<?xml version="1.0" ?><!-- pamusb.conf: Configuration file for pam_usb. See http://www.pamusb.org/doc/configuring --><configuration> <!-- Default options --> <defaults> <!-- Example: <option name="debug">true</option> --> </defaults> <!-- Device settings --> <devices> <!-- Example: Note: You should use pamusb-conf to add devices automatically. <device id="MyDevice"> <vendor>SanDisk Corp.</vendor> <model>Cruzer Titanium</model> <serial>SNDKXXXXXXXXXXXXXXXX</serial> <volume_uuid>6F6B-42FC</volume_uuid> <option name="probe_timeout">10</option> </device> --> </devices> <!-- User settings --> <users> <!-- Note: Use pamusb-conf to add a user, then you can tweak manually the configuration here if needed. --> <!-- Example: Authenticate user scox using "MyDevice", and configure pamusb-agent to automatically start/stop gnome-screensaver on key insertion and removal: <user id="scox"> <device>MyDevice</device> <option name="quiet">true</option> <agent event="lock">gnome-screensaver-command -\-lock</agent> <agent event="unlock">gnome-screensaver-command -\-deactivate</agent> </user> Configure user root to authenticate using MyDevice, but update one time pads at every login (default is 1 hour): <user id="root"> <device>MyDevice</device> <option name="pad_expiration">0</option> </user> --> </users> <!-- Services settings (e.g. gdm, su, sudo...) --> <services> <!-- Example: Speed up hotplugging by disabling one time pads --> <!-- <service id="pamusb-agent"> <option name="one_time_pad">false</option> </service> --> <!-- Disable output for 'su' (needed for gksu) --> <!-- <service id="su"> <option name="quiet">true</option> </service> --> </services> </configuration>