diff --git a/modules/configuration.nix b/modules/configuration.nix index 9bd06f9..8eca3dd 100644 --- a/modules/configuration.nix +++ b/modules/configuration.nix @@ -363,15 +363,15 @@ in { pam.services = let fprintPam = '' - auth sufficient ${pam-fprint-grosshack-pkg}/lib/security/pam_fprintd_grosshack.so - auth sufficient pam_unix.so try_first_pass nullok - auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so timeout=0 - account required pam_unix.so - password required pam_deny.so + auth sufficient ${pam-fprint-grosshack-pkg}/lib/security/pam_fprintd_grosshack.so + auth sufficient pam_unix.so try_first_pass nullok + auth sufficient ${pkgs.fprintd}/lib/security/pam_fprintd.so timeout=0 + account required pam_unix.so + password required pam_deny.so - session required pam_unix.so - session optional ${pkgs.systemd}/lib/security/pam_systemd.so - ''; + session required pam_unix.so + session optional ${pkgs.systemd}/lib/security/pam_systemd.so + ''; in { login.fprintAuth = false; sudo.fprintAuth = false; #Disabled because of security risk: https://nvd.nist.gov/vuln/detail/cve-2024-37408