Consider adding environment variables from PAM.

[Duncaen]

Get environment variables from pam modules with pam_getenvlist or pam_getenv. Should doas keep all variables or only those that are specified in doas.conf by keepenv?

[escondida]

Personally, I'd argue that keepenv is probably better, to prevent accidentally leaking variables that could have unintended side effects.

[PaulGrandperrin]

Hi, I just wrote about problems that happen on NixOS because of this issue: https://github.com/NixOS/nixpkgs/issues/158988

Would it be possible to reconsider ?

[PaulGrandperrin]

Maybe I can try writing a PR if you want :)