Skip to content

Commit 8a715bb

Browse files
committed
fix: remove PAM fingerprint config to prevent login issues
Remove PAM fingerprint authentication from hardware profile to avoid breaking GDM password login as described in nixpkgs#171136. Users should configure PAM in their host config for safe fingerprint auth.
1 parent 1369abb commit 8a715bb

File tree

1 file changed

+2
-8
lines changed

1 file changed

+2
-8
lines changed

lenovo/thinkpad/t14/intel/gen6/default.nix

Lines changed: 2 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -32,13 +32,7 @@
3232
services.throttled.enable = lib.mkDefault false;
3333

3434
# Enable fingerprint reader support
35+
# NOTE: PAM configuration should be done in host config to avoid login issues
36+
# See: https://github.com/NixOS/nixpkgs/issues/171136
3537
services.fprintd.enable = lib.mkDefault true;
36-
37-
# Enable PAM fingerprint authentication for login and unlock
38-
security.pam.services = {
39-
login.fprintAuth = lib.mkDefault true;
40-
xscreensaver.fprintAuth = lib.mkDefault true;
41-
sudo.fprintAuth = lib.mkDefault true;
42-
su.fprintAuth = lib.mkDefault true;
43-
};
4438
}

0 commit comments

Comments
 (0)