gdm-fingerprint

1 files changed, 20 insertions, 0 deletions

diff --git a/hel.nix b/hel.nix
index 7b94e48e..3f2772fc 100644
--- a/hel.nix
+++ b/hel.nix
@@ -623,6 +623,26 @@
     '';
   };
 
+  security.pam.services = {
+    gdm-fingerprint.text = ''
+      auth     requisite      pam_nologin.so
+      auth     required       pam_env.so envfile=${config.system.build.pamEnvironment}
+
+      auth     required       pam_succeed_if.so uid >= 1000 quiet
+      auth     required       ${pkgs.fprintd}/lib/security/pam_fprintd.so
+      auth     optional       ${pkgs.gnome3.gnome-keyring}/lib/security/pam_gnome_keyring.so
+
+      account  sufficient     pam_unix.so   
+      password required       ${pkgs.fprintd}/lib/security/pam_fprintd.so
+
+      session  required       pam_env.so envfile=${config.system.build.pamEnvironment}
+      session  required       pam_unix.so
+      session  required       pam_loginuid.so
+      session  optional       ${pkgs.systemd}/lib/security/pam_systemd.so
+      session  optional       ${pkgs.gnome3.gnome-keyring}/lib/security/pam_gnome_keyring.so auto_start
+    '';
+  };
+
   system = {
     stateVersion = "16.09";
   };