pam_usb/doc/pusb.conf-example

<!--
pusb.conf-example
Sample configuration file for pam_usb.

Use pusb_check to test your settings.
Example: pusb_check -d -u root -s gdm
-->

<configuration>

	<!-- Default options -->
	<defaults>

		<!-- Enable pam_usb -->
		<!-- <option name="enable">true</option> -->

		<!-- Enable debug output -->
		<!-- <option name="debug">false</option> -->

		<!-- Quiet mode (no verbose output) -->
		<!-- <option name="quiet">false</option> -->

		<!-- Whether or not enable colored logging -->
		<!-- <option name="color_log">true</option> -->

		<!-- Enable one time pad -->
		<!-- <option name="one_time_pad">true</option> -->

		<!-- Time (in seconds) to wait for the volume to be detected -->
		<!-- <option name="probe_timeout">10</option> -->

		<!-- Computer name, defaults to the hostname -->
		<!-- <option name="hostname">hostname</option> -->

		<!-- Relative path to the user's home used to store one time pads -->
		<!-- <option name="system_pad_directory">.pusb</option> -->

		<!-- Relative path to the device used to store one time pads -->
		<!-- <option name="device_pad_directory">.pusb</option> -->
	</defaults>

	<!-- Device settings -->
	<devices>
		<!-- Syntax:
		<device id="arbitrary device name">
			<vendor>device's vendor</vendor>
			<model>device's model</model>
			<serial>device's serial number</serial>
			<volume_uuid>UUID of the volume used for one time pads</volume_uuid>
			<option name="option name">value</option>
			<option name="another option">another value</option>
		</device>
		-->

		<!-- You can use the pusb_adm tool which will
			 automatically detect your device properties (vendor, model,
			 serial, uuid) and write a configuration block in this file.

			 See pusb_adm -h for more informations.
		-->

		<!-- Example: -->
		<!--
		<device id="foo">
			<vendor>Generated by pusb_adm</vendor>
			<model>Generated by pusb_adm</model>
			<serial>Generated by pusb_adm</serial>
			<volume_uuid>Generated by pusb_adm</volume_uuid>
			<option name="probe_timeout">15</option>
		</device>
		-->
	</devices>


	<!-- User settings -->
	<users>
		<!-- Syntax:
			<user id="login name">
				<device>device name</device>
				<hotplug event="lock">lock command</hotplug>
				<hotplug event="unlock">unlock command</hotplug>
				<option name="option name">value</option>
				<option name="another option">another value</option>
			</user>
		-->

		<!-- Examples: -->

		<!-- Authenticate user "foo" with device "dev" -->
		<!--
		<user id="foo">
			<device>dev</device>
		</user>
		-->

		<!-- Authenticate user "bar" with device "dev2", without using
		     one time pads.
		-->
		<!--
		<user id="bar">
			<device>dev2</device>
			<option name="one_time_pad">false</option>
		</user>
		-->

		<!-- If you're using pusb_hotplug, you can setup commands
		     to be executed to lock or unlock the system as soon
		     as the device is inserted (and authenticated) or removed.
		-->
		<!--
		<user id="user name">
			<device>dev2</device>
			<hotplug event="lock">gnome-screensaver-command -lock</hotplug>
			<hotplug event="unlock">gnome-screensaver-command -deactivate</hotplug>
		</user>
		-->
	</users>

	<!-- Services settings (e.g. gdm, su, sudo...) -->
	<services>
		<!-- Syntax is:
			<service id="service name">
				<option name="option name">value</option>
				<option name="another option">another value</option>
			</service>
		-->

		<!-- Examples: -->

		<!-- Disable pam_usb for su -->
		<!--
		<service id="su">
			<option name="enable">false</option>
		</service>
		-->

		<!-- Speed up hotplug events by disabling one time pads
		     for pusb_hotplug.
		-->
		<!--
		<service id="pusb_hotplug">
			<option name="one_time_pad">false</option>
		</service>
		-->
	</services>
</configuration>