nixos/plasma6: fix smartcard unlocking

Similar to fprint changes, ensure that kde-smartcard is dedicated to
smartcard and other two PAM configs don't use smartcard.
This commit is contained in:
Gary Guo
2025-12-07 15:36:36 +00:00
parent d7036ba1d9
commit 4578ec70df
@@ -331,9 +331,16 @@ in
# "kde" must not have fingerprint authentication otherwise it can block password login.
# See https://github.com/NixOS/nixpkgs/issues/239770 and https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/163.
fprintAuth = false;
p11Auth = false;
};
kde-fingerprint = lib.mkIf config.services.fprintd.enable {
fprintAuth = true;
p11Auth = false;
};
kde-smartcard = lib.mkIf config.security.pam.p11.enable {
p11Auth = true;
fprintAuth = false;
};
kde-fingerprint = lib.mkIf config.services.fprintd.enable { fprintAuth = true; };
kde-smartcard = lib.mkIf config.security.pam.p11.enable { p11Auth = true; };
};
security.wrappers = {