Configured mpre fingerprint settings, also for security

This commit is contained in:
2026-03-11 15:53:00 +01:00
parent 8dba82f523
commit 059b424d87

View File

@ -183,6 +183,11 @@
openssh.enable = true;
};
systemd.services.fprintd = {
wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "simple";
};
fonts = {
packages = with pkgs; [
font-awesome
@ -301,8 +306,12 @@
sudo.wheelNeedsPassword = false;
pam.services = {
login.fprintAuth = true;
sudo.fprintAuth = true;
sddm.fprintAuth = false; #Because of the bug with 30 seconds on sddm login
sddm-autologin.fprintAuth = false; #Same as above
login.fprintAuth = false;
sudo.fprintAuth = false; #Disabled because of security risk: https://nvd.nist.gov/vuln/detail/cve-2024-37408
kscreenlocker.fprintAuth = true;
polkit-1.fprintAuth = false; #Disabled because of security risk: https://nvd.nist.gov/vuln/detail/cve-2024-37408
kde.fprintAuth = false;
hyprlock = {};
};