glk/pefs — pull request #6 by DragonSA (2011-12-04 16:56:25+00:00)
Title: Add pam session tracking to delete keys on session expiry

These commits have the following changes:
1) Allow pam_pefs to be build outside of the FreeBSD source tree (i.e. from a port)
2) Only ask for a password if the user home directory has pefs mounted
3) Adds a pam option `delkeys' that will remove all keys once all user sessions have expired

Due to the assumption used to check if the session track file had corrupted (i.e. system panic) only one password can be used when logging in, although there after any number of keys may be used, and all will be removed once the last session has expired.