diff --git a/build_files/03_post_desktop.sh b/build_files/03_post_desktop.sh
index 7ee58db..397f452 100755
--- a/build_files/03_post_desktop.sh
+++ b/build_files/03_post_desktop.sh
@@ -46,3 +46,5 @@ dnf5 install -y https://launchpad.net/veracrypt/trunk/1.26.24/+download/veracryp
 
 dnf5 remove  -y rpmfusion-free-release rpmfusion-nonfree-release
 dnf5 clean all
+
+cp /ctx/login /etc/pam.d
diff --git a/build_files/login b/build_files/login
new file mode 100644
index 0000000..3e790b3
--- /dev/null
+++ b/build_files/login
@@ -0,0 +1,18 @@
+#%PAM-1.0
+auth       substack     system-auth
+auth       include      postlogin
+auth       optional	pam_gnome_keyring.so
+account    required     pam_nologin.so
+account    include      system-auth
+password   include      system-auth
+# pam_selinux.so close should be the first session rule
+session    required     pam_selinux.so close
+session    required     pam_loginuid.so
+# pam_selinux.so open should only be followed by sessions to be executed in the user context
+session    required     pam_selinux.so open
+session    required     pam_namespace.so
+session    optional     pam_keyinit.so force revoke
+session    include      system-auth
+session    include      postlogin
+-session   optional     pam_ck_connector.so
+session    optional	pam_gnome_keyring.so auto_start