[Tails-dev] ***SPAM*** group change on login

Hello all.

As part of tails-greeter we need to make sure that:
a) user who entered password is in 'sudo' group
b) user who didn't is not in 'sudo' group

That work rather nicely with adduser\deluser combination but ONLY on 2-nd login.

Could you advice the way to make it work in current session?

Right now it's executed as part of PostLogin code. Maybe there's some PAM-magic which
could help us?
Any other suggestions?

thanks,
Max.