypt.8.gz
/usr/share/man/man8/mount.crypto_LUKS.8.gz
/usr/share/man/man8/pam_mount.8.gz
/usr/share/man/man8/pmt-ehd.8.gz
/usr/share/man/man8/pmvarrun.8.gz
/usr/share/man/man8/umount.crypt.8.gz
/usr/share/man/man8/umount.crypto_LUKS.8.gz
/usr/share/xml/pam_mount
/usr/share/xml/pam_mount/dtd
/usr/share/xml/pam_mount/dtd/pam_mount.conf.xml.dtd
/var/run/pam_mount
/etc/security/pam_mount.conf.xml
/sbin/mount.crypt
/sbin/mount.crypto_LUKS
/sbin/umount.crypt
/sbin/umount.crypto_LUKS
/usr/lib/.build-id
/usr/lib/.build-id/1a
/usr/lib/.build-id/1a/2c1b3ad19bffc16bd205923a31e2b33792b368
/usr/lib/.build-id/2f
/usr/lib/.build-id/2f/274ed5eaf1b218a39e3657c6be27eaf9779505
/usr/lib/.build-id/78
/usr/lib/.build-id/78/72d13cd54af6d4b9b2c0731617f4d33666e194
/usr/lib/.build-id/83
/usr/lib/.build-id/83/b9708480d3d2d3aa29b7e9cc0dc1c2bbd74977
/usr/lib/.build-id/99
/usr/lib/.build-id/99/d5ed96ced0ff89d9b5379fcfd01e4fa86e65a1
/usr/lib64/libcryptmount.so.0
/usr/lib64/libcryptmount.so.0.0.0
/usr/lib64/security/pam_mount.so
/usr/sbin/pmt-ehd
/usr/sbin/pmvarrun
/usr/share/doc/pam_mount
/usr/share/doc/pam_mount/LICENSE.GPL2
/usr/share/doc/pam_mount/LICENSE.GPL3
/usr/share/doc/pam_mount/LICENSE.LGPL2
/usr/share/doc/pam_mount/LICENSE.LGPL3
/usr/share/doc/pam_mount/bugs.txt
/usr/share/doc/pam_mount/faq.txt
/usr/share/doc/pam_mount/news.txt
/usr/share/doc/pam_mount/options.txt
/usr/share/doc/pam_mount/pam_mount.conf.xml
/usr/share/doc/pam_mount/todo.txt
/usr/share/man/man5/pam_mount.conf.5.gz
/usr/share/man/man8/mount.crypt.8.gz
/usr/share/man/man8/mount.crypto_LUKS.8.gz
/usr/share/man/man8/pam_mount.8.gz
/usr/share/man/man8/pmt-ehd.8.gz
/usr/share/man/man8/pmvarrun.8.gz
/usr/share/man/man8/umount.crypt.8.gz
/usr/share/man/man8/umount.crypto_LUKS.8.gz
/usr/share/xml/pam_mount
/usr/share/xml/pam_mount/dtd
/usr/share/xml/pam_mount/dtd/pam_mount.conf.xml.dtd
/var/run/pam_mount

References

Summary

In this tutorial we learn how to install pam_mount on Fedora 34 using yum and dnf.