Switch to polkit-gnome to make fingerprint authentication work better

hyprpolkit was not designed well for fingerprint authentication. It
doesn't allow you to easily deal with both fingerprints and passwords in
the same configuration.
This commit is contained in:
David Heinemeier Hansson
2025-07-09 20:26:43 -04:00
parent 5f46b7560e
commit d2598464d6
4 changed files with 24 additions and 5 deletions

View File

@ -2,9 +2,23 @@
yay -S --noconfirm --needed fprintd libfprint yay -S --noconfirm --needed fprintd libfprint
# Add fingerprint authentication as a sufficient option # Add fingerprint authentication as an option for sudo
grep -q 'pam_fprintd.so' /etc/pam.d/system-auth || if ! grep -q pam_fprintd.so /etc/pam.d/sudo; then
sudo sed -i '/^auth.*pam_unix.so/ i auth sufficient pam_fprintd.so' /etc/pam.d/system-auth sudo sed -i '1i auth sufficient pam_fprintd.so' /etc/pam.d/sudo
fi
# Add fingerprint authentication as an option for hyprpolkitagent
if [ ! -f /etc/pam.d/polkit-1 ] || ! grep -q pam_fprintd.so /etc/pam.d/polkit-1; then
sudo tee /etc/pam.d/polkit-1 >/dev/null <<'EOF'
auth required pam_unix.so
auth optional pam_fprintd.so
account required pam_unix.so
password required pam_unix.so
session required pam_unix.so
EOF
fi
systemctl --user restart hyprpolkitagent systemctl --user restart hyprpolkitagent
# Enroll the first finger # Enroll the first finger

View File

@ -1,4 +1,5 @@
exec-once = hypridle & mako & waybar & fcitx5 exec-once = hypridle & mako & waybar & fcitx5
exec-once = swaybg -i ~/.config/omarchy/current/background -m fill exec-once = swaybg -i ~/.config/omarchy/current/background -m fill
exec-once = systemctl --user start hyprpolkitagent # exec-once = systemctl --user start hyprpolkitagent
exec-once = /usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1
exec-once = wl-clip-persist --clipboard regular exec-once = wl-clip-persist --clipboard regular

View File

@ -1,5 +1,5 @@
yay -S --noconfirm --needed \ yay -S --noconfirm --needed \
hyprland hyprshot hyprpicker hyprlock hypridle hyprpolkitagent hyprland-qtutils \ hyprland hyprshot hyprpicker hyprlock hypridle polkit-gnome hyprland-qtutils \
wofi waybar mako swaybg \ wofi waybar mako swaybg \
xdg-desktop-portal-hyprland xdg-desktop-portal-gtk xdg-desktop-portal-hyprland xdg-desktop-portal-gtk

4
migrations/1752104271.sh Normal file
View File

@ -0,0 +1,4 @@
yay -S --noconfirm --needed polkit-gnome
systemctl --user stop hyprpolkitagent
systemctl --user disable hyprpolkitagent
yay -Rns --noconfirm hyprpolkitagent