dff39dc42d
GDM/gnome-shell expects being able to tell apart various failure modes from the pam_fprintd.so. However, using "sufficient" means that the generic error code from pam_deny.so will be returned. Use default=bad, to ensure that the failing error code from pam_fprintd.so is correctly exposed to GDM.
20 lines
714 B
Plaintext
20 lines
714 B
Plaintext
#%PAM-1.0
|
|
# This file is auto-generated.
|
|
# User changes will be destroyed the next time authselect is run.
|
|
auth required pam_env.so
|
|
auth [success=done default=bad] pam_fprintd.so
|
|
auth required pam_deny.so
|
|
|
|
account required pam_unix.so
|
|
account sufficient pam_localuser.so
|
|
account sufficient pam_succeed_if.so uid < 500 quiet
|
|
account required pam_permit.so
|
|
|
|
password required pam_deny.so
|
|
|
|
session optional pam_keyinit.so revoke
|
|
session required pam_limits.so
|
|
-session optional pam_systemd.so
|
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
|
session required pam_unix.so
|