Ryan Hughes
5683750b29
Four corrections to the omarchy-settings transition: - bin/omarchy-update-system-pkgs: pass --overwrite for the 13 paths omarchy-settings now owns. Existing Omarchy installs would otherwise fail pacman conflict checks on the upgrade that ships the package (the files exist as unowned filesystem entries from the previous install scripts). The flags are no-ops once the transition release is everyone's baseline; remove then. - config/mimeapps.list: drop the HEY.desktop mailto mapping. HEY.desktop is generated by install/packaging/webapps.sh at install time, not shipped under applications/, so it isn't valid for a fresh /etc/skel user before the installer runs. - install/config/mimetypes.sh: add 'xdg-mime default HEY.desktop x-scheme-handler/mailto' as a runtime op since the mapping no longer lives in mimeapps.list. - install/config/increase-lockout-limit.sh: delete existing pam_faillock.so authsucc lines before re-adding, so re-running the installer doesn't duplicate the authsucc entry in /etc/pam.d/sddm-autologin.
16 lines
1.0 KiB
Bash
16 lines
1.0 KiB
Bash
# The faillock.conf side ships via the omarchy-settings etc-overrides
|
|
# (deny = 10). The two PAM file edits below remain a script because
|
|
# /etc/pam.d/system-auth and /etc/pam.d/sddm-autologin are upstream-owned
|
|
# and the changes are insertions, not full-file overrides.
|
|
|
|
# Increase lockout limit to 10 and decrease timeout to 2 minutes
|
|
sudo sed -i 's|^\(auth\s\+required\s\+pam_faillock.so\)\s\+preauth.*$|\1 preauth silent deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
|
|
sudo sed -i 's|^\(auth\s\+\[default=die\]\s\+pam_faillock.so\)\s\+authfail.*$|\1 authfail deny=10 unlock_time=120|' "/etc/pam.d/system-auth"
|
|
|
|
# Ensure lockout limit is reset on restart.
|
|
# Delete BOTH the preauth and authsucc pam_faillock lines before re-adding
|
|
# authsucc, so re-running the installer doesn't duplicate the authsucc line.
|
|
sudo sed -i '/pam_faillock\.so preauth/d' /etc/pam.d/sddm-autologin
|
|
sudo sed -i '/pam_faillock\.so authsucc/d' /etc/pam.d/sddm-autologin
|
|
sudo sed -i '/auth.*pam_permit\.so/a auth required pam_faillock.so authsucc' /etc/pam.d/sddm-autologin
|