#!/bin/bash
# add invocation of pam_exec to post-login actions

sed '/^##pam_exec {{{/,/^##pam_exec }}}/d' -i /etc/pam.d/postlogin-ac
cat >>/etc/pam.d/postlogin-ac <<END
##pam_exec {{{
# skip for root
session     [default=1 success=ignore] pam_succeed_if.so quiet uid ne 0
session     required      pam_exec.so quiet stdout /usr/libexec/pam-postlogin-exec.sh
##pam_exec }}}
END