Configured mpre fingerprint settings, also for security

This commit is contained in:
2026-03-11 15:53:00 +01:00
parent 8dba82f523
commit 059b424d87

View File

@ -183,6 +183,11 @@
openssh.enable = true; openssh.enable = true;
}; };
systemd.services.fprintd = {
wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "simple";
};
fonts = { fonts = {
packages = with pkgs; [ packages = with pkgs; [
font-awesome font-awesome
@ -301,8 +306,12 @@
sudo.wheelNeedsPassword = false; sudo.wheelNeedsPassword = false;
pam.services = { pam.services = {
login.fprintAuth = true; sddm.fprintAuth = false; #Because of the bug with 30 seconds on sddm login
sudo.fprintAuth = true; sddm-autologin.fprintAuth = false; #Same as above
login.fprintAuth = false;
sudo.fprintAuth = false; #Disabled because of security risk: https://nvd.nist.gov/vuln/detail/cve-2024-37408
kscreenlocker.fprintAuth = true;
polkit-1.fprintAuth = false; #Disabled because of security risk: https://nvd.nist.gov/vuln/detail/cve-2024-37408
kde.fprintAuth = false; kde.fprintAuth = false;
hyprlock = {}; hyprlock = {};
}; };