pam_usb/doc/examples/pam_usb.conf

<!--
pam_usb.conf: Configuration file for pam_usb.

See http://www.pamusb.org/doc/configuring
-->

<configuration>
	<!-- Default options -->
	<defaults>
		<!-- Example:
			<option name="debug">true</option>
		-->
	</defaults>

	<!-- Device settings -->
	<devices>
		<!-- Example:
		Note: You should use pamusb-conf to add devices automatically.
		<device id="MyDevice">
			<vendor>SanDisk Corp.</vendor>
			<model>Cruzer Titanium</model>
			<serial>SNDKXXXXXXXXXXXXXXXX</serial>
			<volume_uuid>6F6B-42FC</volume_uuid>
			<option name="probe_timeout">10</option>
		</device>
		-->
	</devices>


	<!-- User settings -->
	<users>
		<!-- Note: Use pamusb-conf to add a user, then you can tweak
		 	manually the configuration here if needed.
		-->

		<!-- Example:
			Authenticate user scox using "MyDevice", and configure pamusb-agent
			to automatically start/stop gnome-screensaver on key insertion and
			removal:
			<user id="scox">
				<device>MyDevice</device>
				<option name="quiet">true</option>
				<agent event="lock">gnome-screensaver-command -\-lock</agent>
				<agent event="unlock">gnome-screensaver-command -\-deactivate</agent>
			</user>

			Configure user root to authenticate using MyDevice, but update one
			time pads at every login (default is 1 hour):
			<user id="root">
				<device>MyDevice</device>
				<option name="pad_expiration">0</option>
			</user>
		-->
	</users>

	<!-- Services settings (e.g. gdm, su, sudo...) -->
	<services>
		<!-- Example: Speed up hotplugging by disabling one time pads -->
		<!--
		<service id="pamusb-agent">
			<option name="one_time_pad">false</option>
		</service>
		-->

		<!-- Disable output for 'su' (needed for gksu) -->
		<!--
		<service id="su">
			<option name="quiet">true</option>
		</service>
		-->
	</services>
</configuration>