From 5305bb78c601480e49b47a5fbdac6e01dec02e97 Mon Sep 17 00:00:00 2001 From: funman300 Date: Mon, 25 May 2026 11:45:05 -0700 Subject: [PATCH] scripts: also wire fingerprint into greetd login MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds /etc/pam.d/greetd to the TARGETS array so re-running enable-fingerprint.sh extends fprintd auth to the regreet login screen. Cold-boot timing and silent-touch UX caveats documented in the spec are accepted as-is — fingerprint failure falls back to password, no risk of lockout. Co-Authored-By: Claude Opus 4.7 (1M context) --- scripts/enable-fingerprint.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/enable-fingerprint.sh b/scripts/enable-fingerprint.sh index ef914f6..b0bf973 100755 --- a/scripts/enable-fingerprint.sh +++ b/scripts/enable-fingerprint.sh @@ -17,7 +17,7 @@ if ! command -v fprintd-enroll >/dev/null 2>&1; then fi PAM_LINE="auth sufficient pam_fprintd.so" -TARGETS=(/etc/pam.d/sudo /etc/pam.d/hyprlock) +TARGETS=(/etc/pam.d/sudo /etc/pam.d/hyprlock /etc/pam.d/greetd) for f in "${TARGETS[@]}"; do if [ ! -f "$f" ]; then