movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 13:40:28 +03:00
Code Activity

nixos/gdm: add fingerprint pam rules

Browse source 
Signed-off-by: John Titor <50095635+JohnRTitor@users.noreply.github.com>
This commit is contained in:
Maxine Aubrey 2024-04-23 18:58:49 +02:00 • committed by John Titor
parent 124ae37067
commit 9d41fe6fcc
No known key found for this signature in database
GPG key ID: 29B0514F4E3C1CC0
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
nixos/modules/services/x11/display-managers/gdm.nix
View file

@ -321,6 +321,22 @@ in
session include login session include login
''; '';
login.fprintAuth = mkIf config.services.fprintd.enable false;
gdm-fingerprint.text = mkIf config.services.fprintd.enable ''
auth required pam_shells.so
auth requisite pam_nologin.so
auth requisite pam_faillock.so preauth
auth required ${pkgs.fprintd}/lib/security/pam_fprintd.so
auth optional pam_permit.so
auth required pam_env.so
auth [success=ok default=1] ${pkgs.gnome.gdm}/lib/security/pam_gdm.so
account include login
password required pam_deny.so
session include login
'';
}; };
}; };