--- ./src/helper/Backend.cpp.ORIG	2017-12-05 17:00:16.000000000 +0100

+++ ./src/helper/Backend.cpp	2019-10-27 09:09:12.407454000 +0100

@@ -29,6 +29,10 @@

 #include <QtCore/QProcessEnvironment>

 #include <pwd.h>

+#if defined(Q_OS_FREEBSD)

+#include <sys/types.h>

+#include <login_cap.h>

+#endif /* defined(Q_OS_FREEBSD) */

 namespace SDDM {

     Backend::Backend(HelperApp* parent)

@@ -70,6 +74,19 @@

                         .arg(mainConfig.X11.UserAuthFile.get());

                 env.insert(QStringLiteral("XAUTHORITY"), value);

             }

+#if defined(Q_OS_FREEBSD)

+	    /* get additional environment variables via setclassenvironment();

+	       this needs to be done here instead of in UserSession::setupChildProcess

+	       as the environment for execve() is prepared here */

+	    login_cap_t *lc;

+

+	    if ((lc = login_getpwclass(pw)) != 0) {

+		setclassenvironment(lc, pw, 1);		/* path variables */

+		setclassenvironment(lc, pw, 0);		/* non-path variables */

+		/* copy all environment variables that are now set */

+		env.insert(QProcessEnvironment::systemEnvironment());

+	    }

+#endif /* defined(Q_OS_FREEBSD) */

             // TODO: I'm fairly sure this shouldn't be done for PAM sessions, investigate!

             m_app->session()->setProcessEnvironment(env);

         }

--- ./src/helper/CMakeLists.txt.ORIG	2017-12-05 17:00:16.000000000 +0100

+++ ./src/helper/CMakeLists.txt	2019-10-26 13:31:46.619098000 +0200

@@ -37,6 +37,9 @@

 else()

     target_link_libraries(sddm-helper crypt)

 endif()

+if("${CMAKE_SYSTEM_NAME}" STREQUAL "FreeBSD")

+    target_link_libraries(sddm-helper util)

+endif()

 if(JOURNALD_FOUND)

     target_link_libraries(sddm-helper ${JOURNALD_LIBRARIES})

--- ./src/helper/UserSession.cpp.ORIG	2019-10-27 09:01:43.058761000 +0100

+++ ./src/helper/UserSession.cpp	2019-10-27 09:05:06.270407000 +0100

@@ -32,6 +32,9 @@

 #include <grp.h>

 #include <unistd.h>

 #include <fcntl.h>

+#if defined(Q_OS_FREEBSD)

+#include <login_cap.h>

+#endif /* defined(Q_OS_FREEBSD) */

 namespace SDDM {

     UserSession::UserSession(HelperApp *parent)

@@ -110,6 +113,14 @@

         const QByteArray username = qobject_cast<HelperApp*>(parent())->user().toLocal8Bit();

         struct passwd *pw = getpwnam(username.constData());

+#if defined(Q_OS_FREEBSD)

+	/* execve() uses the environment prepared in Backend::openSession(),

+	   therefore environment variables which are set here are ignored. */

+	if (setusercontext(NULL, pw, pw->pw_uid, LOGIN_SETALL) != 0) {

+            qCritical() << "setusercontext(NULL, *, " << pw->pw_uid << ", LOGIN_SETALL) failed for user: " << username;

+            exit(Auth::HELPER_OTHER_ERROR);

+        }

+#else /* defined(Q_OS_FREEBSD) */

         if (setgid(pw->pw_gid) != 0) {

             qCritical() << "setgid(" << pw->pw_gid << ") failed for user: " << username;

             exit(Auth::HELPER_OTHER_ERROR);

@@ -122,6 +133,7 @@

             qCritical() << "setuid(" << pw->pw_uid << ") failed for user: " << username;

             exit(Auth::HELPER_OTHER_ERROR);

         }

+#endif /* defined(Q_OS_FREEBSD) */

         if (chdir(pw->pw_dir) != 0) {

             qCritical() << "chdir(" << pw->pw_dir << ") failed for user: " << username;

             qCritical() << "verify directory exist and has sufficient permissions";