Merge pull request #9873 from Wheel-Smith/fix/polkit-faillock-system-auth

Defer to system-auth in the polkit stack written by fingerprint/FIDO2 setup
This commit is contained in:
David Heinemeier Hansson authored and GitHub committed 2026-10-04 07:37:24 -04:00
commit cb865c2fa4
5 files changed
+296 -8

No files matched your search

+4 -4
View File
@@ -31,11 +31,11 @@ setup_pam_config() {
echo "Creating polkit configuration with FIDO2 authentication..."
sudo tee /etc/pam.d/polkit-1 >/dev/null <<'EOF'
auth sufficient pam_u2f.so cue authfile=/etc/fido2/fido2
auth required pam_unix.so
auth include system-auth
account required pam_unix.so
password required pam_unix.so
session required pam_unix.so
account include system-auth
password include system-auth
session include system-auth
EOF
fi
}
+4 -4
View File
@@ -47,11 +47,11 @@ setup_pam_config() {
sudo tee /etc/pam.d/polkit-1 >/dev/null <<EOF
$fprintd_gate
auth sufficient pam_fprintd.so
auth required pam_unix.so
auth include system-auth
account required pam_unix.so
password required pam_unix.so
session required pam_unix.so
account include system-auth
password include system-auth
session include system-auth
EOF
fi
}