phosphor-service-lock

PAM authentication and Wayland session-lock lifecycle.

Authenticates the session user through PAM and coordinates the ext-session-lock-v1 lock state with the compositor. It is the state-machine layer over phosphor-wayland's SessionLock client and a PAM backend, both composed privately. PAM transactions run off the GUI thread one at a time, and the password is wiped after use and never logged. A lock surface drives LockService: lock() asks the compositor to lock and unlock(password) authenticates and releases it.

Full API →

Key types

LockService
Drives the Unlocked → Locking → Locked → Authenticating state machine; lock / unlock.
PamAuthenticator
Standalone credential check: authenticate(user, password) runs PAM off the GUI thread.

Dependencies

See also

phosphor-wayland
Composes the SessionLock primitive.
phosphor-service-idle
Can drive lock() when an idle stage fires.

References