Hi, Jonas On Sun, Jun 17, 2012 at 4:52 PM, Jonas Jelten <jel...@in.tum.de> wrote: > You have to use fprintd and for pam pam_fprintd.so. > > This works for me (X220t) but does have some 'features' you might not > want to have. > > e.g. you cannot stop the fprintd authentication with ^C and fallback to > password, you have to wait for the (unconfigurable) timeout (very > annoying over ssh). > > also, you can store your fingerprint with the fprintd-enroll command, > but this does not need a password. This means: ANYONE can just store HIS > fingerprint under your account by opening a terminal with > fprintd-enroll, and then execute sudo or whatever pam-auth program. > > -> we should require the user's password to update the users fingerprint.
Hey, root can do everything and with sudo you're providing root privileges to the process you're invoking. Regards Vasily _______________________________________________ fprint mailing list fprint@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/fprint
