$HOME/.pam_environment 的行为，可以直接升级不必担心环境变量丢失造成的问题。https://github.com/archlinux/svntogit-packages/commit/2d5af94ae55a5c98837ce9631f331ad2aad32bb3#diff-8d0411b338c83cd8cd8ad9d9db127101
Post #165
6.38K
Arch Linux Chinese Messages 使用 $HOME/.pam_environment 设置环境变量的用户注意啦！由于 CVE-2010-4708, pam 上游在 1.4.0 版本中设置了默认不读取用户的环境变量设置，需要用户自行更换环境变量设置位置或恢复原默认读取行为。 ref: Linux 的环境变量怎么设 依云's Blog
core/pambase 20200721.1-2 对 pam_env 开启了 user_readenv=1 ，保持原本读取
https://github.com/archlinux/svntogit-packages/commit/2d5af94ae55a5c98837ce9631f331ad2aad32bb3#diff-8d0411b338c83cd8cd8ad9d9db127101
GitHub Remove options not supported by faillock, Drop sha512 option to pam_u… · archlinux/svntogit-packages@2d5af94 …nix, Fix pam_faillock support, Pass option user_readenv=1 to pam_env at end of session in system-login
git-svn-id: file:///srv/repos/svn-packages/svn@393562 eb2447ed-0c53-47e4-bac8-5bc4a241df78 https://github.com/archlinux/svntogit-packages/commit/2d5af94ae55a5c98837ce9631f331ad2aad32bb3#diff-8d0411b338c83cd8cd8ad9d9db127101