configure: add --enable-pam

configure.ac

@@ -607,7 +607,14 @@ else
 fi
 AM_CONDITIONAL([IS_BIONIC], [test "x$is_bionic" = "xyes"])
 
-AC_ARG_WITH(
+# Configuration examples
+AC_ARG_ENABLE([pam],
+	[AC_HELP_STRING([--enable-pam], [enable pam module [default=no]])],
+	[], [enable_pam=no])
+AM_CONDITIONAL([ENABLE_PAM], [test "x$enable_pam" = "xyes"])
+
+AM_COND_IF([ENABLE_PAM],
+	[AC_ARG_WITH(
 		[pamdir],
 		[AS_HELP_STRING([--with-pamdir=PATH],[Specify the directory where PAM modules are stored,
 							or "none" if PAM modules are not to be built])],
@@ -619,10 +626,11 @@ AC_ARG_WITH(
 				pamdir="\$(libdir)/security"
 			fi
 		]
-)
+	)])
 
 AM_CONDITIONAL([HAVE_PAM], [test x"$pamdir" != "xnone"])
-if test "z$pamdir" != "znone"; then
+AM_COND_IF([ENABLE_PAM],
+	[if test "z$pamdir" != "znone"; then
 		AC_ARG_VAR([PAM_CFLAGS], [C compiler flags for pam])
 		AC_ARG_VAR([PAM_LIBS], [linker flags for pam])
 		AC_CHECK_LIB(
@@ -634,7 +642,7 @@ if test "z$pamdir" != "znone"; then
 
 		AC_SUBST(PAM_LIBS)
 		AC_SUBST([pamdir])
-fi
+	fi])
 
 # Some systems lack PR_CAPBSET_DROP definition => HAVE_DECL_PR_CAPBSET_DROP
 AC_CHECK_DECLS([PR_CAPBSET_DROP], [], [], [#include <sys/prctl.h>])
@@ -956,6 +964,7 @@ Security features:
  - SELinux: $enable_selinux
 
 PAM:
+ - PAM module: $enable_pam
  - cgroup PAM module: $pamdir
 
 Bindings:

src/lxc/Makefile.am

@@ -305,6 +305,7 @@ init_lxc_static_LDADD = @CAP_LIBS@
 init_lxc_static_CFLAGS = $(AM_CFLAGS) -DNO_LXC_CONF
 endif
 
+if ENABLE_PAM
 if HAVE_PAM
 pam_LTLIBRARIES = pam_cgfs.la
 pam_cgfs_la_SOURCES = pam/pam_cgfs.c macro.h
@@ -312,6 +313,7 @@ pam_cgfs_la_CFLAGS = $(AM_CFLAGS)
 pam_cgfs_la_LIBADD = $(AM_LIBS) $(PAM_LIBS) -L$(top_srcdir)
 pam_cgfs_la_LDFLAGS = $(AM_LDFLAGS) -module -avoid-version -shared
 endif
+endif
 
 install-exec-local: install-libLTLIBRARIES
 	mkdir -p $(DESTDIR)$(datadir)/lxc
@@ -327,6 +329,7 @@ install-exec-hook:
 
 uninstall-local:
 	$(RM) $(DESTDIR)$(libdir)/liblxc.so*
+if ENABLE_PAM
 if HAVE_PAM
 	$(RM) $(DESTDIR)$(pamdir)/pam_cgfs.so*
 
@@ -334,3 +337,4 @@ install-data-hook: install-pamLTLIBRARIES
 	$(RM) "$(DESTDIR)$(pamdir)/pam_cgfs.la"
 	$(RM) "$(DESTDIR)$(pamdir)/pam_cgfs.a"
 endif
+endif