#!/bin/sh

. /etc/control.d/functions

CONFIG=/etc/pam.d/system-auth
CONFIG_LOCAL=/etc/pam.d/system-auth-local
CONFIG_SYSTEM=$(readlink -f "$CONFIG")

[ -f "$CONFIG_LOCAL" ] ||
	CONFIG_LOCAL="$CONFIG"

new_summary "pam_mktemp support in system authentication"

new_subst enabled \
        '^(account|session)[[:space:]]+required[[:space:]]+pam_mktemp.so[[:space:]]*$' \
        's,^#\(\(account\|session\)[[:space:]]\+required[[:space:]]\+pam_mktemp.so[[:space:]]*\)$,\1,'
new_subst disabled \
        '^#(account|session)[[:space:]]+required[[:space:]]+pam_mktemp.so[[:space:]]*$' \
        's,^\(\(account\|session\)[[:space:]]\+required[[:space:]]\+pam_mktemp.so[[:space:]]*\)$,#\1,'

new_help enabled "Enable pam_mktemp support"
new_help disabled "Disable pam_mktemp support"

if is_builtin_mode "$*"; then
	control_subst "$CONFIG" "$*"
else
	control_subst "$CONFIG_LOCAL" "$*" || exit 1
	if [ -f "$CONFIG_SYSTEM" ]; then
		control_subst "$CONFIG_SYSTEM" "$*" || exit 1
	fi
fi