nixos/plasma6: fix smartcard unlocking
Similar to fprint changes, ensure that kde-smartcard is dedicated to smartcard and other two PAM configs don't use smartcard.
This commit is contained in:
@@ -331,9 +331,16 @@ in
|
||||
# "kde" must not have fingerprint authentication otherwise it can block password login.
|
||||
# See https://github.com/NixOS/nixpkgs/issues/239770 and https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/163.
|
||||
fprintAuth = false;
|
||||
p11Auth = false;
|
||||
};
|
||||
kde-fingerprint = lib.mkIf config.services.fprintd.enable {
|
||||
fprintAuth = true;
|
||||
p11Auth = false;
|
||||
};
|
||||
kde-smartcard = lib.mkIf config.security.pam.p11.enable {
|
||||
p11Auth = true;
|
||||
fprintAuth = false;
|
||||
};
|
||||
kde-fingerprint = lib.mkIf config.services.fprintd.enable { fprintAuth = true; };
|
||||
kde-smartcard = lib.mkIf config.security.pam.p11.enable { p11Auth = true; };
|
||||
};
|
||||
|
||||
security.wrappers = {
|
||||
|
||||
Reference in New Issue
Block a user