Sample Header Ad - 728x90

How to setup PAM fprint grosshack with GDM?

1 vote
0 answers
327 views
I was following the login configurations of [fprint - ArchWiki](https://wiki.archlinux.org/title/fprint#Login_configuration) , and I wanted to use pam-fprint-grosshack with GDM. I couldn't find any information about it, because the wiki says at the beginning of the section "If you use GDM, the fingerprint-option is already available in the login menu (if not add yourself to the input user group). You can skip this section!". So I tried it myself and came to this conclusion, which indeed, works:
#%PAM-1.0

auth       required                    pam_shells.so
auth       requisite                   pam_nologin.so
auth       requisite                   pam_faillock.so      preauth

auth       sufficient                  pam_fprintd_grosshack.so
auth       sufficient                  pam_unix.so try_first_pass nullok
#auth       required                    pam_fprintd.so

auth       optional                    pam_permit.so
auth       required                    pam_env.so
auth       [success=ok default=1]      pam_gdm.so
auth       optional                    pam_gnome_keyring.so

account    include                     system-local-login

password   required                    pam_deny.so

session    include                     system-local-login
session    optional                    pam_gnome_keyring.so auto_start
My question at this point is, written this way, have I compromised the security of GDM in any way? I have never written a PAM configuration before.
Asked by Giuseppe (151 rep)
Jun 6, 2024, 01:55 PM