[$] Adding a “duress” password with PAM Duress

Post Syndicated from original https://lwn.net/Articles/867158/rss

Users often store a lot of sensitive information on their computers—from
credentials to banned texts to family photos—that they might
normally expect to be
protected by the login password of their account. Under some
circumstances, though, users can be required to log into their system so
that some third party (e.g. government agent) can examine and potentially
copy said data. A new project, PAM Duress, provides a way
to add other passwords to an account, each with its own behavior, which
might be a way to avoid granting full access to the system, though the
legality is in question.