Sif: security pam

instances/sif/configuration.nix

@@ -322,11 +322,6 @@
     };
   };
 
-  # FPRINTD
-  security = {
-    rtkit.enable = true;
-  };
-
   # Clamav
   # services.clamav = {
   #   daemon.enable = true;
@@ -347,29 +342,19 @@
     podman.enable = true;
     # virtualbox.host.enable = true;
   };
+  security = {
+    # FPRINTD
+    rtkit.enable = true;
 
-  security.sudo.extraConfig = ''
+    sudo.extraConfig = ''
       Defaults pwfeedback
     '';
-  security.pam.services = {
+
+    pam.services = {
       xscreensaver.fprintAuth = true;
       gdm = { enableGnomeKeyring = true; fprintAuth = true; };
-    # sudo = {
-    #   fprintAuth = true;
-    #   rootOK = true;
-    #   forwardXAuth = true;
-    #   logFailures = true;
-    #   text = ''
-    #     auth    [success=ok default=bad]  pam_unix.so nullok_secure
-    #     auth    [success=2 default=bad]   pam_fprintd.so
-    #   '';
-    #   # enableGnomeKeyring = true;
-    #   # text = ''
-    #   #   auth		include		system-auth-fprintd
-    #   #   account		include		system-auth
-    #   #   session		include		system-auth
-    #   # '';
-    # };
+      git = { gnupg.enable = true; enableGnomeKeyring = true; };
+    };
   };
 
   nixpkgs.config = {