device.policy: Use auth-self-keep for enrollment

When user is requested for enrolling, we should ask for password as
anyone who has physical access to the machine could otherwise enroll
its own fingers, and have access to it.

Fixes #5
This commit is contained in:
Marco Trevisan (Treviño)
2020-11-06 21:55:55 +01:00
committed by Benjamin Berg
parent 4e707f0d31
commit 778a8540aa

View File

@ -25,7 +25,7 @@
<defaults>
<allow_any>no</allow_any>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>
<allow_active>auth_self_keep</allow_active>
</defaults>
</action>