Pasted

# The following was performed on Debian Stretch
#
# See:
#    http://opensc.1086184.n5.nabble.com/eventmgr-tp8093p8094.html
#    https://github.com/OpenSC/pam_pkcs11/blob/master/etc/pkcs11_eventmgr.conf.example
#
# Note: A working PAM integration is required. See:
#    https://pastebin.com/cx6T3L9H
# =====================================================================
 
# Create /etc/pam_pkcs11/pkcs11_eventmgr.conf
# ---------------------------------------------------------------------
pkcs11_eventmgr {
 
    # Run in background.
    daemon = true;
 
    # show debug messages
    debug = false;
    
    # polling time in seconds
    polling_time = 1;
 
    # expire time in seconds
    # default = 0 ( no expire )
    expire_time = 0;
 
    # pkcs11 module to use
    pkcs11_module = /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
 
    #
    # list of events and actions
 
    # Card inserted
    event card_insert {
        # what to do if an action fail?
        # ignore  : continue to next action
        # return  : end action sequence
        # quit    : end program
        on_error = ignore ;
 
        # You can enter several, comma-separated action entries
        # they will be executed in turn
        action = "/usr/bin/xscreensaver-command -deactivate";
    }
 
    # Card has been removed
    event card_remove { 
        on_error = ignore;
        action = "/usr/bin/xscreensaver-command -lock";
    }
 
    # Too much time locked session
    event timeout { 
        on_error = ignore;
        action = "/bin/false";
    }
}
 
# Start /usr/bin/pkcs11_eventmgr on login
# ---------------------------------------------------------------------
#
# Option 1: ~/.xsession
#
# add /usr/bin/pkcs11_eventmgr to the ~/.xsession file
 
# Option 2: add to Window Manager
#
# Example in xfce4:
# 1. Applications > Settings > Session and Startup
# 2. Application Autostart tab > Add...
# 3. Enter a description and "/usr/bin/pkcs11_eventmgr"